Skip to main content


Today I am disappointed and disgusted to say that #WesternDigital have sent me an email that has very important content in it, but it's inaccessible.
They've suffered a data breach, but the information about said breach has been put into the email as an image.
A #ScreenReader user without some level of tech knowledge would be unable to read that, and may actually think it's spam. To us, it goes straight to the line that says 'Copyright 2023 Western Digital' and skips all the salient points.
Utterly disgusting behaviour from such a large company about such an important topic.
If you're of a mind to do so, please boost to raise awareness.
This email is seemingly *not* a drill.

reshared this

in reply to Andre Louis

I feel like I'm gonna have to go to friggin twitter so I can @ these idiots and get them to send out a much better, more responsible email but jeez. What an utter clusterfuck.
in reply to Andre Louis

wtf I don't get this. The text has already been written, why the extra step to put it in an image? Just paste it in your email and your good to go 😤
in reply to Andre Louis

@stvfrnzl but then not able people will know they're getting screwed, must put in an image so less people know they're getting screwed because is a good money decision /S

Unless they have a profit motive they don't care about us underlings

in reply to Little Trans Punk

@stvfrnzl
This is an alt text of what Google gave me from it
I'll clean up any weirdness in it

Full text since alt text limits to 1500 characters:

Important Notice About Your Account Information

Western Digital.

Dear Customer,

May 5, 2023

We are writing to notify you about a network security incident involving your Western Digital online store account. After learning of the incident, we quickly launched an investigation to understand its nature and scope. We are working with leading outside forensic and security experts to assist with our investigation and are coordinating with law enforcement.

Based on the investigation, we recently learned that, on or around March 26, 2023, an unauthorized party obtained a copy of a Western Digital database that contained limited personal information of our online store customers. The information included customer names, billing and shipping addresses, email addresses, and telephone numbers. As a security measure, the relevant database stored, in encrypted format, hashed passwords (which were salted) and partial credit card numbers.

We have temporarily suspended online store account access and the ability to make online purchases. We expect to restore access the week of May 15, 2023.

As a precautionary measure, you can take the following steps to help protect your personal information from potential misuse:

Be cautious of any unsolicited communications that ask for your personal

information or refer you to a web page asking for personal information. Avoid clicking on links or downloading attachments from suspicious emails. Check whether your email account has spam settings to help you detect or block suspicious emails.

We hope this information is useful to you. If you have any questions regarding this incident, please call 00800-27549338, Monday - Friday, 9AM-6PM GMT.

We take the protection of your personal information very seriously and regret anv

in reply to Andre Louis

@stvfrnzl if I'm on, then I'm ready to make it readable for everyone as it should have been in the first place
in reply to Andre Louis

The thing I don't understand when this happens is, unless someone scribbled the message on a piece of paper or something, it almost certainly originated as plain text. If so, they needed to take a deliberate step to convert it into an inaccessible format, and what's the point of doing that?
in reply to Jayson Smith

@jaybird110127 If I knew that, I would be very, very rich. And still very angry...
in reply to Andre Louis

I just got this and was baffled because I work with images off by default. Checking the raw message data I can confirm that there's no image description nor a plain text version of the message in there — #accessibility aside, it's long been best practice for email senders to include #plaintext equivalents when sending HTML email). #WesternDigital #DataBreach

Andre Louis reshared this.

in reply to Martin Edwards

@medwds My phone also has images off by default, so I had to force it to download something that of course, should have been plain text to begin with. Livid? Yep.
in reply to Andre Louis

I wonder if they do that to make it harder to copy/paste...
in reply to I am Jack's Lost 404

@float13 Probably not. Apparently a lot of news letters are offered as images because of how all over the place email rendering is. Like you have everything from webkit and chromium on iOS/Android, webmails can strip things out and anyone using Microsoft Outlook is essentially rendering the emails in Microsoft Word which is as cursed as it sounds. So, they just take the easy way out and send one giant image, and maybe a text footer to go with it. My favorite ones are the kind where they remembered that alt tags exist, only to use them to say "pleeeeeeeease turn on displaying remote images!"
in reply to Pitermach

@float13 Oh and scammers use it to avoid antispam. I've received image only emails with simple subjects like Hello with a single image. OCR'ing it usually revealed a fake invoice from Paypal for Norton or some other software with an obviously fake hotline number to contest the charge
in reply to FediThing has moved!

