One time password Authenticator - Mobile App?

[Impulse]

Yes, but for that you actually have to actually get a plane ticket from China and do it one at a time.

1.) Publish a Super Happy Awesome Funtime XIV app that XIV players would be likely to download. Say it's shows a /panic dancing Lalafell every hour, on the hour.

2.) While you're d'awwww-ing over said Lalafell, said Super Happy Awesome Funtime XIV app copies the keys from your onetime password app and sends them to the mothership in China.

3.) OK, they'd also need other login information. Conveniently enough, Super Happy Awesome Funtime XIV app will prompt you for some information about your account and character, to "personalize" your dancing Lalafell experience; this too will be sent back to the Chinese mothership.

Multiply this by however many users would fall for this. Lather, rinse, repeat, profit.

Meanwhile, your keychain device has only one input interface (the button) and one output (the screen).

If a person is stupid enough to give away their login details like that, I'd say let virtual Darwinism take its course. They'd be hacked with or without the authenticator (physical or mobile) in that case, especially if the person on the receiving end of the info were on top of their game with a 10 minute leniency. Codes expire after a short amount of time whether they are used or not.

Never had an issue with BNet's, didn't have an issue with TOR's equivalent in the short time I played that. If you get hacked with one of these attached to your account, you can almost guarantee that it's your own fault.