WebAIM - Web Accessibility In Mind

E-mail List Archives

Re: Keylogging and PIN entry fields

for

From: Webmaster
Date: Nov 25, 2005 9:00PM

Hi Chris,

Have a look here http://www.enetplanet.com/kb_fr/

This is the whole on-screen keyboard. Note that one can insert letters
with this virtual keyboard in the middle of the text. Besides it is
available in several languages. In principle I can do it in any
language, even in such as, say, Hebrew, where one has to write from
right to left.

So, I mean not only a pin, but the real passwords in any language are
possible with this approach. Besides there is the drop down on this
keyboard with all the symbols belonging the encoding. So a password can
be with symbols too!

brgds Alex
>
> -----Original Message-----
> From: <EMAIL REMOVED>
> [mailto: <EMAIL REMOVED> ] On Behalf Of Christian
> Heilmann
> Sent: Wednesday, November 23, 2005 3:31 PM
> To: WebAIM Discussion List
> Subject: [WebAIM] Keylogging and PIN entry fields
>
>
> I had to deal with a client requirement today that puzzled me. The
> product is a banking application and there will be a login that
> requires a 4 number pin.
>
> Now, normally I'd have used a password field for that - as it is the
> most accessible solution - but the client requested a pin entry pad
> like the ones you see on cash machines.
>
> The users should use their mouse to enter the pin.
>
> The reason (not marketing as I originally thought): Keylogging
> software that might record the pins users enter. Therefore as a safety
> measure the pin pad was requested.
>
> I came up with a DOM solution for the issue and would appreciate some
> feedback and testing of it. If it were to be considered good, I will
> release it as a download later:
>
> http://www.icant.co.uk/sandbox/pinpad/test.html
>
> More info and comment facility on the blog:
> http://www.wait-till-i.com/index.php?p=193
>
> I really wonder if there is a non-JavaScript dependent solution to
> this problem. Well, 4 dropdowns with 0 to 9 would be one, but that is
> as trackable, isn't it?
>
> --
> Chris Heilmann
> Blog: http://www.wait-till-i.com
> Writing: http://icant.co.uk/
> Binaries: http://www.onlinetools.org/
>
>
>
>
>
>
>
>
>