Mailing-lists Search service

1. Re: CAPTCHA implementors' thread on wai-xtech (score: 63) (7,199 bytes)
Author: "Gregory J. Rosmaita" <oedipus@hicom.net>, Date: Thu, 23 Aug 2007 15:14:39 -0400 List: Public/wai-xtech
In-Reply-To: <ioKdnSgqW8GabFHbnZ2dnUVZ_jidnZ2d@mozilla.org> References: 1 2 3

aaron -- i think the best feedback would from the implementors who participated the impact of user testing upon their approach to the problem: Ben Maurer -- reCAPTCHA point-person (Carnigie Mellon Un

2. label text [was: Re: reCAPTCHA: AOL's CAPTCHA] (score: 101) (1,699 bytes)
Author: Al Gilman <Alfred.S.Gilman@IEEE.org>, Date: Thu, 19 Jul 2007 12:24:28 -0400 List: Public/wai-xtech
In-Reply-To: <Pine.LNX.4.64-044.0707181110030.5857@unix31.andrew.cmu.edu> References: 1 2

+1 Perhaps: "prefer sound puzzle" "prefer picture puzzle" "prefer logic puzzle" -- if used ?? This would break the present endless referral cycle. Al

3. Re: reCAPTCHA: AOL's CAPTCHA (score: 101) (3,595 bytes)
Author: Ben Maurer <bmaurer@andrew.cmu.edu>, Date: Wed, 18 Jul 2007 13:42:11 -0700 (PDT) List: Public/wai-xtech
In-Reply-To: <e2a28a920707181235j28b5351fxc785251074ef6d50@mail.gmail.com> References: 1 2 3

Hey, Ok, so that's pretty obviously a bad idea. Either they got the security stuff right (and they should just not show the CAPTCHA the second time) or they didn't (and need to fix their code). Bring

4. Re: reCAPTCHA: AOL's CAPTCHA (score: 101) (3,737 bytes)
Author: "Gez Lemon" <gez.lemon@gmail.com>, Date: Wed, 18 Jul 2007 20:35:59 +0100 List: Public/wai-xtech
In-Reply-To: <Pine.LNX.4.64-044.0707181221490.5857@unix31.andrew.cmu.edu> References: 1 2 3

The usability aspects make it worth the extra work to getting the security aspect right, in my opinion. At the moment, AOL do re-present the same CAPTCHA, so if they're not safe-guarding against this

5. Re: reCAPTCHA: AOL's CAPTCHA (score: 113) (3,661 bytes)
Author: Ben Maurer <bmaurer@andrew.cmu.edu>, Date: Wed, 18 Jul 2007 12:29:46 -0700 (PDT) List: Public/wai-xtech
In-Reply-To: <e2a28a920707181218y645c0ef0ra7df063385f0e55f@mail.gmail.com> References: 1 2 3

Hello, Once a user solves a specific CAPTCHA, they can not be allowed to use the CAPTCHA again. Otherwise you could amplify a human based attack by re-using human solutions. It's not that the code ca

6. Re: reCAPTCHA: AOL's CAPTCHA (score: 101) (3,755 bytes)
Author: "Gez Lemon" <gez.lemon@gmail.com>, Date: Wed, 18 Jul 2007 20:18:06 +0100 List: Public/wai-xtech
In-Reply-To: <Pine.LNX.4.64-044.0707181104430.5857@unix31.andrew.cmu.edu> References: 1 2 3

If the block the CAPTCHA is contained in is hidden with display: none, it would still be submitted with the form, but hidden in graphical browsers with CSS enabled (and also from screen readers inter

7. Re: reCAPTCHA: AOL's CAPTCHA (score: 101) (2,993 bytes)
Author: Ben Maurer <bmaurer@andrew.cmu.edu>, Date: Wed, 18 Jul 2007 11:37:41 -0700 (PDT) List: Public/wai-xtech
In-Reply-To: <1D65257B9F22C84F89F812FB1C24CA8D024E3ED8@EXCHNVA02.ad.office.aol.com> References: 1

- the visual CAPTCHA is very insecure. It's easy to segment and minimal distortion has been applied to the letters. Amatuer projects have broken similar CAPTCHAs pretty easily. With audio its harder

8. Re: reCAPTCHA: AOL's CAPTCHA (score: 101) (2,149 bytes)
Author: Ben Maurer <bmaurer@andrew.cmu.edu>, Date: Wed, 18 Jul 2007 11:06:18 -0700 (PDT) List: Public/wai-xtech
In-Reply-To: <e2a28a920707180907w1a9b3b79n86ff324afc89e3f8@mail.gmail.com> References: 1 2

Hey, In general, this can be very hard for a site to implement. The issue is that it's easy to create a replay attack (a case where the solution to a CAPTCHA can be re-used). -b

9. Re: reCAPTCHA: AOL's CAPTCHA (score: 101) (3,234 bytes)
Author: Joshue O Connor <joshue.oconnor@cfit.ie>, Date: Wed, 18 Jul 2007 17:57:51 +0100 List: Public/wai-xtech
In-Reply-To: <1D65257B9F22C84F89F812FB1C24CA8D024E3ED8@EXCHNVA02.ad.office.aol.com> References: 1

Hi Donald, Both Gez and David made good points. It seems pretty good to me, the quality of the audio is good. A couple of ideas. I wonder if there is a way of using more high level words that can be

