Looking for a security contact at John Deere

Hacker Connect
1

I’m aware it’s the weekend, but anyone got a contact at John Deere?

Anyone really, just have a vulnerability report to get across.

Have tried the api support email address and the DMing them on Twitter, no response as of yet though.

2 Likes
2

Discovered the form: IT Security Consulting Form | John Deere US

3 Likes
3

What a mess that was!

Rule #1 for bounty hunters: don’t engage in extortion

Rule #1 for companies: don’t engage in blackmail

4

Update:

John Deere now has a HackerOne program.

Currently the program is private but you can request access.

They do not have a bounty, just swag.

5

Checking back in on this - How did you go @sickcodes?

6

Ended up speaking at DEF CON about this situation:

1 Like