If they steal one of your authenticator codes, they can logon to account management and change ur pw. Doesnt help them nothing, seeing as they dont have any more codes to logon the game itself. Or, they can logon the game and try to take stuff, and get immideatly dc'd by the user trying to logon again, because user still have his password. They will need the user to enter a new auth code every 30sec to even stay online. Sounds like the hacker needs to be online and communicate with ur computer within seconds, to even successfully logon to any character. I dont see this being a commonly used method amongst hackers. Im curious to see what Bizzards actions will be, to counter this.