[djrogers]

The paper focused on an attack against a payment system, not the lock screen, so you'd need to randomize every password input keyboard at the system level.

Probably not a bad idea...

[DennisP]

Another option would be to use thumbprints for all authorizations after the device is unlocked.