Hmm I don't know who to believe anymore...

http://www.wired.com/threatlevel/201...ecurid-tokens/