It's amazing what you get to see at a SECURITY conference

from here

The strongest part of the security behind RSA SecurID tokens is that the code on the little screen on the token isn't easy to guess and changes too often to be brute forced. None of that matters if an attacker can SEE it.