[eyeareque]

He should have setup a US workstation with a webcamera for the Chinese developer to log into. The webcam could show a live feed for the RSA token. So now he can still use his RSA token, while giving his outsourced worker access to it as well. Not that I would do this....

[kokey]

Yup, especially not on a webcam page easily accessible from your phone so you don't have to carry it around. I sometimes wonder if I advertise this as a service how many people will mail me their tokens.

[eyeareque]

They do offer smart phone apps that do "soft tokens".