Flash content loaded via JAR protocol can bypass Torbutton in Firefox 2. This is most effective when Firefox is launched and Torbutton is initially set to a disabled state.