UK boffins steal smartmobe PINs with motion sensors
W3C API exposes sensors, so attackers only need JavaScript to follow your fingers The World Wide Web Consortium might want to take another look at its habit of exposing too much stuff to application interfaces: a UK researcher has demonstrated a JavaScript app can spy on smartphone sensors to guess the codes users employ to unlock the devices."