"The researchers’ software runs on the mobile device and when a user types in her PIN code, the software records keystroke sounds through the microphone and uses the camera to judge the phone’s orientation and watch the user’s face while she’s typing. "
Link
