I love purpose built bookmarklets that help you find problematic code. I got an email yesterday from Travis Roth about a potential vestigial aria-hidden attribute on an otherwise visible element. Unfortunately, it’s not uncommon to find an element that has aria-hidden=”true” on an element that is visible and should have either “false” or no aria-hidden attribute. This causes assistive technology to ignore the element.
My first reaction was to search the code for aria-hidden attributes, but this can take time and would have to be completed on each page to find the issue.
So I created the following bookmarklet that will find any element on your page that uses aria-hidden. It will force it to be visible and will display the attribute’s value.
To use this bookmarklet, drag the following link to your bookmark toolbar. Visit your questionable page and click the link.
Intuit sets aside a week every year to give employees a chance to work with local non-profit organizations. This year, we gathered a small group to visit the Enchanted Hills Camp in Napa to help them prepare for this summer’s campers. It’s a fantastic organization and we loved our time there.
Accessibility is an important part of any app. Whether you’re developing a new app or improving an existing one, ensure that components are accessible to everyone.
Why develop for accessibility
1 in 5 people will have a disability in their life. – 2010 census
Designing for accessibility benefits blind, low vision, and eyes occupied (driving)
Android includes 4 types of assistive technology:
TalkBack: Screen reader
BrailleBack: Braille output for refreshable braille devices
Switch Access: switch control of device
Voice Access: control device by voice activation: “scroll up”
Android O’s major focus: increase productivity for users
new api additions for accessibility
print disabilities (reading disabilities)
New to TalkBack
accessibilityVolume: adjust audio volumen for accessibiity independently from media. So you can watch youtube and control that separately than talkback. This is available when talkback is on.
Volume from youtube is quieted while talkback is being used. it then fades back into the foreground. There’s a new accessibility volume slider
New gestures for talkback.
If there’s a fingerprint sensor on the back of the device, it can be used by talkback users. The sensor has its own set of customizable gestures. For instance, swipe up on the fingerprint. These can be assigned, such as longpress action
Quickly enable/disable TalkBack
long press the volume keys to quickly turn on/off talkback.
this works on any screen, this makes it easier to test apps and turn off talkback to type information. Press both keys at the same time for a long press and eventually it will turn on/off talkback. the accessibility shortcut can be assigned to switch control, zoom, or other service.
New Text to speech engine can handle multiple languages. Use LocaleSpan to trigger language switching.
2 new APIs
Continuous Gesture API: enable motor impaired users who use head tracker to perform drag and drop, zoom, etc.
A new accessibility button is located in the navigation bar. This allow users to quickly invoke context dependent accessibility features. This sits in the row with back and home buttons
People with dyslexia, low vision, learning new language… They can now use select to speak. part of talkback 5.2. Select element on screen and talkback will read it. It has a floating action button to enable.
In android o. read whole page, and advanced controls, word level highlighting, set up wizard.
manual testing: try your app with TalkBack and SwitchAccess.
if it is ok in talkback, it should be good for brailleback and select to speak
if it works with switch access, it should also work with voice access.
The main problem in IOT secuirty is economics. the cost of building in security vs. cost of risking security. smaller, lower cost devices may not build in security. Exploits have become their own market
How much is the cost to an engineer to create an attack?
How valuable is it?
Can this attack scale enough to be valuable? WiFi injection may be effective, but it doesn’t scale if you have to be near the router. A default credential, i.e. security cams, can be attacked by the thousands.
Does the attack give the person privilege to the hardware, accounts?
Does the attack give the engineer significant persistance? Can it survive a device reboot?
Security Cost: not every company has the resources to build and maintain security features and infrastructure.
Android Things goal: raise attack costs, reduce ROI, and reduce security costs.
OS Hardening: All of Android’s hardening is enabled in Android Things. Permissions, app sandbox, mandatory access control (Selinux), kernel syscall filtering, full ASLR, FORTIFY, stack-protector-strong…
Developer Action: Declare permissions only as needed, split out privileged code.
All Android Things devices will get infrastructure updates directly from Google. This reduces attack persistance and drives down the attack ROI. Updates can be controlled during critical operations, like a drone is flying. Developers can also test updates and request an update to be stopped
They allow Android users to run your apps instantly, without installation. Android users experience what they love about apps—fast and beautiful user interfaces, high performance, and great capabilities—with just a tap.
Android Instant Apps is now open to all developers, so anyone can build and publish an instant app today.
Use the same code to generate the instant app, use feature modules to define what can be included/removed for instant apps. Look for modularize feature in android studio. They also will have optimization tools to make these features faster.
What’s new in Android O keynote…
Picture in picture is coming to Android O. similar to the way YouTube will let the video reduce to a thumbnail while you scroll other videos in a search. Only now the video can be a thumbnail while you open evernote and write notes
Autofill will be included in basic form inputs: text view, edit text.. no extra work required
You can use hints to the auto-fill api to define data types. Autofill apis for custom veiws and opaque hierarchies
Text Stuff: font files can be added to font directory. Downloadable fonts: declare font to be downloaded and cached. Font provider in Google play services v1. There is a beta version available. Access to all 800 google fonts
Auto-sizing Text Views
Fonts with auto-resize will change font size as you resize their container. In the past, the container may grow, but the fonts stay the same size. Now they can grow with the container.
Language detection, accessibility button, separate volume controls, finger print
View.java: public View findViewById (int id);
TextView tv = (TextView) findViewbyId(R.id.mytextview);
View.java: public <T extends view> findViewById(int id)
TextView tv = findViewById (R.id.mytextview);
We will need to worry about Adaptive Icons with future releases. Developers provide background + foreground * mask for multiple devices.
Ask people to pin our app to desktop. ShortcutManager and appWidgetManager. requestPinAppWidget…
Notifications are getting more power in O. The user should always be in control. Users and developers want ability to tweak notifications from an app. Notification channels give developers and users fine grain control. Apps can define channels, assign notifications to channels, post notifications
Note: Once you target O. You must use channels or notifications will be dropped!
Thread policy. unbuffered i/o, VM policy
Media file access
Seekable file descriptors from custom document provider. useful for large remote sources. Cached data. statey below the quota to avoid aggressive deletion. Use storage manager