I guess these researchers haven't ever withdrawn money from an ATM.
> 86% of passwords when thermal images are taken within 20 seconds, and 76% when within 30 seconds