Hacking mobile login tokens tricky but doable, says reverse-engineer (theregister.co.uk)