&gt;... a few weeks earlier had canceled a security conference presentation on a low-cost way to deanonymize Tor users. The Tor officials went on to warn that an intelligence agency from a global adversary also might have been able to capitalize on the vulnerability.<p>This is kind of worrying. I hope the Tor Project has information on the attack is looking into ways to mitigate this. But if it&#x27;s due to the protocol nature, then maybe it&#x27;s time to look for a successor (we aren&#x27;t using WEP anymore, right?)<p>As to the CMU stuff... Tokyo University has this pledge to make sure basically no military research is done on campus, which I feel to be pretty laudable.<p>I wonder if there&#x27;s a similarly worded pledge for this sort of thing. But at the same time, universities can do a lot of good security research that can, in the end, strengthen the systems we use.<p>The &quot;$1 million to target these specific people&quot; sounds dirty, but &quot;$1 million to do research on the vulnerabilities of Tor&quot;... well that sounds like research to me. Pretty  tricky.