Jason Parker (he/they)

#infosec researcher | independent #journalist | #software #developer | #telephony #engineer | #opensource contributor

The foremost expert on court #cybersecurity vulnerabilities? https://govtech.cc

#IDN/#Punycode testing.

https://ဪ.com
https://ㆲ.com
https://የ.com
https://ގ.com
https://ჷ.com
https://ꩳ.com *
https://ꩰ.com *
https://ྌ.com *
https://ㆴ.com
https://ۦ.com
https://ۦ.ws
https://ⴭ.ws/

(* = Mastodon bug)

Jeltz: https://jeltz.org
Disclosures: https://govtech.cc
440 Lab: https://440lab.com
Linktree: https://linktr.ee/northantara
Muck Rack: https://muckrack.com/northantara
Oink: https://oink.ing
Gravitar: https://gravatar.com/northantara
Verifibation™️: https://v.jeltz.org
IDN: https://ꩰ.com
IDN: https://ဪ.com
IDN: https://ㆲ.com
IDN: https://የ.com
IDN: https://ގ.com
IDN: https://ჷ.com
IDN: https://ꩳ.com
IDN: https://ㆴ.com
IDN: https://ۦ.com
IDN: https://ۦ.ws
IDN: https://ྌ.com

Public Key

npub1re49l7uznmsuxchckysh23gd7qcrm33qlkzttqulxzwth9jwh7rq0amq7d

NIP-05 Address

north_at_xn--8r9a.com@momostr.pink

Profile Code

nprofile1qqspu6jllwpfacwrvtutzgt4g5xlqvpaccs0mp94sw0np89mje8tlpspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsad26w5

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1re49l7uznmsuxchckysh23gd7qcrm33qlkzttqulxzwth9jwh7rq0amq7d

Show more details

Published at

2026-10-26T01:11:13Z

Kind type

0 Metadata

Event JSON

{ "id": "c0dfdd8a15198f635adc88fc8882ab1d936a09692c2a968638721d1953825bc4", "pubkey": "1e6a5ffb829ee1c362f8b12175450df0303dc620fd84b5839f309cbb964ebf86", "created_at": 1792977073, "kind": 0, "tags": [ [ "t", "journalist" ], [ "t", "infosec" ], [ "t", "opensource" ], [ "t", "cybersecurity" ], [ "t", "idn" ], [ "t", "telephony" ], [ "t", "engineer" ], [ "t", "software" ], [ "t", "developer" ], [ "proxy", "https://xn--8r9a.com/users/north", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://xn--8r9a.com/users/north", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Jason Parker (he/they)\",\"about\":\"#infosec researcher | independent #journalist | #software #developer | #telephony #engineer | #opensource contributor\\n\\nThe foremost expert on court #cybersecurity vulnerabilities? https://govtech.cc\\n\\n#IDN/#Punycode testing.\\n\\nhttps://ဪ.com\\nhttps://ㆲ.com\\nhttps://የ.com\\nhttps://ގ.com\\nhttps://ჷ.com\\nhttps://ꩳ.com *\\nhttps://ꩰ.com *\\nhttps://ྌ.com *\\nhttps://ㆴ.com\\nhttps://ۦ.com\\nhttps://ۦ.ws\\nhttps://ⴭ.ws/\\n\\n(* = Mastodon bug)\\n\\nJeltz: https://jeltz.org\\nDisclosures: https://govtech.cc\\n440 Lab: https://440lab.com\\nLinktree: https://linktr.ee/northantara\\nMuck Rack: https://muckrack.com/northantara\\nOink: https://oink.ing\\nGravitar: https://gravatar.com/northantara\\nVerifibation™️: https://v.jeltz.org\\nIDN: https://ꩰ.com\\nIDN: https://ဪ.com\\nIDN: https://ㆲ.com\\nIDN: https://የ.com\\nIDN: https://ގ.com\\nIDN: https://ჷ.com\\nIDN: https://ꩳ.com\\nIDN: https://ㆴ.com\\nIDN: https://ۦ.com\\nIDN: https://ۦ.ws\\nIDN: https://ྌ.com\\n\",\"website\":\"https://xn--8r9a.com/@north\",\"picture\":\"https://xn--8r9a.com/system/accounts/avatars/109/335/353/934/802/546/original/e7cd6918af1ff1f8.jpg\",\"banner\":\"https://xn--8r9a.com/system/accounts/headers/109/335/353/934/802/546/original/2873e284f2aca5aa.jpg\",\"nip05\":\"north_at_xn--8r9a.com@momostr.pink\"}", "sig": "4c897009272b6f35bd904d67843270802f19599727b40d94810ff71bcb71605e1825888bfa8c81091484397daa1101735fe09cebbda47039acf664c0f0b402fc" }

Last Notes

2026-10-15 04:33:03 UTC

Have you been on top of a roof?

2026-10-06 15:27:30 UTC

I discovered a minor vulnerability in a job seeking site. The API shows whether salary should be hidden or not and also contains the min/max salary, regardless of whether it's hidden or not.
When submitting an application, would it be immoral to use that information for the suggested salary field?

2026-09-29 12:12:30 UTC

You don't see it terribly often, but one of my favorite grammatical aspects that gets used online is the pluralization of certain acronyms with an 's, rather than an s or es. It's obviously incorrect, but it makes things very clear.
(I can't think of any specific examples right now, but surely people will put some in replies)

2026-09-25 16:24:45 UTC

There's this parking garage I use, which lets you scan your ticket and pay on your phone. At the end, it gives you a barcode for the scanner to scan. All's good.
One day, I hadn''t managed to get my phone out the window to let it get scanned before the arm opened. Weird, must be a pretty good scanner. That happened another time or two, pretty convenient, nobody likes to have to stretch way out of their car to scan a barcode.
The next week, I pulled up and before taking my phone off the mount, I turned back to tell my kid something, and...the arm opened. Wow, that's a great scanner.
The week after that, I decided to hold my phone in such a way that it couldn't be seen, and slowly lifted it up, but before my phone was visible to the scanner, the arm opened.
Another week, another barcode. This time, I left my phone on the mount. The arm opened.
Yet another week, I turned my phone away from the scanner before getting to the gate. I pull up and the arm opened.
Finally it hit me. I made it so that the scanner couldn't possibly see my phone. The arm opened.
My best guess is that when you visit the website, it grabs your Bluetooth and when you get to the gate, it sees that address and opens the arm.
I just checked the site and there are no Bluetooth permissions. I guess you don't need anything special for that? As with many things, you lose a bit of privacy for a bit of convenience. I don't know if I can even opt out of this (as per custom).

2026-09-23 11:03:14 UTC

- reply

only in an emergency

2026-09-21 15:04:53 UTC

- reply

My kid will pop in occasionally just to say "that's AI". Their generation is alright.

2026-09-21 14:33:34 UTC

Do you believe that you can reliably recognize AI in audio, images, video, or elsewise?

2026-09-21 00:01:17 UTC

I don't ever do shopping, so I'm unfamiliar with current pricing. 2 liter bottles are 4 fucking dollars?!

2026-09-20 03:13:21 UTC

Trying to look up information about an event - DirecTVs "Black Sunday". First hit? An 18 year old article from @npub1g63…ezt9. If you haven't heard of it, it's pretty neat. Definitely worth the read.
https://blog.codinghorror.com/revisiting-the-black-sunday-hack/

2026-09-18 13:23:27 UTC

I did the math on shipping a 12-pack of Cactus Cooler from CA to CT, and I've decided that I'm no longer going to pursue that particular endeavor. Why the hell does Amazon not sell it?