8 ms·
Hackers detail vulnerabilities at agtech giants John Deere, Case New Holland
- randomdata 5y ago> "You could permanently denial of service to that farm just by simply over spraying one season, by literally loading up the fertile ground with too many chemicals." Conceivably you could load up the soil with chemicals to an extent that it takes many years for sufficient breakdown to occur. But if you've filled up your tank to spray 100 acres and it runs dry after covering one acre, you're not exactly going to fill up 99 more times.
- scohesc 5y agoIt's something we're going to see time and time again with companies that dominate a non-IT based industry trying to pivot and incorporate IT into their company. I'm not sure how we're going to address these issues. I don't think fines will work. I'm not sure if having laws to maintain security standards will work. It's a multi-faceted issue and I'd love to see what people in any industry can suggest.
- swiley 5y agoClosed firmware and booloaders locked to any keys other than the customer's should be illegal. It's very simple.
- srmarm 5y agoThere was a good write up to this a few months ago with a step by step breakdown of how they went about it - https://sick.codes/leaky-john-deere-apis-serious-food-supply-chain-vulnerabilities-discovered-by-sick-codes-kevin-kenney-willie-cade/ https://sick.codes/leaky-john-deere-apis-serious-food-supply... - well worth a read.
- trynewideas 5y agoYep, see also https://sick.codes/being-root-on-two-agriculture-companies-in-good-faith-maxing-out-the-john-deere-operations-center-worldwide-and-case-industrial-in-brazil/ https://sick.codes/being-root-on-two-agriculture-companies-i... which covers the DEF CON presentation as well as some that didn't make the presentation.