diff --git a/VulnerabilitiesInTheToxOnion.md b/VulnerabilitiesInTheToxOnion.md
new file mode 100644
index 0000000..f568817
--- /dev/null
+++ b/VulnerabilitiesInTheToxOnion.md
@@ -0,0 +1,4 @@
+
+Chatting with JF makes me think that these are still open:
+Known vulnerabilities in the tox onion
+<https://github.com//zugz/tox-onionPathsProposal/blob/master/onionVulns.md>