I saw an ATM before that scrambled the number pad on it's touchscreen so the numbers were in a different position every time. Would that work to mitigate this attack?
There's an option to do this in many third party Android ROMs, which I personally take advantage of. I don't think it's really "terrible ux"; it hasn't been that hard to adjust to.
In fact, if the numbers on the lockscreen are not scrambled, a low-tech version of this is to look at where the most prominent smudges are on the screen to find the PIN number :)
This works particularly well with the pattern matching option on android devices.
this may work for ATM because you are not using it several times a day, even in a week. but scrambling will make bad UX in smartphones.
I can't remember when I last used an ATM (maybe 5 years ago?) and haven't seen the one near work used much so checked usage stats. It's more common here than I thought (as are cheques) but it's not used much. http://www.paymentsnz.co.nz/articles/nz-payments-stats-a-yea...
Well, I think for 95% of the world this isn't required. But for the 5% who need the security, they'll put up with the UX.