Were the FBI lying when they said they caught DPR from Silk Road because of "leaky CAPTCHA"?

Original link of the article that reports what the FBI claims did DPR in: http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/ Quote of what the FBI testified: "And this is how the feds say they located the Silk Road servers:

“The IP address leak we discovered came from the Silk Road user login interface. Upon examining the individual packets of data being sent back from the website, we noticed that the headers of some of the packets reflected a certain IP address not associated with any known Tor node as the source of the packets. This IP address (the “Subject IP Address”) was the only non-Tor source IP address reflected in the traffic we examined.”

“The Subject IP Address caught our attention because, if a hidden service is properly configured to work on Tor, the source IP address of traffic sent from the hidden service should appear as the IP address of a Tor node, as opposed to the true IP address of the hidden service, which Tor is designed to conceal. When I typed the Subject IP Address into an ordinary (non-Tor) web browser, a part of the Silk Road login screen (the CAPTCHA prompt) appeared. Based on my training and experience, this indicated that the Subject IP Address was the IP address of the SR Server, and that it was ‘leaking’ from the SR Server because the computer code underlying the login interface was not properly configured at the time to work on Tor.” "

Ok, now look in the comments to the article. namely comment no.22, by 'Stunned'. quote: "Brian Krebs, are you serious? You run a security blog? This is shoddy reporting.

It’s right there in the text you quoted from the FBI affidavit, but you don’t even address it: the actual source of the leak is said to be IP addresses in packet headers coming from the SR site. Whether or not the CAPTCHA came up when going to that IP address is entirely secondary, and certainly not what “sunk” DPR.

Brian Krebs, have you ever used Tor? Traffic coming and going to a site via Tor can’t be routed in parallel to traffic over non-Tor channels. It’s simply impossible – not how Tor works – no way for client or server to know each other’s real IP addresses to initiate a non-Tor connection. Leaky application code is a different beast, but that’s not what the FBI claims. What they claim is impossible and they don’t provide any explanation or details to substantiate.

That you focused on the secondary bit about the CAPTCHA is pathetic. This is most uneducated and misleading.

Bad reporting. And people are eating it up." follow up quote from user 'Stunned'. "Nicholas, you are describing an application leak. The FBI is claiming to have seen non-Tor IP addresses in the packet headers of traffic coming back from the SR server. That’s not possible.

Again, the ridiculous CAPTCHA talk needs to stop. If you bothered to read the links posted just above, you’d learn the CAPTCHA was served locally; was not externally hosted. Even if it weren’t, “special forensics tools” (wtf is that?) aren’t needed. Right click and view source is what would tell you that, and every amateur hacker on the planet would have been all over that long before.

Nicholas, please stop endorsing and thus proliferating this bad reporting. Brian Krebs, what do you have to say for yourself?" So, my question is, was the FBI lying? WAS IT, OR WAS IT NOT, anything to do with CAPTCHA as the feds explain it?