bridge
bridge copied to clipboard
urbit
Could not activate planet - Master Ticket image was blank white
I have received an email from Urbit Bridge with a link to activate a planet. The link worked and I downloaded my Master Ticket and extracted the zip file, which resulted in two files:
- savler-ronwyx-Management Proxy.png
- savler-ronwyx-Master Ticket.png
However both of these files just show as blank white pages, so I could not verify my Master Ticket.
OK - I worked out the fix. This only occurs when Firefox blocks 'canvas identity tracking'. When I switch that off, and start the process again, it goes through OK. Which begs the question, why are Urbit using canvas trackers?
I'm not on Bridge team, but I will say that PaperRenderer initiates a canvas and has the client draw it in order to create the passport using just your machine, not our servers. Having a client draw a canvas hidden from the DOM is essentially how canvas fingerprinting works, so I would imagine it's a false positive on Firefox's part.
Came here to give that answer! Interesting that it's flagged, though. Maybe because it's a canvas that isn't rendered to screen, but is instead used to generate DL? might seem fishy. — ~poldec-tonteg http://urbit.org
On Wed, Jan 29, 2020 at 12:46 PM matildepark [email protected] wrote:
I'm not on Bridge team, but I will say that PaperRenderer https://github.com/urbit/PaperRenderer initiates a canvas and has the client draw it in order to create the passport using just your machine, not our servers. Having a client draw a canvas hidden from the DOM is essentially how canvas fingerprinting works, so I would imagine it's a false positive on Firefox's part.
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/urbit/bridge/issues/374?email_source=notifications&email_token=AAMJBY2Z7SKWS4LDB6B75ZTRAHTJDA5CNFSM4KNKWET2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEKIVWHY#issuecomment-579951391, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAMJBY6LHAVMDOR4YDZ7Z6TRAHTJDANCNFSM4KNKWETQ .
Interesting. I'm on Firefox, and can't reproduce this. My tracking protection is set to "strict", and clicking the icon on the Bridge page shows this:
What OS and Firefox version are you on?
Hi. I'm running Firefox 68.4.1esr on Debian 10.
Privacy settings screenshot attached.
As I go through the activation process, the protection shield in the URL bar changes from a shield to an image icon - the image icon refers to canvas tracking - when I click on that icon and turn it off, the problem goes away.
Thanks for the details @nsclong! For completeness, I'm running Firefox 73.0b2 on MacOS 10.12.6.
This is interesting, curious if this setting blocks canvas drawing outright, or if there is a specific operation that it is designed to detect.
managed to repro this one on OS X by setting resistFingerprinting: true in about:config . fix on the way!
