@greg Javascript attacks are IMO possible even with Tails. Having a separate Tor router/firewall in front of the workstation might be useful against this kind of attack, like the Whonix system with 2 virtual machines. I'm no expert, though.