# Hanlon's Razor
Three in the morning. A software engineer staring at a system failure that just knocked out half the company's infrastructure.
She's exhausted. She's *convinced* someone sabotaged the code. Has to be. The timing's too perfect—right after that tense meeting about budget cuts. She's already drafting the email to management. Mentally rehearsing the confrontation.
Then she spots it.
A single missing semicolon in a config file. Her typo. From Tuesday afternoon, right before she left early for her kid's dentist appointment.
That moment. That specific flavor of sheepish relief... mixed with self-directed anger. Your body was preparing for war and suddenly has nowhere to put all that adrenaline.
Robert J. Hanlon bottled that feeling into seven words back in 1980: "Never attribute to malice that which is adequately explained by stupidity."
He published it in a book called *Murphy's Law Book Two: More Reasons Why Things Go Wrong.* Not exactly *Principia Mathematica.* More like something you'd grab at an airport Hudson News. Between a thriller and a magazine about boats.
But sometimes the most useful ideas arrive in paperbacks with cartoon illustrations on the cover. The Stoics had marble columns. We have Murphy's Law compilations.
Here's what makes Hanlon's Razor stick.
It's not telling you malice doesn't exist. It's saying incompetence is *dramatically* more common. Orders of magnitude more common.
And our brains? Spectacularly bad at accepting this.
There's a study from 1967. Edward Jones and Victor Harris at Duke. They had people read essays either supporting or opposing Fidel Castro. Some writers chose their position. Others were randomly assigned—literally told "you're arguing for Castro" or "you're arguing against."
The participants *knew* this. They were explicitly told before reading: some of these writers had zero choice.
Didn't matter.
People still assumed the essays reflected the writers' true beliefs. Even when the simplest explanation was sitting right there: "This person was told what to write." Even when believing otherwise required ignoring information they'd just been given.
This is the fundamental attribution error. And it's not a quirk. It's more like a manufacturing defect in human thinking.
We overestimate intent. We see malice and conspiracy where there's usually just... someone having a bad day. Or not thinking it through. Or dealing with constraints we can't see.
The organizational psychologist Chris Argyris spent thirty years studying workplace conflicts. His data from companies across twelve industries?
Over seventy percent of the conflicts that feel deeply personal—the ones that keep you up at night composing angry emails you'll never send—started with miscommunication. Or someone just screwing up.
Not sabotage. Not office politics, though that gets the credit. Just humans being messy and information being incomplete.
But here's the thing.
Hanlon didn't invent this idea. He just gave it a name that stuck.
Go back to 1829. Johann Wolfgang von Goethe—poet, scientist, guy who spent way too much time thinking about color theory—is sitting in Weimar watching some petty dispute unfold in his social circle. Someone's offended. Someone else is being accused of deliberate slight.
And Goethe, probably exhausted by the whole performance, writes this down:
"Misunderstandings and neglect create more confusion in this world than trickery and malice. At any rate, the latter are certainly much less frequent."
Same principle. Different century.
The candles burning low. The quill scratching. Goethe watching people assume the worst about each other when the truth was simpler and sadder—they just didn't understand each other. They were talking past each other in the same room.
And if you go even further back? There's William of Ockham in the fourteenth century with his razor: *entities should not be multiplied without necessity.*
The simplest explanation that fits the facts is usually right.
Hanlon's Razor is basically Occam's Razor... aimed at human behavior. When something goes wrong, what's simpler? An elaborate conspiracy requiring coordination, secrecy, and sustained motivation? Or someone just screwed up?
Isaac Asimov loved this logic. In his Black Widowers mystery stories from the forties, he'd have characters solve crimes by systematically rejecting malicious intent first. Not because evil doesn't exist—Asimov wasn't naive—but because assuming it first blinds you to simpler answers.
The murder weapon is usually closer than you think. The motive is usually smaller than you'd imagine.
Fast forward to the nineties.
Software engineers adopted Hanlon's Razor as a debugging philosophy. And it changed how they worked. When code breaks, assume the bug before you assume sabotage.
This wasn't just folk wisdom—it got embedded in practices like blameless post-mortems at companies like Etsy and Google. That critical failure? Almost never a hacker. Almost always someone who didn't realize that variable could be null. Or that the system would behave differently under load. Or that daylight saving time existed.
Then the internet happened.
And suddenly Hanlon's Razor became a weapon against something much larger. Conspiracy thinking.
By the two-thousands, skeptic communities online were wielding it constantly. Someone claims the government is controlling the weather? Hanlon's Razor. They're claiming a massive cover-up involving thousands of people across multiple agencies?
Okay, but consider: bureaucracies can barely coordinate a conference call. Have you ever tried to get three government departments to agree on a font for a memo?
Karen Douglas at the University of Kent studied conspiracy belief for over a decade. Her 2017 paper found that belief in conspiracy theories correlates with a specific pattern—the tendency to see intentionality in random events.
We're pattern-seeking machines. We evolved to see the predator in the rustling grass, even when it's just wind. Better to be wrong a hundred times than dead once.
But now? We see faces in clouds and plots in coincidences. The same mechanism that kept us alive on the savanna makes us terrible at evaluating complex systems.
A recent study from the University of Chicago found that nearly half of Americans believe in at least one major conspiracy theory. Nearly half.
