[tor-talk] User views on lesser of 2 evils_Tor FAQ on using java script

[grarpamp]

On Sat, Jul 26, 2014 at 3:26 PM, Joe Btfsplk <joebtfsplk at gmx.com> wrote:
> How do some more advanced Tor users feel about pros & cons of leaving java
> script constantly enabled or selectively enabling it?

The risk of any potential leak of real IP or actual user data
(not just meta browser environment data) is overriding consideration.
Much more than any js on/off matrix leak to some observing
exit or multi-hosting webserver (which are fringe cases to begin with).

Sandbox your apps, keep your user data minimal and compartmented,
manage your stored profiles/dotdirs and sessions. Do that and all this
talk of javascript, java, flash, dom, cookies, canvas, etc... generally
approaches moot. This doesn't mean they should be ignored, but
that in the big picture, there are bigger concepts to grasp first.