update

README.md

@@ -231,6 +231,13 @@ There are a couple of bash scripts to show usage:
 There is a copy of the Tox [spec](https://toktok.ltd/spec.html)
 in the repo - it is missing any description of the groups section.
 
+## Updates
+
+Although Tox works over Tor, we do not recommend its usage for
+anonymity as it leaks DNS requests due to a 6-year old known security
+issue: https://github.com/TokTok/c-toxcore/issues/469 Do not use it for
+anonymous communication unless you have a TCP and UDP firewall in place.
+
 The uptodate version of this code is on https://git.plastiras.org/emdee/tox_profile
 
 Work on this project is suspended until the