Help identify, document, and retire zombie advice at hacklore.org 🪦

Let’s put bad guidance to rest and make room for what actually works.

But fear not! Unlike the movies, there is a cure. You can stop repeating advice that should have been dead and buried years ago.

Start by asking simple questions:
🔎 Does this advice map to how real compromises actually happen today?
🔎 Is there evidence from the field, not just vibes?

Zombie advice is hard to kill because it’s culturally transmitted, not empirically maintained.

Blogs copy blogs. Talks cite talks. Fear spreads faster than data.

If you’ve been bitten, you may find yourself spreading zombie advice too.

📣 “Everyone says this, so it must be true.”

📚 You can find our hacklore field notes at: hacklore.org
📨 Sign up for the newsletter: buttondown.com/hacklore

Please share! 🙏

If you’ve seen advice that feels outdated, exaggerated, or just vibes-based, that’s hacklore! Send specimens our way!

Hacklore spreads through blogs, talks, policy docs, news, and social media. We need to retire hacklore guidance so attention can shift to advice grounded in how real-world attacks actually happen.