PrivacyScout: Assessing Vulnerability to Shoulder Surfing on Mobile Devices