Looks like end-point security, the (usually PHP) applications the server is running at, is a weak point in the Tor ecosystem. Generally, I would rant on PHP fo

Looks like end-point security, the (usually PHP) applications the server is running at, is a weak point in the Tor ecosystem. Generally, I would rant on PHP for this, but seriously now, had they been on jvm, a complicated application like a forum talk with avatars and all other fancy features, would probably still have holes in it.