What Actually Died When Deno Joined Cloudflare

Deno’s runtime got a twelve month clock and Deno Deploy got six months, but Deploy had already been shut down once in July, and the part of Deno that survived is the part nobody was arguing about.

October 20, 2026 · 12 min · Hanh Pham

The Roadster Does Not Fly: Two Gs Down and Two Seconds Up

Tesla put a 56-year-old suction fan and a spacecraft attitude-control system in a road car, and the disclosed numbers say the entire air supply buys under two seconds of thrust.

October 19, 2026 · 11 min · Hanh Pham

Karpathy's Funnel: The Arithmetic Holds and the Denominator Is a Choice

Every write-up of Karpathy’s four tier funnel repeats his four counts and none of them re-divides them. Against the population that could plausibly use a model, the bottom tier is not 75 per cent of the world, it is 99 per cent of everyone still standing.

October 18, 2026 · 12 min · Hanh Pham

The Patch That Isn't There: palera1n and the Rootless Era

The modern checkm8 continuation patches code signing, mount policy and task ports, and has no page-protection patch at all. What the gap in its own patch set says about the boundary everyone assumes is being crossed.

October 17, 2026 · 14 min · Hanh Pham

Most of This Jailbreak Was Never Published: unc0ver and the Userland Era

The bootrom era was unpatchable but fully readable. The userland era inverted both properties: every bug had a fix, and most of the tool’s shipped life has no published source at all.

October 16, 2026 · 10 min · Hanh Pham

REA: An Introduction, and the Game-Reversing Scene It Arrived In

Every result the tool returns carries its own confidence, its authority, and its limits, which is the discipline a claim about a shipped game needs. What REA is, and what people are using it for, from a PC-98 bullet pattern to PS5 executables relinked into native ports.

October 15, 2026 · 12 min · Hanh Pham

One Stale Pointer Before the OS Boots: checkm8 and the Boot ROM Era

The boot ROM is the one component no update can reach, so a bug in it is a bug in the hardware’s own trust anchor. What checkm8 established about unpatchable vulnerabilities, read from the public record rather than from a device.

October 15, 2026 · 12 min · Hanh Pham

Under the Hood of REA: Evidence Ids, Refusals, and a Four-Gigabyte Ceiling

The refusal was more useful than the analysis would have been. Inside REA: how an evidence id is computed so two machines agree, why a zero can mean the question was never asked, and the 3 MB file that exhausted Node’s default heap.

October 15, 2026 · 11 min · Hanh Pham

The Reachable Surface: WebKit and the App Layer

WebKit and the app layer are the Apple surfaces you can actually study without a research device. How the browser’s processes are isolated from each other, what crosses between them, and where a third-party app’s own checks sit relative to the server’s.

October 10, 2026 · 13 min · Hanh Pham

Read the Fix First: A Patch-Margin Method for XNU Research

A source-first method for Apple kernel research: diff consecutive XNU tags, mine the regression tests that ship with the fixes, map sibling call sites, and rank candidates by how well they survive Memory Integrity Enforcement. Four evidence gates, a safe workflow, and the stop conditions that keep this work honest.

October 9, 2026 · 23 min · Hanh Pham