"1. don't use windows"...I realize how unpopular it is to question the groupthink on this site but this strikes me as simplistic. The public takedowns related to tor have been more about firefox than windows. But I get that Linux fans like to think that this is their sole bailiwick.
If you are using tor and you are using a web browser as your primary means of communication AND YOU REQUIRE SAFTEY you have already made a serious mistake.
Using a JSON or XML based API would be much safer since you aren't having to trust any level of javascript, css, or html...fetching executable code over the internet from a third party is the ROOT of the problem.
It all comes down to what you are trying to do...why are you using tor? who is your adversary?
Just using tails or whonix and being super paranoid...because security...is kind of a shit lifestyle decision. It can also lead to a false sense of security.
If you are using tor and you are using a web browser as your primary means of communication AND YOU REQUIRE SAFTEY you have already made a serious mistake.
Using a JSON or XML based API would be much safer since you aren't having to trust any level of javascript, css, or html...fetching executable code over the internet from a third party is the ROOT of the problem.
It all comes down to what you are trying to do...why are you using tor? who is your adversary?
Just using tails or whonix and being super paranoid...because security...is kind of a shit lifestyle decision. It can also lead to a false sense of security.