Anti-spam tricks block the blind
Published: 02 Jul 2003 13:28 BST
An increasingly popular technique for preventing email abuse is frustrating some visually impaired Net users, setting the stage for a conflict between spam busters and advocates for the disabled.
Many companies have recently begun requiring users to pass a verification test in order to access their services -- typically by typing into a Web form a few characters that appear on the form in a guise that prevents a computer or software robot from recognising and copying them. The technique, now used by Web giants Yahoo, Microsoft, VeriSign and others, seeks to block software bots from signing up for Web-based email accounts that can be used to launch spam and from scraping email addresses from online databases.
The scheme is winning high marks in the battle against unwanted junk email. But it is also increasingly hindering the progress of Web surfers with visual disabilities -- raising the ire of advocates for the blind, spurring plans for alternatives from a key Web standards group, and eliciting warnings from legal experts who say that the practice could expose companies to lawsuits brought under the Americans with Disabilities Act.
"It seems that they have jumped on a technological idea without thinking through the consequences for the whole population," said Janina Sajka, director of technology research and development for the American Foundation for the Blind in Washington, D.C. "These systems claim to test whether there's a human on the other end. But it's only technology that can challenge certain human abilities. So someone who doesn't have that particular ability is excluded from participation. That's really inappropriate."
Efforts to create tests aimed at distinguishing humans from machines go back decades, with the most famous formulation of the problem posed in 1950 by the English mathematician and World War II "Enigma" code breaker Alan Turing. Turing's controversial hypothesis was that a machine could be defined as "intelligent" if a questioner could be fooled into believing it was a person.
Visual tests in a sense turn that theory on its head, assuming that a machine is defined by its inability to perform a task that is easy for most humans to accomplish.
The increase in use of visual tests -- Yahoo in recent weeks has started springing them on users of its mail service -- comes as Internet service providers and other companies are acknowledging and attacking the spam problem with unprecedented energy. Assaults on spam have come fast and furious this year on the litigation, legislation and technology fronts.
Companies that have implemented the technique call it a winner. Microsoft last month said it had achieved a 20 percent reduction in email account registrations after implementing the test.
VeriSign, in another example, uses the technique to prevent automated queries to its WhoIS database of Web addresses and their registrants, in part to keep bots from harvesting the database for potential spam recipients.
Some Web sites using visual tests provide work-arounds for the visually impaired; some don't. But existing work-arounds are less than perfect and less than universally implemented.
Of the three above-mentioned companies with visual verification tests on their Web sites, only VeriSign's provided no alternative for the visually impaired. The company did not respond to requests for comment.
Microsoft's Hotmail service provides an audio alternative to its visual test, in which letters are read aloud instead of being displayed in a graphical file. But one such audio file -- deliberately garbled to prevent its being read by a computer -- was unintelligible to four out of four CNET News.com reporters, all with good hearing, who tried to decipher it.
Microsoft said it would review the audio work-around and defended its accessibility efforts generally.
"Microsoft has been exploring and evolving accessibility solutions that are integrated with products for more than a decade and takes its responsibility here very seriously," wrote a Microsoft representative in an email exchange. "They're committed to raising the standard for the whole industry in the making of accessible technology."
Microsoft maintains a Web page listing its resources and products for the visually impaired. "It seems they have jumped on a technological idea without thinking through the consequences for the whole population" -- Janina Sajka, director of technology research and development, American Foundation for the Blind
Yahoo lets people who can't see its visual verification test fill out a Web form that it promises it will process within 24 hours. But even that slower work-around is not available to all Yahoo sign-up services -- for example, for people signing up for a new ID through Yahoo's instant messenger application.
Yahoo said engineers were working on a customer support option for YIM, and that it would be added to the next version. The company added that the option is currently available for those who register through the IM Web site.
Looking for a better way
The increasingly popular visual test, and the difficulty of using current work-arounds, has raised enough hackles among advocates for the disabled that working groups within the World Wide Web Consortium's (W3C) Web Accessibility Initiative have begun discussions on how to standardise an alternative.
Two WAI working groups are hashing out proposals to guide Web sites in designing blind-friendly bot repellants, and the WAI hopes to address the issue in the next working draft of its Web Accessibility Guidelines, Version 2.0, which is due by year's end. So far, published working drafts of the guidelines are silent on the issue.
"What visual verification is testing is whether someone is a sighted human, even if that's not the intent of the organisations using it," said Judy Brewer, director of the WAI. "This has been a known problem for several years, and I know that we've received different complaints about it. But it's not necessarily an easy problem to solve."
One spam opponent came to the defense of companies with visual tests, calling the tests crucial weapons against the growing legions of spam-sending machines.
"Anything that restricts people's ability to use email lessens its usefulness as a communications medium," said Laura Atkins, president of the SpamCon Foundation. "On the surface, it's not a good thing. But there's so much abuse out there that the (Internet service providers) have to do it. Any site that does it should provide an alternate way for a blind person to sign up. But you can't condemn the ISPs for doing what they're doing to minimise the abuse."
Let the editors know what you think in the Mailroom.
Did you find this article useful?
63 out of 133 people found this useful
Digg
Slashdot
Del.ici.ous
Stumble
Reddit
