Password sniffing with Tor: Ars

Tagged:
On another password and personal information related note, everyone, everywhere, should be aware that a public network without encryption is just that, public. That should not be news, but apparently it is. That applies whether or not you try to mask your network identity with something like Tor. Security expert used Tor to collect government e-mail passwords. What is worse, that government setups (regardless of country) are either naive or stupid, or that the US government decided to shut down the site of the researcher trying to expose this issue, and potentially lied about the reasoning.