diff --git a/README.md b/README.md
index 49c424a..58b5ee5 100644
--- a/README.md
+++ b/README.md
@@ -89,6 +89,13 @@ Others include:
 To our point of view, the ability of CTYPEs to follow code in the
 debugger is a crucial advantage.
 
+## Updates
+
+Although Tox works over Tor, we do not recommend its usage for
+anonymity as it leaks DNS requests due to a 6-year old known security
+issue: https://github.com/TokTok/c-toxcore/issues/469 Do not use it for
+anonymous communication unless you have a TCP and UDP firewall in place.
+
 Up-to-date code is on https://git.plastiras.org/emdee/toxygen_wrapper
 
 Work on this project is suspended until the
diff --git a/src/toxygen_wrapper/tests/support_onions.py b/src/toxygen_wrapper/tests/support_onions.py
index af344d7..4a14bef 100644
--- a/src/toxygen_wrapper/tests/support_onions.py
+++ b/src/toxygen_wrapper/tests/support_onions.py
@@ -429,7 +429,7 @@ def sTorResolve(target:str,
                                SOCK_TIMEOUT_SECONDS)
         if not lReady[0]: continue
         try:
-            flags=socket.MSG_WAITALL
+            flags = socket.MSG_WAITALL
             data = sock.recv(MAX_INFO_RESPONSE_PACKET_LENGTH, flags)
         except socket.timeout:
             LOG.warn(f"4 The TOR proxy {(sHost, iPort)}" \