@FediThing @float13 They can’t put their fancy graphics, fonts and tracking pixels into those so I guess not lol.
in reply to I am Jack's Lost 404

@float13 Given the usefulness of the content, you'd think they'd want you to copy/paste it everywhere for further reach. And giving a phone number in the image means you can't double-click to call it or anything like that. Utterly incompetent tits. Never have I seen the like from a big company about something so important.
in reply to Andre Louis

@Laniebird91 Oh FFS. And, yeah, the breach they had was very real. The head of security with my company puts that kind of stuff out on blast for awareness.
in reply to Andre Louis

Andre, the only thing I have about western digital is https://technology.jaredrimer.net/2023/04/03/two-sources-say-that-wester-digitals-file-sharing-service-is-down/ which talks about a file sharing service being down. https://technology.jaredrimer.net/2021/07/05/western-digital-drives-remotely-wiped-what-experts-say-to-do-now/ talks about drives that got wiped and links to an article. https://technology.jaredrimer.net/2021/07/06/western-digital-is-not-done-more-zero-days-on-the-way/ talks about more zero-days being out in the wild. These are all oder posts, and the fact they communicated to you this way in an accessible way is not called for. Too bad we can't call and wine about that crap. That's stupid.
in reply to Andre Louis

This is even more mind-boggling because it's truly one of those cases where doing the right thing vis a vis accessibility benefits everyone, not just disabled people. There is absolutely no good or legitimate reason to send out a text email as an image. No one likes to receive emails like this. It's hostile to everyone.
in reply to Andre Louis

I think that this #ableist #eMail bs should be #illegal and does not satisfy the notification requirements.

Also even for #abled people this is just bad, since a lot of them - like myself - will be sometimes if permanently on #WWAN like #2G, #3G or #4G and thus not download attachments at all, but only the text.

And yes, I do also automatically mark all #HTML - #eMails as #Spam so they won't even show up in my #Inbox.

in reply to Andre Louis

I would love if #DarkNetDiaries could get a hold of this crock of shite and discuss it on their podcast.
in reply to Andre Louis

I feel your pain here. Not pertaining to this specific email you received but this thing in general when companies decide to put only images in the emails which is beyond useless.
in reply to Michael Marshall

@TheVoiceGuy Put it this way. When I was told about it, I played about 5-10 episodes at 1.5x in the same day back to back. I got through the rest within the next month or so, listening to nothing else for that time.
in reply to Andre Louis

From the little bit I have listened to so far as I’m checking the download progress, this is definitely a keeper
in reply to Michael Marshall

@TheVoiceGuy The first 5 minutes of the first episode, I knew without a shred of a doubt I was gonna get the hell into it, and I did. Hardcore.
in reply to Andre Louis

So I thought I'd provide a link to the Darkrnet Diaries website and the podcast feed URL, but the website doesn't display in @privacybrowser probably because the website is Javascript-dependent, or #Javascrippled. So there's an inaccessible dark pattrern that makes me never want to visit again.

How do people with screen readers deal with that?

@TheVoiceGuy

in reply to Andre Louis

Just musing here: if the image is loaded from a remote site, maybe they are trying to track readers and/or leaving themselves a way to edit the text later in.

If the image is attached to the email, then they're just doing email wrong.

And even for sighted users, the dark background of the picture makes the text hard to read.

in reply to schalken

@schalken I admit I have no idea, but if the info changes, make a blog post like a *real* company, link to that and then if information changes last-minute, it's obvious from the page, right?
in reply to Andre Louis

sheesh. I don’t even have to be impaired to find that shit annoying to read (visually) 🙄
in reply to detached spork

@detachedspork And it's also inexcusably mind-boggling. :) Either way you look at it, it's a bad, bad choice. Whoever thought of it did not think hard enough.
Someone had to type the text in the first place, so why go through the bother of converting it to an image and pasting *that* into an email? I don't get it.
in reply to Andre Louis

I threw this utter travesty up on #BirdSite as well (of course with far fewer characters at my disposal) so if anyone still has an account over there and wouldn't mind retweeting for traction, I've also tagged Western Digital and their customer service team, because naturally they don't have a presence here. Thanks.
https://twitter.com/FreakyFwoof/status/1655140407829725184?s=20

reshared this

in reply to Andre Louis

Very inaccessible indeed. All that just for a faint purple diagonal background 🤦‍♂️
in reply to Andre Louis

shipping addresses and telephone numbers are not "limited" information.
in reply to Andre Louis

