If you are using TOR to connect to facebook.com, your connection has to leave the TOR network. This gives a lot of power and control to whoever is your exit node out of the network. Although they can&#x27;t see who you are, they have full MiTM of your traffic. SSL helps a lot with this obviously, but it&#x27;s still not the most ideal scenario.<p>Traffic directed to hidden services never &quot;leaves&quot; the TOR network, so it doesn&#x27;t hand over any control to exit nodes and the (possibly malicious) people running them.