I was wondering about this as well. Couldn't a nefarious Tor user install some sort of outgoing packet-cleaner, which would spoof their outgoing I.P. address fo

I was wondering about this as well. Couldn't a nefarious Tor user install some sort of outgoing packet-cleaner, which would spoof their outgoing I.P. address for all packets unrelated to Tor? I.e: because the flash exploit didn't establish two-way clearnet communication with the target computer, how can they prove that the outgoing clearnet I.P. was not spoofed? EDIT: Nevermind, I was assuming too much about the operation of the exploit. More details, for those who are interested, can be found here: https://web.archive.org/web/20110723083319/http://decloak.net/ https://web.archive.org/web/20110723083319/http://decloak.ne...