@zleap We could all call them at 00800-27549938 with our questions about their denying visually impaired customers access to this information. Or, least, we could if that were a valid phone number.
in reply to Evelyn

@gorfram @zleap Aah yes the double 0. I saw that but thought it was an error that the OCR software I used, had made.
in reply to Andre Louis

@zleap There are also eight digits after the 800 area code. If you dial that in the US, I think the phone system just ignores digit #8; but it’d but interesting to know if you’d get Western Digital on the other end of the line.

*although not interesting enough for me to bother trying it

in reply to Evelyn

@gorfram @zleap I have tried taking off the first 0 and the last digit, and it does not connect. So not only did they provide information in a stupid way, but a phone number that doesn't in fact, work in the first place. Incompetence knows no bounds.
in reply to Andre Louis

Does the US have the equivalent of the disability discrimination act ?
in reply to Andre Louis

So can the people who enforce that help take action or at least investigate ? Get some other disability groups on board too.

One huge court case / fine may wake them up, and give others a clear warning to make sure they have got their act together.

in reply to Evelyn

@gorfram @zleap Hi. This morning I was told that number was actually for Austria of all places, not the UK, so it wasn't properly tailored to the person it was being sent to. Haa!
in reply to Andre Louis

Thanks for taking the time to highlight this. I got the same email and quickly scanned with VoiceOver text detection and then moved on with my day. Already being low energy so much of the time lends itself incredibly well to not having the extra energy to advocate loudly against idiotic, low-hanging fruit like this. And as long as we stay silent, nothing will change.
in reply to Tristan

@tristan I cannot stay quiet when I'm absolutely livid like that. It's just not in my nature.
in reply to Andre Louis

Can I be real a second? We disabled folks need to bring our own accessibility. Using OCR, machine learning, or whatever other methods might become available. We can't count on the rest of the world to provide it for us, and insisting that they should and getting outraged about it is futile.

@FreakyFwoof

Mikołaj Hołysz reshared this.

in reply to Matt Campbell

@matt In the case of a data breach, I'm afraid I have to disagree. If you have some seriously important information to pass on, you better find a way to do it in a way that everyone who you've caused to be affected by it, can read it.
If you're knocking down the house of someone who can't see, call them, email, text etc. Don't send a print letter.
The same applies here.
This isn't getting pissy, this is keeping it real.
in reply to Andre Louis

I guess I've given up on advocacy as a successful strategy. I've been doing advocacy in one way or another for roughly 25 years, others have done it much longer and harder, and yet we keep hitting the same problems, like the original web accessibility problem of unlabeled images. At some point we just have to conclude that advocacy doesn't work, or it doesn't work well enough.
in reply to Matt Campbell

Meanwhile, OCR, particularly of direct images of rendered text (as opposed to scans or camera photos), has gotten pretty good. It does need to be more usable though, more seamlessly integrated with our AT. Hopefully I can work on that sometime soon.
in reply to Matt Campbell

@matt You, and I, are techy people. Do not put accessibility and OCR hand-in-hand for your average off-the-street user by any circumstances. 'Accessible' (and I use that word lightly) to us, doesn't mean accessible to them. We have an understanding and will do what it takes to find work-arounds, but why should we?
Do we not deserve to have this information about our own data, given to us in a way that we can read without fighting to do so? Come on now.
in reply to Matt Campbell

@matt Talkback's OCR option doesn't even work 5% of the time so far. I've highlighted an image, gone into the talkback menu and chosen 'describe image' or whatever the option is called, nearly always get 'cannot display image'
so what do Android people do in that situation? Likely delete the email and move on, until they find their user accounts and passwords that they reused, no longer work on other accounts because they got hacked, and weren't able to find that information out.
iOS, screen recognition or even VO's built-in options work fine, yes.
On Mac, similarly, if you know to do VO Shift L, and that assumes you enabled it in VO utility.
NVDA, yep, built-in.
VO without VOCR, less useful.

