Jump to main navigation, main content

Archived entry | Matt Wilcox .net

Google Gmail CAPTCHA

I went to sign into my Gmail account today and after entering my username and password, got hit by a request for a CAPTCHA and a re-entering of my password. I was furious.

  1. CAPTCHAs are bad for accessibility, regardless of the ‘accessible’ CAPTCHA option that is also presented. Incidentally, the ‘accessible’ CAPTCHA only works if you have javascript turned on, and Flash installed, and happen to not be deaf or stuck on a computer without sound card or speakers - so blind people on a university computer are completely stuck)
  2. The CAPTCHA only appears after you have submitted your username and password. So you then have to enter the password again. Time waste!
  3. Why use a CAPTCHA anyway!? If a spambot has got my username and password and can log in automatically then I’m seriously worried. Where is the benefit of using one here?

Seems a very ill thought out and extremely annoying move to add to the log in system. I fail to see the point, and certainly feel the trade off is not worth any potential ’security’ benefit.

This entry is 2 years, 119 days, 2hrs old; its contents may have become outdated, irrelevent or inacurate. Linkrot may have occured.

Comments

skip to comment form
  1. stokefan posted 4 days, 2hrs, 56mins after the entry and said:

    I never knew those were called CAPTCHAs! smiley icon: smile thanks Matt!

  2. Matt Wilcox posted 4 days, 7hrs, 35mins after the entry and said:

    We learn something every day James! smiley icon: smile

    After reading up on it a little more I can at least understand why Google have started using CAPTCHAs.
    The CAPTCHA only appears if you attempt to log-in with an incorrect password. By challenging you to a CAPTCHA Google are making brute-force account hacking impossible, because you can't leave a hack-bot constantly hitting the form. It will always fail on the CAPTCHA.

Care to share a thought?

Who are you?

What have you got to say?

note: I have used various methods to reduce comment spam. Your browser must send a HTTP_REFERER header in order to successfully post a comment.

From the archives

Other enteries filed under:

My Two Cents

Web Development

Site information

Built with valid XHTML and CSS, designed with web standards and accessibility in mind. Best viewed in a modern browser [Firefox, Safari, Opera]