From: Michal <lists+rubytalk@...>
Date: 2005-11-28T16:56:12+09:00
Subject: Re: [ANN] Turing 0.0.7 && cry for help

Hi,

> On a semi-ontopic post i'd like to remind that if your page uses
> captchas you should offer a alternative way of authenticating like
> phone or email because they are also excellent at keeping out blind
> people and people with other seeing disabilities.

well, I'm aware of this issue ... I just didn't need to solve it right
away because the site(s) I'll be deploying this on are mostly "visual",
so having seeing disabilities is deal breaker anyway.

I'm willing to implement any reasonable protocol that will help disabled
people to successfully pass this authentication -- right now I'm just
a tad confused what it should be? Any good ideas/references?

Rg,
         Michal

PS: This is my cry for help again: I'm still looking for volunteer to
    help me perform end-user (and performance) test of Apache2 drop-in
    replacement for mod_auth that prevents (among other things) dictionary
    (and bruteforce) attacks against credentials. If it sounds like fun,
    please check out details: http://wejn.org/ta-rt.html
-- 
# Michal Safranek, email:
a=(("a".."z").to_a+["@","."]);p(("%b"%[0x645bbb83a6a496]
).scan(/...../).map{|x|a[Integer("0b"+x)]}.join.reverse)