Looks Like BoingBoing Got Hacked (NSFW)
Something is definitely up at uber nerd site and “Directory of Wonderful Things” BoingBoing.net. A trip to the front page brings up the charming image above, which seems to be some sort of vulgar message from someone called “the| one” to site editor Cory Doctorow.
Context & Ripple Effects
BoingBoing's front page has been replaced with a vulgar message signed 'the|one' and addressed to editor Cory Doctorow — a personalized defacement rather than random vandalism. It lands in a stretch of high-profile blog compromises: Reddit was hacked back in 2007, hackers hit MacRumors during keynote coverage in early 2009, and just this past January TechCrunch itself was hacked by a hacker who left an angry note.
What distinguishes this incident is the target: naming a specific editor suggests the attack is aimed at a person and a public message, not merely a technical exploit. For a site whose brand is editorial voice, a hijacked front page strikes directly at the asset.
First-order effects
- BoingBoing visitors are greeted with NSFW content instead of posts, forcing an immediate restoration and exposing readers to material the site would never publish.
- Cory Doctorow is personally targeted by name, turning a site-level compromise into a directed message against an individual editor.
Second-order effects
- After TechCrunch's own January breach, every high-profile independent blog now faces the same question about credential and CMS hygiene, with each new defacement raising scrutiny of how these sites authenticate their front ends.
- Advertisers and syndication partners on reader-facing blogs have reason to weigh brand-safety risk when a front page can be swapped overnight.
Third-order effects
- If defacements keep shifting from generic vandalism to messages addressed to named editors, blog hacking becomes a channel for personal grievance rather than mere bragging rights — pushing publishers toward hardened infrastructure and faster incident response.
- A pattern of compromised independent outlets reinforces the case that self-run publishing stacks carry security costs that hosted platforms absorb on publishers' behalf.
The trend: High-profile independent blogs are becoming recurring targets for personalized defacements, where the attacker's goal is a public message aimed at a named editor rather than data theft.