Just so everyone's clear, this was not a "known issue of Tor". It was a javascript based Firefox exploit.