WebAIM - Web Accessibility In Mind

E-mail List Archives

RE: Keylogging and PIN entry fields

for

From: Robinson, Norman B - Washington, DC
Date: Nov 25, 2005 9:40AM

Barring rational reasons that this is the wrong approach, (i.e., if
you've got a keylogger on your system other things are probably
compromised such that a remote user could be viewing your entire
session) your solution seems sound and accessible.

Keyboard access works. I can scale the display with the font size. Works
when style sheets are disabled.

I didn't see a submit feature with the JavaScript disabled, but assume
you are simply prototyping a potential solution. I'd hate to have a
submit event on the last dropdown in case I accidentally hit the wrong
number.

There are always reasons, some unsound that users want to implement
things. You've done a good job making their content accessible.

Excellent!


~Norman Robinson

-----Original Message-----
From: <EMAIL REMOVED>
[mailto: <EMAIL REMOVED> ] On Behalf Of Christian
Heilmann
Sent: Wednesday, November 23, 2005 3:31 PM
To: WebAIM Discussion List
Subject: [WebAIM] Keylogging and PIN entry fields


I had to deal with a client requirement today that puzzled me. The
product is a banking application and there will be a login that
requires a 4 number pin.

Now, normally I'd have used a password field for that - as it is the
most accessible solution - but the client requested a pin entry pad
like the ones you see on cash machines.

The users should use their mouse to enter the pin.

The reason (not marketing as I originally thought): Keylogging
software that might record the pins users enter. Therefore as a safety
measure the pin pad was requested.

I came up with a DOM solution for the issue and would appreciate some
feedback and testing of it. If it were to be considered good, I will
release it as a download later:

http://www.icant.co.uk/sandbox/pinpad/test.html

More info and comment facility on the blog:
http://www.wait-till-i.com/index.php?p=193

I really wonder if there is a non-JavaScript dependent solution to
this problem. Well, 4 dropdowns with 0 to 9 would be one, but that is
as trackable, isn't it?

--
Chris Heilmann
Blog: http://www.wait-till-i.com
Writing: http://icant.co.uk/
Binaries: http://www.onlinetools.org/