About:config values need changing
github.com/pyllyukko/user.js/blob/master/user.js
has a lot of privacy settings that can be disabled. although torbutton+tbb uses some of the right settings, i'm sure there are a few you have missed such as:
camera.control.face_detection.enabled webgl.disabled beacon.enabled
etc.