Comments by "Bond25" (@Bond2025) on "Secure TailsOS Setup For The Average Dark Web Enjoyer" video.

14:09 there was another exploit used by security services on Tor users, a very simple one. They were uploading video files with vile titles to specific forums. When people downloaded the video and tried to play it, VLC or Windows Media Player would say, "oh we need a new CODEC" and went off to get it from an IP number. This identified the victim. A very easy way to stop this in VLC was adjusting the config file to tell it to connect to a random IP and port. It was a simple exploit. This is why people were always told not to connect to the Internet when they opened any saved file. The TorProject altered the browser bundle read for Operation Onymous after pressure from police and security services, you might have noticed all scripts were allowed by default and even allowed if you set security to high. This was no error or fault, it was deliberate to help locate a number of Tor users on naughty forums.
1