If they find a way to capture the 8 digit authenticator code, were doomed
.... I don't know how many codes the device puts out, but I doubt it's unlimited.

Try writing down one code it puts out...then use it later... it does work