Harvesting thermal energy can illuminate recently pressed keys, revealing that keyboard-based password entry is even less secure than previously thought.