> I wouldn't be surprised if you could generate signatures from the timing patterns of text input events in javascript, too.

If I remember correctly, some MOOCs make their users type out an honor statement in lieu of a handwritten signature, and record the timing information as you suggested.