Sick Codes jailbroke John Deere, found outdated Linux/WinCE with LTE modems

https://ni.hil.ist/@mu/108824144772569843

by pabs3 • 4 years ago

90 11 4 years ago

ni.hil.ist

Semaphor• 4 years ago

Relevant from yesterday:

A New Jailbreak for John Deere Tractors Rides the Right-to-Repair Wave: https://news.ycombinator.com/item?id=32457590

Sick Codes has jailbroken a John Deere: https://news.ycombinator.com/item?id=32461238

arise• 4 years ago

Terrifying... if you can brick a nation's tractors at the right moment you could put a large dent in their agricultural productivity.

naikrovek• 4 years ago

read the thing, jeez.

requires physical access AND disassembly.

tyingq• 4 years ago

Though jailbreaking the first one might mean you later find a backdoor or exploit that works on all, maybe even remotely. Getting local access usually unearths other hidden issues.

Being that it's an old, apparently unpatched "Wind River Linux 8", I'm guessing some open vulnerabilities exist.

arnaudsm• 4 years ago

It already happened : https://www.theregister.com/2022/05/02/ukrainian_tractors_de...

Double_a_92• 4 years ago

What's the issue with running outdated software in a closed ecosystem? It's not like you can remote connect to those tractors over the internet...

moomin• 4 years ago

It’s not an issue, it’s an opportunity for the owners of the tractors.

dirtyid• 4 years ago

It’s not an issue

Not specifically related to the jailbreak, but John Deere bricked tractors Russia stole from Ukraine. If their code is as shoddy as this jailbreak suggest, whose to say they can't be hacked to kill switch ag equipment during harvest season.

vbezhenar• 4 years ago

LTE suggests that you can actually connect.

edf13• 4 years ago

Likely over a private APN… still not 100% secure but helps.

Karupan• 4 years ago

Is it really surprising at this point? Most closed systems won't really bother fixing things that ain't broken, especially if its not connected to the internet. If the machinery can be hacked and commandeered remotely, we know the company will take it "very seriously" [0]

[0] https://twitter.com/david_colombo_/status/148063230404533043...

Sick Codes jailbroke John Deere, found outdated Linux/WinCE with LTE modems

Related Stories