For 11 Months, Tor Let Users Think They Were Safe