Default conf on Apache Web servers can de-anonymize your hidden service

[John Connor]

An unknown student has discovered a serious issue in Apache Web Server that could potentially de-anonymize .onion-domains and servers hidden behind the Tor-network. The student already reported the issue to the Tor Project development team for some months

http://securityaffairs.co/wordpress/44156/hacking/apache-web-setting-tor-identity.html