Vidalia Logo Design Contest

Off-topic suggestion:

Adding some of this somewhere in Tor's documentation or Wik could be helpful.

* Use Firefox Portable for Tor only sessions.
* Go through the preferences and disable anything that logs or leaks information. This includes, but is not limited to:
o In "Content," disable java/javascript.
o In "Privacy," remember nothing. Remember no history. Don't accept cookies, no exceptions. Always clear everything before closing.
o In "Security," warn before installing addons. Remove all exceptions. Remember no passwords.
o In "Advanced" - Network, set the cache size to 0.
o In "Advanced" - Update, disable auto updating/checking for updates.
* Install the Torbutton extension - the one that overhauls browser security, not just change proxy settings. The latest version at this time is 1.2.0.
o Enable every check mark.
o Clear cookies on any browser shutdown (but cookies should be disabled!).
o Clear cookies on Tor toggle ("").
o Whenever there's an option to choose between Tor and non-Tor, choose Tor.
o Block tor disk cache, but you'll want to allow memory cache to prevent redownloading of images.
o Make sure the proxy settings point to privoxy.
* Set network.http.sendRefererHeader to 0 in about:config. Also set false for network.http.sendSecureXSiteReferrer, or use Refcontrol.
* In the proxy settings make sure the proxy exceptions list is empty. It can be used as a way for sites to access localhost.
* One annoying thing about Firefox is the way it handles external applications. You want to disable them all because sites may call telnet for example, which can leak your IP address among other things. Look in about:config for network.protocol-handler.external. You'll want to set the default and all the subsettings to false. Then look for network.protocol-handler.warn-external. You want to set the default and all the subsettings to true. Is there an extension that does this?
* Firefox checks for extensions without the user's consent; a temporary solution is to set extensions.blocklist.enabled to false.
* There are probably other information leaks that could come about if you accidentally click a button. Search through about:config for URLs and blank them out. The types of links I've seen are http, https, and rdp. Don't remove anything with chrome:// or resource:// though.
* Make sure the plugin directory is empty. Do this again every time you update Flash or Shockwave.
* Set the home page to about:blank

Because of the huge amount of lag associated with Tor, pipelining, i.e. sending http requests in batches, makes a lot of sense. Go to about:config and make the following changes: network.http.keep-alive.timeout:600 network.http.max-persistent-connections-per-proxy:16 network.http.pipelining:true network.http.pipelining.maxrequests:8 network.http.proxy.keep-alive:true network.http.proxy.pipelining:true

You should also disable prefetching. This is when the browser tries to predict what the user will click next. It is a waste of Tor bandwidth, and should be disabled by setting network.prefetch-next to false.