<i>the revelation that there is or was a flaw of that scale is a service to the Internet</i><p>Right on all points regarding Tor&#x27;s failures, except <i>this</i> above is the crux of the problem. Specifically, that the researchers did NOT disclose this to either the Tor project or the broader security community. They disclosed it to the Feds, pulled their presentation, and sat on it presumably forever until <i>third parties</i> smelled something fishy.<p>Patrick and you are correct in your criticism of the criticism, but the fact that academic security researchers have become obsequious functionaries to state power is a MUCH larger issue here, so much so that you are arguing at completely orthogonal purposes to many of us.<p>My guess is that this orthogonality is lost on AMEDICALRe, and theirs on you.