Dan Egerstad
Swedish security consultant who showed in 2007 that Tor hides who you are but not what you send – by publishing embassy email passwords.
Egerstad ran five Tor exit nodes and watched the traffic leaving them. Much of it was unencrypted POP3 and IMAP, and in August 2007 he posted login details for around a hundred email accounts belonging to embassies and government agencies, including ones from Iran, India and Russia. His point was that users assumed Tor encrypted everything end to end, when the anonymity stops at the last hop.
That November Swedish police raided his home and seized his computers. The lesson survives in every Tor guide: anonymity and confidentiality are different properties, and whoever runs an exit node sees everything that isn't encrypted end to end.