Again, this comes back to 'Well I know how to do it, therefore everyone else does too.'
You know better than that.

in reply to Andre Louis

Yeah, you're right. What that really means is that AT developers like me have a lot more work to do.
in reply to Matt Campbell

@matt I use the Spitfire Audio downloader (for my sins) on Mac and it's 99.5% accessible with VOCR, and 1% accessible with #VoiceOver. the only reason it gets the 1% is because just like when you write your name, date and title at the top of the paper you likely get marked for good spelling, we can see the close button, but nothing else. Haha.
In this instance, you'd best know how to use VOCR before you get into their libraries, without it, you're simply out of luck.
Situations like that, sure. But that's different from an email from a supposed reputable company with important information that absolutely, without question, *needs* to be in a format that is accessible to *all* customers, irrespective of ability or disability.

You don't *need* spitfire, but if a company have suffered some kind of hack, you *do* need to know about it, you know?

in reply to Andre Louis

Yeah, until OCR for on-screen text is reliable and usable enough, we'll have to keep advocating for access to essential information. Over and over again, I guess.
in reply to Matt Campbell

@matt Which therefore means it never happens anyway. This post gained traction with over 200 boosts. One of them must have hit the right point, because someone from WD who shall remain nameless did in fact get in touch. You do you, but I will continue to be pissed, make noise and hopefully make stuff happen.
I'm not settling for 'put up and shut up', or playing second-rate citizen.
I didn't do that with Native Instruments and that got me on their books. I'm not doing it for anyone else either. If you're fucking up, you *will* hear about it.
I'm nearly 40, I refuse to not be heard.
in reply to Andre Louis

Fair enough, we can do both. I'll shut up until I've actually developed something that would have made it easier to read that email.
in reply to Matt Campbell

@matt Should the deaf, who don't get subtitles, just put up and shut up when an important announcement on TV or let's say, the next stop on their bus-route or train-route doesn't work either? Should they have someone with them at all times (their equivalent of OCR) just in case shit doesn't work, or should they fight for the right to read what they need to read, in the way they need to read it? Is that acceptable?
Please understand I'm not trying to be an argumentative dick. I'm just genuinely upset by the thought that 'I/we can, so everyone can.'
We know that not to be the case, otherwise teachers, trainers, accessibility specialists like us wouldn't need to exist. Everyone would know what we know already.
in reply to Andre Louis

@matt I completely understand Matt's conclusion that advocacy just doesn't work. Believe me I do. But I also understand Andre's unwillingness to shut up about it too. I'm over 40, have been advocating for a ton of years, even helping devs and designers for free in a lot of cases, and I'm definitely not willing to just bring my own accessibility if for no other reason than I'm tired of having to hack my way around things when the only reason we're doing +
in reply to Andre Louis

@matt this is because people and companies, especially companies, refuse to do the thing they should have been doing all along.
in reply to Amanda Carson

@arush @matt Here's a sit-down party. Everyone will be sitting...
Bring your own chair...
in reply to Andre Louis

@matt On Matt's side though, I'll go so far as to say that Global Accessibility Awareness Day is utterly useless and I don't know why we're still doing it except maybe out of desperation.
in reply to Andre Louis

I'm with you on this one. If people think we're bitching, so be it. I'd personally rather bitch than sit in silence and hope that something happens.
in reply to Matt Campbell

@matt The burned out and somewhat cynical persona in me definitely agrees with this "advocacy has failed us" statement. The only thing that gets most companies going is a hard kick in the teeth via a lawsuit. Only if not complying costs them money, will they comply. Some exceptions are some indie developers who do it because they think it is the right thing to do. But they also usually don't have to fight stake holders, venture capitalists, or otherwise ignorant people higher up the management or food chains.
in reply to Matt Campbell

@matt Thank you! I'm so glad it's not just me that has this view. I've been trying to preach this for ages but I just quit because I got so much push back from it.
in reply to Bri😻

@Brynify @matt I'm extremely disappointed to read this. You want equal rights, but you can't be bothered to fight for them.
You want to be treated like your sighted counterparts but you either want others to do the work, or for it to just happen overnight with no work done.
I cannot fathom this mindset, but then again, I don't have to.
You do you.
Madness.
in reply to Andre Louis

@matt Oh no, that's not at all what I'm saying. What I'm saying is that realistically, fighting for them in most cases is going to go nowhere, so you have to be ready and able to implement your own solutions given the event that your advocacy goes nowhere.
in reply to Bri😻

