Zeitgeist (Along with DNSmasq) are security threats in Ubuntu. Dnsmasq is great for a router to hide all devices behind it, but it broadcasts 'localhost' to the world as it destroys the benefits of 'live sessions' to hide your OS when used on the workstation level. It can also be exploited.

Zeitgiest logs everything you do. Its bad news for privacy advocates.

Xhost should also be disabled from startup applications.
Avahi should at least be disabled at startup if not removed. You can use other discovery software that does not broadcast.
Netbios should be removed or disabled from broadcasting.

Tor also should not startup automatically. Use sudo lsof -i to see what is running. Anything other than cups and open applications and maybe dhc is a problem in many cases, unless you are intentionally USING it.