A poignant reminder that Tor is just one of many tools and practices necessary to maintain security and privacy.

I remember during Wired's "Vanish" contest ( http://www.wired.com/vanish/2009/11/ff_vanish2/ ), the guy on the run was using Tor. As such, there was talk about setting up a bugged Tor exit node with lots of reported bandwidth to try to intercept his Gmail sessions. I ran the odds (figuring his client chose exit nodes at random), and there was a decent chance that his traffic would have been captured at least once over the month of the contest. Unfortunately, someone pointed out that it ran afoul of wiretap laws. And the SSL MITM shenanigans to try to capture his email password would definitely have been illegal. So the idea was shelved.