If I just want Whonix as disposable browser, should I leave the default configuration intact, including making any changes to user config outside of Tor Browser itself like desktop environment settings, shell aliases, and installing any new apps? What are the risks if I do?
Yes, avoiding all changes would be ideal.
If you make changes, and a website you visit is able to compromise Tor Browser and infect the workstation, any configuration changes, locally stored data, etc. becomes a way to fingerprint you. Some seemingly innocuous configuration changes (like adjusting VM window resolution) can also make it easier to fingerprint you even without infecting the workstation.
1 Like