[hackinthebochs]

>prevented TBB Firefox from even making a network connection that's not to the Tor tunnel, or possibly even prevent Firefox from knowing it's own IP. Dunno if something like this is even possible on Windows.

I don't currently use Tor, but I've thought about it and this is how I would do it. This can be done on windows using a virtual machine that disallows internet connections. Have the VM only able to network with the host OS, which is running the Tor app. That way the VM doesn't have an internet IP to leak, and if firefox itself is compromised there isn't anything on the VM that could give you away.

[foobarqux]

Whonix already does this.

[hackinthebochs]

Looks sweet. I'll check it out.

[foobarqux]

Be careful, I don't think it has received a great deal of peer review and the community doesn't seem to be large.