Reverse engineering a compromised TOR browser bundle

Previous discussion on HN: https://news.ycombinator.com/item?id=8171907