Comments on: Proposal for an Accessible Captcha http://www.standards-schmandards.com/2005/captcha/ A pragmatic approach to web standards and accessibility Thu, 02 Sep 2010 11:45:45 +0000 hourly 1 http://wordpress.org/?v=3.0 By: Peter http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-228 Peter Wed, 04 Jan 2006 17:16:47 +0000 http://localhost:8888/?p=6#comment-228 <p><strong>Sophie: </strong>It would be very difficult to cater for all possible visitor languages. The idea about numbers is that they are from a limited domain of the english language. Numbers are also one of the first things you learn when adopting a new language and the idea is that simple numbers are likely to be understood. Also, if your main content isn't localized I guess translating the audio captcha isn't a priority.</p> <p><strong>Rich: </strong>Great idea about the flash player/download combination idea.</p> Sophie: It would be very difficult to cater for all possible visitor languages. The idea about numbers is that they are from a limited domain of the english language. Numbers are also one of the first things you learn when adopting a new language and the idea is that simple numbers are likely to be understood. Also, if your main content isn’t localized I guess translating the audio captcha isn’t a priority.

Rich: Great idea about the flash player/download combination idea.

]]> By: RichGC http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-263 RichGC Wed, 28 Dec 2005 18:16:57 +0000 http://localhost:8888/?p=6#comment-263 <p>I recently added an audio to a captcha test and I thought id throw in my experience from a technical point of view.</p> <p>You can use TTS or recording to make the base numbers, for example, 1,2,3,11,12,20,30.</p> <p>The convert them into mp3 WITHOUT any ID tags ( I used cdex software ) this allows you to join the files without any issues.</p> <p>Then any webscripting language can generate temp file on the fly that gets cleaned up after a set time.</p> <p>For your test it would be like:</p> <p>EXPIRECODE.mp3 = 70.mp3 + pause.mp3 + 30.mp3 + 3.mp3 + pause.mp3 + 12.mp3</p> <p>Also a note on playback, do not both trying to use embed or object to call a player as no solution works across platforms and browsers. Instead you can use Flash to play the mp3 in a loop from within the webpage ( most people have it ) and provide a download link for those who do not.</p> I recently added an audio to a captcha test and I thought id throw in my experience from a technical point of view.

You can use TTS or recording to make the base numbers, for example, 1,2,3,11,12,20,30.

The convert them into mp3 WITHOUT any ID tags ( I used cdex software ) this allows you to join the files without any issues.

Then any webscripting language can generate temp file on the fly that gets cleaned up after a set time.

For your test it would be like:

EXPIRECODE.mp3 = 70.mp3 + pause.mp3 + 30.mp3 + 3.mp3 + pause.mp3 + 12.mp3

Also a note on playback, do not both trying to use embed or object to call a player as no solution works across platforms and browsers. Instead you can use Flash to play the mp3 in a loop from within the webpage ( most people have it ) and provide a download link for those who do not.

]]> By: u24 http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-262 u24 Fri, 09 Dec 2005 03:45:34 +0000 http://localhost:8888/?p=6#comment-262 <p>re: tom sherman "Circumventing CAPTCHAs ain't easy."</p> <p>for circumvention, see: <a href="http://www.puremango.co.uk/cm_breaking_captcha_115.php">breaking captchas without OCR</a></p> <p>for OCR attacks, see <a href="http://ocr-research.org.ua">ocr research team</a> <a href="http://sam.zoy.org/pwntcha">pwtcha captcha decoder</a></p> re: tom sherman “Circumventing CAPTCHAs ain’t easy.”

for circumvention, see: breaking captchas without OCR

for OCR attacks, see ocr research team pwtcha captcha decoder

]]> By: Sophie http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-259 Sophie Tue, 29 Nov 2005 19:05:30 +0000 http://localhost:8888/?p=6#comment-259 <p>Thanks for this, but doesn't it fail on the first requirement ?</p> <p>Culture... What about people who don't speak english ? The audio treatment makes the captcha a little hard to understand. Would you be able to generate captchas according to the language attribute of the page or form ?</p> Thanks for this, but doesn’t it fail on the first requirement ?

Culture… What about people who don’t speak english ? The audio treatment makes the captcha a little hard to understand. Would you be able to generate captchas according to the language attribute of the page or form ?

