Re:Stripe records user movements on its customers' websites
by lucb1e on Wednesday April 22, 2020 @01:16PM
(#22947879)
> allow for them to use an alternative system without locking them out
That's not what I'm arguing against, though. I was not saying: forbid screen readers. I said:
> do you have to think of all possible edge cases? What if someone uses dictation because they can't type, does that mean you'd potentially capture social security numbers if you use the microphone for gunshot detection and process the sound server-side?
Re:Stripe records user movements on its customers' websites
by shakna on Wednesday April 22, 2020 @08:49PM
(#22951749)
Inadvertently capturing social security numbers does actually open you up to a lot of PII laws. So yes, that is still a problem.
Any time you get data from a user, you need to be careful about what you're grabbing.
There have been a number of accessibility-based lawsuits recently. Generally speaking, yes, you absolutely have to allow for them to use an alternative system without locking them out.
Because if your particular methodology breaks things for a people group that way, all kinds of discrimination laws become a hammer that someone can toss your way.