A network of 333 malicious Tor exit relays was used to intercept SSH sessions and recover email in plaintext, Ars Technica reports. The number matters less than the position: whoever operates an exit node sits at the point where onion-routed traffic re-enters the ordinary internet, and everything that is not encrypted at that hop is theirs to read.
Tor protects traffic inside the network. It cannot protect the last mile. Exit relays are run by volunteers, identified only by a fingerprint, and the network's design deliberately assumes any one of them may be hostile — that is the threat model, not a flaw discovered this week. What this campaign shows is the model being exercised at scale: instead of one eavesdropping relay, hundreds.
SSH is the part worth thinking about carefully. A hostile exit cannot read an SSH session by watching it — the transport is encrypted and the session keys never leave the endpoints. To get anything out of SSH, the attacker has to answer in place of the real server: present a substitute host, hope the client's host-key warning is clicked through, and collect the credentials typed into it. That is a phishing problem wearing a network costume, and it is why 'yes' to an unrecognised fingerprint is the most expensive keystroke in systems administration. Once credentials are captured, mail is reachable the ordinary way — log in and read it.
Plaintext email is a different and older failure. If a mail client will still fall back to an unencrypted connection, or accept a stripped STARTTLS handshake, then the content crosses the exit node in the clear regardless of who runs it. A hostile exit simply does what any honest exit could have done.
The defensive conclusions are unglamorous and unchanged. Verify host keys, and treat a changed fingerprint as an incident rather than an inconvenience. Refuse mail configurations that permit plaintext or downgrade. For administrative access to anything that matters, prefer a channel that does not depend on trusting a volunteer's relay — a VPN, a bastion, an onion service with a pinned key. Rotate credentials that may have transited a session you cannot vouch for.
The structural lesson is the one Tor has always asked users to accept: exit nodes are untrusted by design, and the network's health depends on there being many of them, run by many different people, so that no single operator can watch a meaningful share of the traffic. Three hundred hostile relays is not a break of the cryptography. It is a reminder that anonymity protects the route, not the endpoints — and the endpoints are where the passwords are.
