> Would you have any reference to specifics on this?
FBI using a Firefox js bug to unmask tor users a couple years ago:
http://arstechnica.com/security/2013/08/attackers-wield-fire... http://arstechnica.com/tech-policy/2013/09/fbi-admits-what-w...