Sounds like, if you're going to do something very sensitive on tor, you need to:
- always have an update to date version of tor bundle!
- compile the bundle yourself from source
- run it virtually, and always roll back to a clean snapshot (before installing it tor) when done
- if possible use from a network that is not your own (open wifi, public wifi, etc.)
- spoof your mac address
- do not run JS, Java applets, etc.!
I know this seems extreme, but from what I read, it's the best you can do to protect yourself.
- always have an update to date version of tor bundle!
- compile the bundle yourself from source
- run it virtually, and always roll back to a clean snapshot (before installing it tor) when done
- if possible use from a network that is not your own (open wifi, public wifi, etc.)
- spoof your mac address
- do not run JS, Java applets, etc.!
I know this seems extreme, but from what I read, it's the best you can do to protect yourself.