Projects
TTCStatus.ca
TTCStatus.ca — a live map of Toronto’s streetcar network, with real-time TTC vehicle positions.
Why I built it: I live here. I ride these things. And I’ve spent far too many winter evenings at a stop watching the display insist my streetcar was “due” while it was, demonstrably, nowhere. So I built the tool I wanted to exist: every route on a map, every vehicle in real time. The user I design for is me, standing in the cold, deciding whether to wait or walk.
NO SECURITY
NO SECURITY — a cybersecurity museum of mistakes.
Why I built it: Every post-mortem I’ve ever read sanitises the best part: the human who did something completely reasonable that still ended in catastrophe. After 17 years in security, my favourite stories were always told quietly, by people asking me not to use their name. So I’m building the museum those stories deserve — anonymous, fictionalised exhibits where the names and lines of code have been changed to protect what’s left of the guilty. Submissions are accepted; identities are not. No cookies, no analytics, no tracking: privacy is part of the exhibition, and the doors open once no single story can be traced back to the person who submitted it.
Command Line Tools
Why I built it: My automated test suites needed 2FA codes, and my phone was tired of being interrogated every five minutes. So I taught myself Go by building exactly the thing I needed — my first Go project, so yes, it could use some code-review and style help. Generate multi-factor auth codes right on the command line.
Open Source Contributions
Most of these started the same way: something broke, I fixed it, and I figured strangers on the internet shouldn’t have to suffer the way I did.
- Hygieia/Cloud-Aws-Collector
- AWSudo
- Mailtrap
- terraform-provider-servicenow
- infisical k8s-operator
- traccar SMS
The Toolbox
Things I’ve spent enough hours with to have opinions about:
- Amazon Web Services
- Security Controls
- Cost Control & Optimizations
- Reporting & Auditing
- Compute
- RDS & Databases
- Docker & Kubernetes
- Heroku
- Azure
- Azure Active Directory
- OpenStack
Security assessments
- Dependency / Vulnerabiltiy Scans
- SAST / DAST scanning
- Kubernetes / Container security
CI systems
- Jenkins
- CircleCI
- GitHub Actions
- AWS Code{Commit|Pipeline|Build}*
Third party integrations
- Twilio SMS
- Electronic Health Records (including FHIR)