I'm Jacob. I do security research and build public-interest software.
When the private keys of eight eMudhra intermediate CAs turned out to be trivially recoverable in October 2026, I published tools to find and block those certificates, and my report on eMudhra's revocation servers became its own Mozilla incident bug. I also build free tools for people doing their own court paperwork, for clerks handling public-records requests, and for anyone checking a food recall.
Open to new roles. Email jacob@jacobrakai.org or message me on LinkedIn. I write Python, TypeScript, Go, Swift, Kotlin, and PowerShell.
eMudhra CA compromise — Eight eMudhra intermediate CA private keys turned out to be trivially recoverable (Mozilla Bug 2083449). emsign-g3-distrust and 4thehardway find the affected certificates on a machine and block them in trust stores and on the network. I also found that eMudhra's revocation servers blocked common HTTP clients such as curl and Wget; that finding is now Mozilla Bug 2085612.
honeypot-blocklist — I run a honeypot and publish a blocklist feed from the attack traffic it records. The repository includes the data formats and validation tools.
Forma Pauperis — I build tools for finding and working through New Jersey court forms. The fee-waiver application is free to complete without an account.
Sic Semper Errata — I'm developing software for municipal clerks to handle records requests from intake through review and release. The Bellwether demo uses sample records. Municipal deployment is still in development.
Beanstalk — I build a free web app for searching FDA and USDA food recall records by product, company, or hazard, with links to the original agency records. No account required. The iPhone app is in development.
mewtoo — I connect a language model to a Game Boy emulator so it can play Pokémon Red. The code handles game state, controls, and model calls.
jacobrakai.org · Jacobrakai Foundation (IRS 501(c)(3) public charity, EIN 33-3382083, effective Feb 11, 2025) · Donate · More repositories