Weren't those side channel attacks? IE getting the tor browser to leak info over plain internet when connecting to an onion site so the connection could be correlated?