BEST OF THE WEB

Hacker gain root access to John Deere tractors

At the DefCon security conference in Las Vegas on Saturday, a hacker named Sick Codes jailbreak John Deere & Co tractors. This enabled him take control of multiple models through their touchscreens.

Sick Codes findings therefore highlights the security implications of right-to-repair. The right to repair is a proposed government legislation that would allow consumers to repair and modify their own consumer product. The legislation therefore eliminates the requirement that consumers only need to use the services they provide by restricting access to tools and components.

To develop his jailbreak, Sick Codes used numerous generations of John Deere tractor control touchscreen consoles. Models used for this exploit are “2630” and “4240.”

Sick Codes has been experimenting for many months with a number of touchscreen circuit boards to find bypasses for John Deere dealers’ authentication requirements.

The hacker was able to perform a reboot check to restore the device as if it were being retrieved from a certified vendor. He explained that once in such an environment, the system would provide protocols worth more than 1.5 GB to help authorized service providers diagnose problems.

The logs also revealed the path to another potential timing attack that could grant deeper access. Soldering controls directly to the PCB eventually allowed the hacker to bypass the system’s protective mechanisms.

While the approach requires physical access to the PCB, Sick Codes explains that a tool based on the vulnerabilities could be more easily used to execute the jailbreak.

The sources for this piece include an article in Archive.today.

IT World Canada Staff
IT World Canada Staffhttp://www.itworldcanada.com/
The online resource for Canadian Information Technology professionals.

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

ITW in your inbox

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

More Best of The Web