@Brynify @matt It also helps to write the companies doing this and educate. Often times they just don't know.
in reply to Kevan

@kev @Brynify But we've been trying to educate since the late 90s at least, and developers of all sizes keep not listening.
in reply to Matt Campbell

@matt @Brynify That's true. But a couple times they did listen, the iDevices app for iOS went from being almost un-useable in 2015 to perfect with VoiceOver a year later. Not sure if it still is, but I bet you anything they may have never done anything had I not emailed them.
in reply to Matt Campbell

@matt @kev @Brynify Tell me another time in history you could walk into a shop, pick up any major smart phone or computer, load it's relevant screen-reader and begin using it without any help from anyone ever?
Developers aren't listening, or just the handful that you have to interact with aren't listening?
At no time in history have we had such an accessible landscape of things we use.
Also on the other side of that coin, at no time in history have we had such a plethora of touch-screens that we have to fight to use.
You're seeing all of the bad though, and none of the good.

Wake up, expand your mind and actually see the forest for the trees.

in reply to Matt Campbell

@matt @kev @Brynify Naturally it's not perfect and never will be, but do you genuinely believe we don't have access to a lot of stuff in this day and age? Really?
in reply to Matt Campbell

@matt RIM is awesome!
I just wish #jaws on the #ElBraille handled the commands more gracefully. As of right now, it doesn't know what to do with them.
in reply to Bri😻

I have to jump on the disagreement train. My entire career is based on advocating for, and making happen, things that many thought were impossible. It's a fight I continue every day, and every day, more and more people are listening. It might be slow going, but it is, without the shadow of a doubt, going. That said, I understand that not everyone has the energy necessary to constantly advocate, and I do respect that.
in reply to Matt Campbell

@matt Nods this. I think what Matt and me in particular are saying is that the work shouldn't *just* be put into advocating, but also into developing solutions that can be enacted upon in the case of hitting a brick wall with that advocacy attempt.
in reply to Matt Campbell

@matt @Brynify Good. People like me, need people like you. I'm not a programmer, I'm a musician. I'll use what you make then train others to do so, but if people just did their damn jobs properly, this wouldn't need to happen.
in reply to Andre Louis

@matt I will not argue that point, because you are indeed correct there.
in reply to Andre Louis

@matt I guess what my point is though like I said is that we *should* have solutions and *should* work on solutions that allow us to get that information in the case of someone not doing their job properly.
in reply to Andre Louis

@matt @Brynify I live in Massachusetts. I haven't been able to count on people doing their jobs properly in years. I use what other people program to get shit done and get it done proper. And I, get it done swearing.
in reply to Matt Campbell

@matt @Brynify Bring your own accessibility just sounds like another way of saying that we should just bow down to these big corporations that never listen to us and just lie down and let them trample all over us. Being an advocate is all about defying the opposition, standing tall and letting your voice be heard. If the gloves have to come off, let them come off. This mentality of being seen and not heard needs to die. Sorry, but as the son of an army man I've always had this fighting spirit within me.
in reply to Matt Campbell

@MariahL @matt It's also worth noting that there is a difference between insisting and requesting. There is also a difference between feeling like we deserve accessible products vs. feeling entitled to product accessibility by default. I believe that all disabled people deserve to have a world that is accessible to us. That is what a fair world looks like to me. But we are not entitled to access or tech that simply is not available. The world doesn't owe us technology that simply doesn't exist yet, for example. And the mere fact that someone is able-bodied does not mean they owe us assistance or access. I will continue to request that products be made accessible where applicable and relevant to me. But I also realize that companies reserve the right to deny my requests. And able-bodied persons reserve the right to deny me asisstance when asked.
in reply to Rosalín Anne

@SingingNala @MariahL @matt In the U.S. at least, access is quite literally a civil right. See the 1964 Civil Rights Act. It's also a human right under Article 9 of the UN's Convention on the rights of people with disabilities. So in short, we are entitled to accessibility.
in reply to Amanda Carson

@arush @SingingNala @MariahL @matt Also see the equality act 2010 here in the UK. Saying oh well we can’t expect people to make stuff accessible isn’t good enough.
in reply to Andre Louis