10. Re: reCAPTCHA: AOL's CAPTCHA (score: 101) (3,847 bytes)
Author: "Gez Lemon" <gez.lemon@gmail.com>, Date: Wed, 18 Jul 2007 17:07:46 +0100 List: Public/wai-xtech
In-Reply-To: <1D65257B9F22C84F89F812FB1C24CA8D024E3ED8@EXCHNVA02.ad.office.aol.com> References: 1

Hi Don, The process can be filled in relatively easy with the keyboard alone. I think it could be improved if there was an option to request a new visual or audio challenge, as well as being able to

11. RE: reCAPTCHA: AOL's CAPTCHA (score: 101) (2,998 bytes)
Author: "Evans, Donald" <Donald.Evans@corp.aol.com>, Date: Wed, 18 Jul 2007 12:03:43 -0400 List: Public/wai-xtech
In-Reply-To: <001401c7c953$8acbf780$0401a8c0@HANDS> References: 1 2

12. Re: reCAPTCHA: AOL's CAPTCHA (score: 107) (2,235 bytes)
Author: "David Poehlman" <david.poehlman@handsontechnologeyes.com>, Date: Wed, 18 Jul 2007 11:51:43 -0400 List: Public/wai-xtech References: 1

don, this is nice, but if you click for audio and than click cannot hear, you are taken back to the image. This is such a great thread, I thought I would ask some of you to take a look at AOL's CAPTC

13. reCAPTCHA: AOL's CAPTCHA (score: 101) (6,289 bytes)
Author: "Evans, Donald" <Donald.Evans@corp.aol.com>, Date: Wed, 18 Jul 2007 10:23:24 -0400 List: Public/wai-xtech

14. Re: [note: two-level nav in WAI-ARIA] [was: Re: reCAPTCHA implementation problems] (score: 101) (4,431 bytes)
Author: "Gez Lemon" <gez.lemon@gmail.com>, Date: Wed, 18 Jul 2007 10:41:35 +0100 List: Public/wai-xtech
In-Reply-To: <Pine.LNX.4.64-044.0707180042590.11322@unix32.andrew.cmu.edu> References: 1 2 3 4 5

A bigger concern in your case is that you will need to choose accesskeys that don't conflict with those provided by the author of the page. You can't guarantee that any key you choose isn't already c

15. Re: [note: two-level nav in WAI-ARIA] [was: Re: reCAPTCHA implementation problems] (score: 113) (6,184 bytes)
Author: Joshue O Connor <joshue.oconnor@cfit.ie>, Date: Wed, 18 Jul 2007 10:24:50 +0100 List: Public/wai-xtech
In-Reply-To: <Pine.LNX.4.64-044.0707172037020.19055@unix37.andrew.cmu.edu> References: 1 2 3 4

Hi Ben, Gez has made some really good points in his last post about the importance of keyboard accessibility. It really is not an edge case and shouldn't be considered as such ( I am not saying that

16. Re: [note: two-level nav in WAI-ARIA] [was: Re: reCAPTCHA implementation problems] (score: 101) (3,606 bytes)
Author: Ben Maurer <bmaurer@andrew.cmu.edu>, Date: Wed, 18 Jul 2007 00:45:36 -0700 (PDT) List: Public/wai-xtech
In-Reply-To: <op.tvnbz6j6wxe0ny@widsith> References: 1 2 3 4

Hey, So CC's I think are rare (you've got to be pretty picky to care about cc vs to). Bcc's make a difference, I'm not sure how common though. Select from contacts is sort of lame given that Gmail ha

17. Re: reCAPTCHA: audio alternatives and audio formats (score: 101) (5,635 bytes)
Author: "Charles McCathieNevile" <chaals@opera.com>, Date: Wed, 18 Jul 2007 06:54:02 +0100 List: Public/wai-xtech
In-Reply-To: <Pine.LNX.4.64-044.0707171001010.17669@unix33.andrew.cmu.edu> References: 1 2

18. Re: [note: two-level nav in WAI-ARIA] [was: Re: reCAPTCHA implementation problems] (score: 101) (4,839 bytes)
Author: "Charles McCathieNevile" <chaals@opera.com>, Date: Wed, 18 Jul 2007 06:53:56 +0100 List: Public/wai-xtech
In-Reply-To: <Pine.LNX.4.64-044.0707172037020.19055@unix37.andrew.cmu.edu> References: 1 2 3 4

19. Re: [note: two-level nav in WAI-ARIA] [was: Re: reCAPTCHA implementation problems] (score: 113) (4,018 bytes)
Author: Ben Maurer <bmaurer@andrew.cmu.edu>, Date: Tue, 17 Jul 2007 21:26:07 -0700 (PDT) List: Public/wai-xtech
In-Reply-To: <e2a28a920707172004jca81e2au6707b57f5216d33b@mail.gmail.com> References: 1 2 3 4

Hey, I think that (at least for people without disabilities) providing a tab order that reflects the most common navigation path can be beneficial. Take Gmail. To composte an email,one can press "c"

20. Re: [note: two-level nav in WAI-ARIA] [was: Re: reCAPTCHA implementation problems] (score: 101) (7,993 bytes)
Author: "Gez Lemon" <gez.lemon@gmail.com>, Date: Wed, 18 Jul 2007 04:04:14 +0100 List: Public/wai-xtech
In-Reply-To: <Pine.LNX.4.64-044.0707171525320.476@unix37.andrew.cmu.edu> References: 1 2 3 4