It uses NeuroSky Mindwave Mobile for brain waves, plus a heart rate monitor, plus a one minute rest period before attempting login.

They never tested coercion. "One reason we did not do this is because it is unethical to threaten test subjects in order to verify that our system is fully coercion resistant." That's a problem.

Incidentally, names of chemicals, such as dopamine, are not capitalized.