@kakafarm I used the word trivial kinda wrongly. (Evidently) at the time this happened, the police used a known and already mitigated vulnerability, but the user was using unupdated software. Allowing that the user was using at-the-time outdated software, police were able to figure out what to seize to look for logs enabling their timing attack.
Though what I read, linked by Schneier, tor believes the journalist contacting them for a statement was withholding key information from them.