44 ms·

While I normally feel like the designers don't care about accessibility, I feel like in this case, it may be a bit of a security issue. The site wants to do all

While I normally feel like the designers don't care about accessibility, I feel like in this case, it may be a bit of a security issue. The site wants to do all they can to foil automation, for example, and if the caret isn't helpfully placed exactly where they need to start input, a human can figure that out better than a bot.

ttfkam 3y ago
If your security is dependent on the ability of a bot to know which fields are available, why not go all the way? Make a canvas tag, draw the input fields, handle the text input, and completely thwart those bots! /s
- NoZebra120vClip 3y ago
  In case you haven't heard, a very popular and effective way to foil spambots has been the inclusion of a hidden FORM field, which the user won't see and won't fill out. The bot dutifully fills out the field, sends an HTTP POST, and is busted for looking at the HTML source. Have a nice day.
  - graftak 3y ago
    And it’s called a honeypot.
  - ttfkam 3y ago
    Useful against the lone hacker. Far less useful against a botnet where the source IPs are both constantly changing and not necessarily a bad actor, just compromised. But sure. Security measures from 1998 have their place too, I guess.
- pwdisswordfishc 3y ago
  https://javascript.plainenglish.io/goodbye-html-hello-canvas-part-1-92f750961666 https://javascript.plainenglish.io/goodbye-html-hello-canvas...
- eddd-ddde 3y ago
  Print the password prompt and request the user to send the answer via fax!