]]> By: Pete http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-241 Pete Fri, 04 Nov 2005 19:09:22 +0000 http://localhost:8888/?p=6#comment-241 <p><strong>alikon:</strong> The source code to create the audio files is written in C-sharp and is available from the references section above.</p> alikon: The source code to create the audio files is written in C-sharp and is available from the references section above.

]]> By: alikon http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-240 alikon Fri, 04 Nov 2005 12:47:54 +0000 http://localhost:8888/?p=6#comment-240 <p>Is possible to have the source code in php for the audiocapctha.</p> <p>Thanks</p> Is possible to have the source code in php for the audiocapctha.

Thanks

]]> By: Mardeg http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-220 Mardeg Tue, 25 Oct 2005 04:17:08 +0000 http://localhost:8888/?p=6#comment-220 <p>I think that combining methods can be done more creatively, such as displaying a numbered list of image/words and and a numbered list of instructions, each telling you a different sequence of words to enter, then having the audio file tell you which instruction to follow.</p> <p>As for visually impaired people not being able to see images and browsers with images turned off, this is easily solved by instead of actually showing the images, convert them into CSS shrunken text logos that have the <strong>illusion</strong> of images. For that matter, the list of instructions themselves can be done like this aswell. My link shows one example of the CSS method at work.</p> <p>Most of all, don't limit yourself to one set format, having many different systems combining differently each time varying the complexity will increase the time needed by bots to recognise which system/combination is in use, hopefully beyond the expiry point.</p> I think that combining methods can be done more creatively, such as displaying a numbered list of image/words and and a numbered list of instructions, each telling you a different sequence of words to enter, then having the audio file tell you which instruction to follow.

As for visually impaired people not being able to see images and browsers with images turned off, this is easily solved by instead of actually showing the images, convert them into CSS shrunken text logos that have the illusion of images. For that matter, the list of instructions themselves can be done like this aswell. My link shows one example of the CSS method at work.

Most of all, don’t limit yourself to one set format, having many different systems combining differently each time varying the complexity will increase the time needed by bots to recognise which system/combination is in use, hopefully beyond the expiry point.

]]> By: José Moya http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-198 José Moya Thu, 29 Sep 2005 23:37:33 +0000 http://localhost:8888/?p=6#comment-198 <p>I want to make you a question I haven't seen in the previous comments. Don't you think opening the sound file IN THE SAME WINDOW (thus closing the form) is a bit nasty? When I've heard the numbers I've thought: "Damn! I'll forgot these numbers before I can click "back" to fill the form".</p> I want to make you a question I haven’t seen in the previous comments. Don’t you think opening the sound file IN THE SAME WINDOW (thus closing the form) is a bit nasty? When I’ve heard the numbers I’ve thought: “Damn! I’ll forgot these numbers before I can click “back” to fill the form”.

]]> By: Doug de la Torre http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-187 Doug de la Torre Tue, 30 Aug 2005 00:19:28 +0000 http://localhost:8888/?p=6#comment-187 <p>Captchas are a nice alternative for public 'collaboration', especially when you want real feedback without turning users away by requiring logins (and lots of annoying info like address, phone, etc).</p> <p>Glad to see you are exploring alternatives to make them accessible to everyone.</p> Captchas are a nice alternative for public ‘collaboration’, especially when you want real feedback without turning users away by requiring logins (and lots of annoying info like address, phone, etc).

Glad to see you are exploring alternatives to make them accessible to everyone.

]]> By: Rick Huby http://www.standards-schmandards.com/2005/captcha/comment-page-1/#comment-177 Rick Huby Wed, 27 Jul 2005 14:57:02 +0000 http://localhost:8888/?p=6#comment-177 <p>Excellent article, really gives me a lot of opportunity to provide a solid and accessible solution to our clients. As with everything to do with Accessibility you are never going to satisfy EVERY eventuality, but like others mentioned, a person who uses an audio browser is likely to have audio capabilities in their computer.</p> <p>Your article also made me think about the fact that spambots are not going to be attacking ALL sites and that really evalutaing which sites will need protection and which won't will help cut out such messing about for ALL web users.</p> Excellent article, really gives me a lot of opportunity to provide a solid and accessible solution to our clients. As with everything to do with Accessibility you are never going to satisfy EVERY eventuality, but like others mentioned, a person who uses an audio browser is likely to have audio capabilities in their computer.

Your article also made me think about the fact that spambots are not going to be attacking ALL sites and that really evalutaing which sites will need protection and which won’t will help cut out such messing about for ALL web users.

]]>