It is actually pretty easy for an attacker who watches all the links on the internet to find all of the Tor bridges, even if they are not published.