(I don't have a link handy and I'm going from memory here so I apologize if I've screwed anything up...) There was a Harvard student a few years ago who got bu

(I don't have a link handy and I'm going from memory here so I apologize if I've screwed anything up...) There was a Harvard student a few years ago who got busted for e-mailing a bomb threat (during finals, maybe?) or something like that. The school reviewed their (Netflow?) logs, found the users on their network who were using Tor at the time and so he quickly became a suspect (and confessed when questioned, IIRC). If he hadn't been on the school's network, it would have obviously been much more difficult, if not impossible, to find him so I suppose this one could be classified as an opsec fail.