And Hanlon's Razor offers a way to challenge that. Not by calling people stupid, but by offering a simpler framework. Incompetence is *everywhere.* Genuinely competent evil is actually pretty rare... because evil requires the same coordination skills as good. And coordination is hard.
But here's the turn.
Here's where the principle gets messy.
Because sometimes? Malice is real. Obviously.
The Tuskegee experiments happened. Watergate happened. Tobacco companies did spend decades deliberately obscuring cancer research—we have the internal memos.
And critics of Hanlon's Razor, particularly historians and political theorists, will tell you the principle can make you dangerously naive. It can become a shield for the guilty.
"Oh, we didn't *mean* to harm anyone with our subprime mortgage products. We just didn't understand the systemic risk."
The historian Timothy Snyder makes this point sharply: if you're analyzing authoritarian regimes or corporate wrongdoing, Hanlon's Razor can blind you to documented patterns of deliberate harm. When someone shows you who they are repeatedly, believing them isn't pessimism. It's pattern recognition.
This is the live debate. How do you use Hanlon's Razor without becoming a mark? How do you stay skeptical of conspiracy thinking without dismissing real conspiracies?
The cybersecurity field wrestles with this every single day. When a system is breached, you have to hold both possibilities simultaneously—incompetence *and* malicious actors.
Assume incompetence too quickly and you miss the actual intrusion. Assume malice too quickly and you waste resources hunting ghosts while the real vulnerability sits unpatched.
Bruce Schneier, who's been thinking about security for forty years, puts it this way: "Start with Hanlon's Razor, but verify."
Treat it as a starting probability, not a certainty. Most of the time, it's incompetence. But when the evidence piles up? Update your model.
So maybe the real principle is this:
Hanlon's Razor is a starting position, not a religion. It's the better first guess, statistically. But hold it lightly. Be ready to update when evidence points to genuine malice.
And know that some contexts—analyzing power structures, investigating fraud, studying oppression—require you to weight malice higher from the start.
Because here's what Hanlon's Razor actually does at its best.
It buys you time.
Time before you spiral into assumption. Time before you send that accusatory email. Time before you construct an entire narrative of betrayal around incomplete information.
Time to look for the missing semicolon.
Think about your own life. How many times have you been certain someone was being deliberately difficult, only to find out later they were dealing with something you couldn't see?
Their kid was sick. They misunderstood the deadline. They're working with broken tools and doing their best.
That coworker who didn't respond to your email? Their father just went into hospice.
That friend who cancelled plans? They're having panic attacks and haven't told anyone.
Recent research in cognitive bias backs this up. A 2019 analysis across a hundred and seventy-three studies found that intentionality bias—our tendency to see deliberate action everywhere—is one of our most persistent mental bugs.
And unlike actual bugs in code, we can't just patch it out. We have to consciously work against it. Every single time.
The AI field has picked this up too. When machine learning models fail—and they fail constantly—researchers default to Hanlon's Razor.
The algorithm isn't malicious. It's flawed. It's trained on biased data. Or it's optimizing for the wrong metric. Or someone made an assumption that doesn't hold at scale. Start there.
And they're usually right.
That facial recognition system that works worse on darker skin? Not a conspiracy. Just engineers who didn't test on diverse datasets, because their team wasn't diverse, because they didn't think to check.
Incompetence compounding incompetence.
But here's what I keep coming back to.
Hanlon's Razor isn't really about other people. Not primarily.
It's about you. It's about the story you tell yourself when things go wrong.
Because that story shapes everything. It shapes whether you're angry or curious. Whether you attack or investigate. Whether you escalate or de-escalate. Whether you sleep that night or lie awake rehearsing arguments.
That engineer at three in the morning? Once she found the semicolon, she had a choice. She could spiral into embarrassment and self-recrimination. Or she could feel something else.
Grateful that it wasn't sabotage. Grateful that the fix was simple. Grateful that she caught it before sending an email that would have poisoned relationships for months.
The principle isn't "everyone is stupid and nobody is evil." It's "check for the simple explanation first, because you'll be right most of the time... and wrong accusations are hard to take back."
There's a neuroscience angle here too.
When we attribute malice, our amygdala lights up—the threat detection system. Heart rate increases. Cortisol spikes. We're preparing for conflict.
When we attribute incompetence, different networks activate—the ones involved in problem-solving and theory of mind.
Same external event. Completely different internal experience. You're literally changing your brain chemistry with the story you choose.
Goethe knew this in 1829. Hanlon crystallized it in 1980.
And you can use it today.
Next time something goes wrong—someone cuts you off in traffic, a colleague misses a deadline, a friend doesn't text back—pause for five seconds. Just five.
Ask yourself: What's the simplest explanation that doesn't require them to be malicious?
Maybe they didn't see you. Maybe they're overwhelmed. Maybe their phone died. Maybe they're dealing with something that has nothing to do with you.
You'll be wrong sometimes. Sometimes people *are* being deliberately difficult. Sometimes the conspiracy is real.
But most of the time? Most of the time you'll save yourself from anger that wasn't necessary and assumptions that weren't true.
And honestly? That's a better way to move through the world.
Assuming incompetence over malice doesn't make you naive. It makes you accurate.
It makes you someone who can fix the semicolon instead of burning down relationships. Someone who can update their thinking when evidence arrives. Someone who saves their threat response for actual threats, instead of spending it on misunderstandings.
The razor cuts away the conspiracy. What's left is usually simpler, sadder, and fixable.