Well, it's only a Bad Thing if you consider releasing "exploit code" bad. (I wouldn't even classify this as exploit code, but...) After reading this, Tor users

Well, it's only a Bad Thing if you consider releasing "exploit code" bad. (I wouldn't even classify this as exploit code, but...) After reading this, Tor users can decide whether they want Java applets (or any scripts, really) running on web pages they intend to view privately. This only highlights something that individuals concerned about privacy should have known beforehand, namely that Tor is just a tool.