Timing attacks are a well-known weakness. There's a lot of research into timing ...

Timing attacks are a well-known weakness. There's a lot of research into timing attacks and proposed countermeasures.

Also, it's just Tor – not 'TOR'.

>Note: even though it originally came from an acronym, Tor is not spelled "TOR". Only the first letter is capitalized. In fact, we can usually spot people who haven't read any of our website (and have instead learned everything they know about Tor from news articles) by the fact that they spell it wrong.

https://support.torproject.org/about/why-is-it-called-tor/