Many smartphone users leave their devices entirely unprotected, but even those who choose a four-digit PIN are vulnerable to “shoulder surfers” glimpsing the code and using it later - but a new form ...