News for hackers. Stuff that matters.
Re:A negative captcha by lwf on Monday September 30, 2013 @12:47AM (#6467846)
I can imagine this might be problematic for people using assistive technology…
Re:A negative captcha by etherealG on Monday September 30, 2013 @02:37AM (#6468119)
been doing this for years, the way we handle it is to hide the element via javascript. then most screen readers won't "see" it, but generic form bots aren't that smart.
Re:A negative captcha by 67726e on Monday September 30, 2013 @07:51AM (#6468991)
There are HTML attributes you can use to denote things like "ignore this field" for screen readers and the like.

http://www.w3.org/WAI/intro/aria

Re:A negative captcha by nyrina on Monday September 30, 2013 @10:21AM (#6469743)
And the bots knows this information as well, and uses it.
Re:A negative captcha by MatmaRex on Monday September 30, 2013 @05:08AM (#6468508)
Adding a <label> saying "Do not fill this out, antispam filter" should probably be enough to mitigate that. (Disclaimer: I am lucky enough not to have to use screen readers etc.)
Re:A negative captcha by next89 on Monday September 30, 2013 @01:27AM (#6467962)
I think that it would be easily fixable. Every time you disable an account you send an email to the email address they registered letting them now about it with a link to reactivate it. For the reactivation, you can even add a normal catpcha to prevent the bots exploiting the loophole.
Re:A negative captcha by scott_karana on Monday September 30, 2013 @02:22AM (#6468068)
Kinda negates the UI advantage of this approach, doesn't it?

Maybe there's an alternative, like a Javascript-filled ARIA-field that would read out "do not fill this field: robot use only"?

Re:A negative captcha by samuellevy on Monday September 30, 2013 @03:01AM (#6468179)
I just label my fields appropriately, and put a "skip to form" link (like a "skip to content" link). Other options exist like using media detection, or JavaScript (very few bots run JavaScript on pages. It slows down the process, and requires more smarts than a generic html parser)

No negative captcha will stand up to a targeted attack, but if you're not running a huge site, targeted attacks are very unlikely.