http://ci25bunztz3jsksrlvw5ifjr7wghgydrk255esnxvsqlqwfpksy7ctad.onion/it/vpn/security-issues
For example, in January 2011 the Tunisian government, in fear of the popular uprising that would eventually topple the regime, was able to perform a MiTM attack on Facebook users connecting from withing Tunisia, capturing their login and passwords. In this case, a VPN would have protected as long as the VPN gateway was located outside the country of Tunisia.