@KaraLG84 @arush @MariahL @matt Oh yeah. I read about the Equality Act in Deque University training materials. I was doing research because I wanted to find out if anyone else had something like the ADA. This is more than I would have read on the subject at the time though. Right on.
in reply to Matt Campbell

@matt Hard disagree to this. Society creates problems and we bloody well should request and require it to solve them. This individual responsibility thing for solving problems that we did not create really really pisses me off. This attitude means that we will never be ahead.
Unknown parent

Andre Louis
@researchbuzz Your guess is as good as mine.
in reply to Andre Louis

This happened on the 6th, it's now the 10th, no updated email has been sent, no better response has been received. Really despicable.
in reply to Andre Louis

Why should they care? I mean, there are only 300 million visually impaired people in the world. Furthermore, how have these people even been able to buy their products? They have to go to a store which is almost impossible when you're blind, and well buying it online, how should they do that when they can't see anything on their screens?
in reply to Leonard de Ruijter

@leonardder Very true, very true. I do have my wife purchase everything, in fact even though she's not in the house right now, I called her up (using Siri of course) and had her type this out for me.
in reply to Andre Louis

Ah wow, and how many times did you have to repeat it to siri until it understood you correctly?
in reply to Leonard de Ruijter

@leonardder I wanted to call someone last week and after repeating the phone number for at least five times and siri discarded half of the number, I gave up.
in reply to Leonard de Ruijter

@leonardder Hey, only 17 times. She's getting better. Normally I try 97 because I can't use the phone on my own, you see.
in reply to Andre Louis

All joking aside, have you also tried to contact WD by mail about this? I do have a WD product but fortunately it's a dumb beast without cloud stuff in it.
in reply to Leonard de Ruijter

@leonardder The number in the email provided was for the Austrian office, not the UK. The email it came from was a no reply. I've got some... People on the case though.
in reply to Andre Louis

Someone at #WesternDigital failed to properly read what I said over on #Birdsite, I received this response to my post which really is utter tripe.

We will resume processing orders as soon as the outage is restored, we apologize for any inconvenience caused and appreciate your patience. We also thank you for sharing this feedback, we will share it with the relevant team.

My post is here for reference: https://twitter.com/FreakyFwoof/status/1655140407829725184?s=20

Andre Louis reshared this.

in reply to Andre Louis

Very likely an overworked support staff firing a macro and calling it a day. Very unprofessional from.WD
in reply to Andre Louis

Yep. or a system suggests a reply based on a keyword in your post.
in reply to Andre Louis

I thought you no longer use Twitter? You know Spring still works?
in reply to rooktallon

@rooktallon I treat it as something to look at once a day or something. Never used spring before.
in reply to Andre Louis

Have you looked at the Rodes v8 plug-in? My brother really loves your music because it uses like a lot of Rodes keyboard in it so I'm kinda asking for them, kinda asking for myself.
in reply to rooktallon

@rooktallon Yes, and I don't like it. I don't care for it in the slightest.
in reply to rooktallon

@rooktallon I did a video on my favourite Rhodes plugin, it's called The Canterbury Suitcase.
in reply to Andre Louis

Thank you. I'll check it out. It's just my brother really absolutely loves the Rodes sound, possibly more than anyone out there. So I figured I'd check out the best plug-ins for that kind of thing. What's wrong with the Rodes v8? is it not NKS compatible?
in reply to rooktallon

@rooktallon It's not, and the interface isn't that nice, but that's not the problem. It installs a bunch of crap on the system that it doesn't tell you about, and I hate that. It feels very dirty and underhanded, not to mention I just plain do not care for the sound of the plugin whatsoever.
in reply to Andre Louis

Well damn. That sucks. You would've thought a plug-in ade by the same company that makes the keyboards would be absolutely amazing.
in reply to rooktallon

@rooktallon They're new to sampling, and it's their first sampled library. Some people love it, I'm just not one.
in reply to Andre Louis

Well, the Suitcase really does sound good and I can se why you like it. Thanks for the recommendation. I'll tell him about it. He'll be very excited.
in reply to rooktallon

@rooktallon You found my video about it then? I go through some of my favourite patches and play a bit of each.
in reply to Andre Louis

Well, um... no. I looked at the website for the actual thing and found a demo. But I'll take a look at that video for some more detail!
in reply to Andre Louis

So they can technically disclose the breach while minimizing the number of people who actually find out