Jason Parker (security researcher)

Jason Parker
OccupationCybersecurity Researcher
Years active2023–present
OrganizationJeltz
Known forCybersecurity discoveries
Websitehttps://ꩰ.com/@north

Jason Parker is an American cybersecurity researcher known for uncovering dozens of critical vulnerabilities in government and legal software systems. Their work has exposed significant security flaws in court record systems, records request platforms, and voting systems, leading to increased awareness and remediation of these issues.

Career

Parker began their career as a software developer.[1]

Notable Discoveries

Parker has discovered dozens of critical vulnerabilities in computer systems.

U.S. Court Record Systems

In late 2023, Parker began discovering vulnerabilities in court computer systems.[2][3][4][5]

Parker has also discovered critical vulnerabilities in several electronic court filing platforms.[6][7]

Records Requests Platforms

In 2024, Parker identified numerous vulnerabilities in widely used public records request platforms employed by state and local governments.[8]

Voting System Involvement

In August 2024, Parker discovered a critical flaw in Georgia's voter registration cancellation portal. The flaw allowed individuals to submit a voter cancellation request without proper identity verification, using publicly available information. State officials quickly fixed the vulnerability after media outlets, including ProPublica and Atlanta News First, alerted the state to the issue.[9][10]

Parker's discovery added to the list of vulnerabilities, found in Georgia's new voter registration system, leading to increased scrutiny of the platform.[11]

Impact

Parker's work has brought significant attention to systemic security issues within government and legal systems, emphasizing the importance of robust cybersecurity measures. Their discoveries have led to increased scrutiny of these systems and prompted organizations to implement stronger security protocols. Following Parker's disclosures, many systems were updated without fanfare to address the security flaws; however, some entities, such as Florida's Lee County, threatened legal action against Parker.[12]

References

  1. ^ Zurier, Steve (2024-10-01). "Over two dozen critical bugs found in voter registration, court systems". SC Media. Retrieved 2024-10-08.
  2. ^ Lowrey, Brandon (2023-11-30). "Software Flaws Exposed Sealed Court Docs, Researcher Says". Law360. Retrieved 2024-05-05.
  3. ^ "Multiple Vulnerabilities Affecting Web-Based Court Case and Document Management Systems". Cybersecurity and Infrastructure Security Agency. 2023-11-30. Retrieved 2024-05-05.
  4. ^ "Sarasota Clerk and Comptroller Confirms No Breach of Private Information Obtained Via ClerkNet". Sarasota County Clerk and Comptroller. 2023-11-30. Retrieved 2024-05-06.
  5. ^ Baker-White, Emily (2024-06-18). "Massive Court Breach Exposed Confidential Court Testimony, Medical And Psychiatric Records". Forbes. Retrieved 2024-09-15.
  6. ^ Goodin, Dan (2024-09-30). "Court Data Exposed by Vulnerabilities in Software Used by US Government: Researcher". Ars Technica. Retrieved 2024-10-08.
  7. ^ Kovacs, Eduard (2024-10-03). "Systems used by courts and governments across the US riddled with vulnerabilities". SecurityWeek. Retrieved 2024-10-08.
  8. ^ DiMolfetta, David (2024-03-07). "Flaws in public records management tool could let hackers nab sensitive data linked to requests". Nextgov/FCW. Retrieved 2024-05-05.
  9. ^ Clark, Doug Bock (2024-08-05). "A Terrible Vulnerability: Cybersecurity Researcher Discovers Yet Another Flaw in Georgia's Voter Cancellation Portal". ProPublica. Retrieved 2024-09-14.
  10. ^ Keefe, Brendan (2024-08-05). "Security flaw allowed anyone to request cancellation of Georgia voter registrations". Atlanta News First. Retrieved 2024-09-14.
  11. ^ Clark, Doug Bock (2024-08-03). "Marjorie Taylor Greene's and Brad Raffensperger's Voter Registrations Targeted in Georgia's New Online Portal". ProPublica. Retrieved 2024-09-14.
  12. ^ Whittaker, Zack (2023-11-30). "Security flaws in court record systems used in five US states exposed sensitive legal documents". TechCrunch. Retrieved 2024-05-05.