Board Thread:Off Topic/@comment-36656782-20181217070125/@comment-37954384-20190121214417

they actually steal or read your login token cookie, "logintoken" when you log in again, it changes. If you remain logged in while they have your login token, they can possibly access your account. It becomes invalid however if you log out, and a new one is generated when you log in.