After following up on a post on Reddit and two years of investigation, the reporters came to the conclusion that Tor users can be de-anonymized by correlating the timing patterns of network traffic entering and exiting the Tor network, combined with broad and long-term monitoring of Tor nodes in data centers.

I’ve been saying this for years. It’s an open system, all you need are entry notes and exit nodes and you can launch exits for a pittance.