- CAPTCHA on SR site wasn't configured correctly with TOR and leaked the IP of the server
Oh my god. When I had a look at SR I remember looking at that captcha and wondering how they were locally generating such a high quality captcha code.
From what I remember, the SR captcha was pretty shitty, something I could have coded in a few hours to run locally.