[akavel]

Did the author of the article submit his findings to the Tor Project?

[chatmasta]

I'm sure at least one developer of the Tor project reads hacker news.

EDIT:

Far more interesting is the author's most recent article.... wtf

http://jcarlosnorte.com/security/2016/03/06/hacking-tachogra...

[dang]

That one should probably have its own thread.

[akavel]

O_o Ouch... indeed...

[nannal]

It does now.

[akavel]

Still, what with responsible disclosure etc.?

[conceit]

It's just a survey without conclusion. The methods aren't unknown.

[dfc]

It is a walk through of some administrative commands. What is being disclosed?

[Sanddancer]

All these have been discussed elsewhere. This is pretty much saying, "hey, TOR doesn't do anything special to prevent people from getting metrics.