Looking for a security contact at John Deere

Hacker Connect
#1

I’m aware it’s the weekend, but anyone got a contact at John Deere?

Anyone really, just have a vulnerability report to get across.

Have tried the api support email address and the DMing them on Twitter, no response as of yet though.

2 Likes
#2

Discovered the form: IT Security Consulting Form | John Deere US

3 Likes
#3

What a mess that was!

Rule #1 for bounty hunters: don’t engage in extortion

Rule #1 for companies: don’t engage in blackmail

#4

Update:

John Deere now has a HackerOne program.

Currently the program is private but you can request access.

They do not have a bounty, just swag.

#5

Checking back in on this - How did you go @sickcodes?

#6

Ended up speaking at DEF CON about this situation:

1 Like