An academic research paper by University of Pennsylvania
researchers claims touch screen phones may be vulnerable to
smudge attacks, a new form of security vulnerability based on
the oily residue left on the screen. The researchers claim
malicious attackers may be able to ascertain a certain amount of
information, such as inferring a password used by the devices
owner, left by the smudges left on a touch screen. The
researchers took photos of screens and used a program to analyze
the photos closely. They found they could figure out the
password over 90 percent of the time. The study used Android
phones, which use a graphical pattern to allow users to unlock
the phone. Phones included the Nexus 1. The study also found
that “pattern smudges,” which build up from writing the same
password numerous times, are particularly recognizable. While it
sounds somewhat plausible, I find it hard to believe that
practical use of this vulnerability, assuming it is even an
issue, will result in widespread exploits. The attack