It&#x27;s stunning that you may have read this conversation and still think people have an issue with security research on Tor in general.<p>The testing, and perhaps even the specific methods of the this test, are not the question. The question is the morality of CMU being paid by authorities to uncover PII about hidden services and report back to them.<p>Test the system (potentially with your own uni&#x27;s red&#x2F;blue teams instead of on other &#x27;public&#x27; hidden services) and report back anonymized reports of the data. One can say &quot;Doing X, I got result Y&quot; without giving out the personal details of results, much less to the FBI.