Oops, I neglected to address this point: > More important, what purpose is there to reference a 5 year old patched security vulnearbility? Sure, it's old, and

Oops, I neglected to address this point: > More important, what purpose is there to reference a 5 year old patched security vulnearbility? Sure, it's old, and everyone screws up sometimes. A few things bother me about it. One is that we know that the Tor Project did notice the malicious relays that CMU people were hosting. From what I've read, they weren't subtle about it. So basically Tor Project staff said that they screwed up, and apologized. But somehow that just doesn't feel plausible. There's also some email obtained through FoIA which could be read as evidence that "Tor developers are closely working with the US government".[0] Sure, maybe that's just paranoia and conspiracy theory. And I do appreciate the delicacy of supporting strong anonymity for Tor without defending child pornographers. 0) https://restoreprivacy.com/tor/ https://restoreprivacy.com/tor/