recentpopularlog in


« earlier   
Government accessibility standards and WCAG 2
Summarizes some detailed research into the state of government accessibility standards around the world.
Accessibility  legal 
5 hours ago by mathieup
BeyondCorp: how Google ditched VPNs for remote employee access • The New Stack
<p>Today, none of Google’s employee-facing applications are on a virtual private network. They all have public IP addresses.

The company feels this approach, which it has dubbed BeyondCorp, is the “new cloud model,” for doing cloud security, asserted Neal Mueller, head of infrastructure product marketing at Google, who <a href="">gave a presentation</a> on this approach at the O’Reilly Security conference, held recently in New York.

This model can be fall under a number of rubrics in the security community, including “zero-trust” or “perimeter-less” security. It is the opposite of the traditional approach of security, which Mueller described as “the castle” approach, in which a strong firewall is used to set off an internal network that can only be accessed by way of a virtual private network (VPN).

The problem with the “castle” approach is that once the perimeter is breached, the entire internal network, and all the associated applications, are at risk. “Do not trust your network. It is probably already owned,” added Max Saltonstall, a Google program manager for corporate engineering, who also participated in the presentation. Phishing, man-in-the-middle, SQL Injection attacks all find fertile ground on VPNs.

Plus, a VPN was cumbersome to use, and slowed performance, especially for overseas workers. And it is no walk in the park for admins either.</p>

Fascinating how Google is inverting this whole idea, and letting anyone - who is correctly authorised - access it. And it must be enormously confident to give a presentation like this (more slides in the full article) where hackers will target its systems.
google  vpn  accessibility 
6 hours ago by charlesarthur
aria-expanded does not require a fallback
Hidde de Vries is a freelance front-end developer and web designer based in Rotterdam.
accessibility  a11y 
8 hours ago by tedw
aria-expanded does not require a fallback
When building a control that toggles content in a web app, we can use aria-expanded to let the control know whether the content is shown or hidden. Expanded or not expanded. In assistive technologies (AT) that support this attribute, AT users can figure out whether the element was expanded.
webdev  wai-aria  accessibility 
10 hours ago by mathieup
This page goes over the JAWS keyboard shortcuts for navigating between various element types (such as links, lists, description lists, blockquotes, buttons, and others).

The page that Steve mentions in this thread also goes over the expected announcement from JAWS when navigating to various element types
jaws  accessibility  a11y  canonical  keyboard  shortcuts  announcement  aural  2018 
12 hours ago by handcoding
aria-expanded does not require a fallback
"The question this might leave you with: what is AT support for aria-expanded like? It is well supported across platforms, and works in screenreaders like JAWS, NVDA, VoiceOver and Narrator. This means a fallback would leave most AT users to hear the status twice, to solve a problem for very few.

"So, in conclusion: it is now best to use aria-expanded without fallbacks."
aria-expanded  aria  accessibility  a11y  2018 
13 hours ago by handcoding
Long read: What's so bad about Comic Sans, anyway?
"Comic Sans still dominates classrooms with teachers believing it is better for dyslexic students, "Comic Sans still dominates classrooms with teachers believing it is better for dyslexic students, for reading and for modelling handwriting. Jon Severs finds that those benefits are dubious and that so much else we think we know about fonts and readability - even reading itself - is highly problematic . for reading and for modelling handwriting"
reading  dyslexic  typography  font  accessibility 
18 hours ago by garrettc

Copy this bookmark:

to read