I really don&#x27;t like the idea of targeting all Tor users, but as far as I can tell, that&#x27;s not what this is. For this to work, wouldn&#x27;t the FBI have to have provided a list of hidden services they were interested in to CMU? Based on Tor&#x27;s description of the traffic confirmation attack, an encoded version of a specific hidden service has to be injected: <a href="https:&#x2F;&#x2F;blog.torproject.org&#x2F;blog&#x2F;tor-security-advisory-relay-early-traffic-confirmation-attack&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.torproject.org&#x2F;blog&#x2F;tor-security-advisory-relay...</a><p>Isn&#x27;t it plausible they could have received a warrant for each of those hidden services?<p>They probably didn&#x27;t, but targeting specific services isn&#x27;t that abhorrent to me, especially the ones engaged in highly unethical behavior (child porn, theft, scams). I don&#x27;t think drug markets should be illegal, but that&#x27;s a separate issue entirely.