at no point did I say it was 100% definitive. it was an interesting observation. it is mainly because most knots are tor nodes, so there's no way to detect a sybil through that.

so turning off tor biases the data a lot, but allows us to detect potential sybil attacks when comparing asmap on/off.