On the Effectiveness of Traffic Analysis Against Tor Networks Using Flow Records [pdf]
So encrypting content as it travels through Tor is generally considered best practice, but how does one get/manage/pay for a VPN such that the VPN itself doesn't lead directly back to you?