About

Matthew J. Harmon. Two decades in information security: incident response, threat intelligence, risk assessment, and the unglamorous work of making controls actually hold.

This site is the archive — talks going back to 2010, the tooling that came out of that work, and the occasional argument. The name is a joke that got less funny over time.

Contact

Mail reaches me at mjh@itys.net. Signal: mjh.42.

For anything sensitive, encrypt to my PGP key; the fingerprint is published in security.txt, which is itself signed.

Vulnerability reports: use the address in /.well-known/security.txt.

Elsewhere

• t34ch.tech — courses
• Codeberg — source for most of the tooling
• matthewjharmon.com — biography
• caudaequinasyndrome.org — patient reference project
• c-collar.com — a field guide to ninety days in a cervical collar

This site

Static, built with Zola. No ads, no cookies, and no fonts fetched from anyone else’s server. Plausible counts visits, to show what gets read and to notice when something breaks. It keeps nothing about you; block JavaScript if you’d rather it didn’t run. Two visual skins ship with it — the toggle is in the header, and your choice is remembered locally. Everything is also available as an Atom feed.