About

Matthew J. Harmon. Two decades in information security: incident response, threat intelligence, risk assessment, and the unglamorous work of making controls actually hold.

This site is the archive — talks going back to 2010, the tooling that came out of that work, and the occasional argument. The name is a joke that got less funny over time.

Contact

Mail reaches me at mjh@itys.net. Signal: mjh.42.

For anything sensitive, encrypt to my PGP key; the fingerprint is published in security.txt, which is itself signed.

Vulnerability reports: use the address in /.well-known/security.txt.

Elsewhere

• t34ch.tech — courses
• Codeberg — source for most of the tooling
• matthewjharmon.com — biography
• caudaequinasyndrome.org — patient reference project

This site

Static, built with Zola. No trackers, no third-party requests, no fonts fetched from anyone else’s server. Two visual skins ship with it — the toggle is in the header, and your choice is remembered locally. Everything is also available as an Atom feed.