Whil the company said users of Tor should “assume they were affected,” the developers of the anonymous browsing service doesn’t yet know what “affected” means.