Anyone paying attention has been aware of this since last fall. It&#x27;s common knowledge that CMU&#x2F;SEI works for the US military. And the timing was a total giveaway. They pulled the Black Hat talk, and SR2 etc went down not long thereafter. But it&#x27;s not surprising that CMU&#x2F;SEI would do this. Legal niceties aside, it&#x27;s arguably part of their mission.<p>The focus here, in my opinion, ought to be on the Tor Project&#x27;s role in this. Although they did speak up last summer, and have blogged this update, I&#x27;m not impressed. They ignored the CMU attack for five months last spring. Maybe they did get blindsided by a new kind of attack. Maybe they just weren&#x27;t paying enough attention. Or maybe, as they&#x27;ve noted, there aren&#x27;t many devs who focus on onion services.<p>But so far there&#x27;s been no <i>mea culpa</i> from the Tor Project. It&#x27;s disingenuous to whinge about unethical researchers and investigators. It&#x27;s stuff like this that fuels conspiracy theories about Tor and the US military. The Tor Project needs to take a stand.