Security Tokens/Authenticators are useless; SE needs to fix this immediately.

[Amyas]

So... all you have to do is get a (very specific) virus?

Unless SE's official sites get infected, I'm not seeing the issue here.

[TheRac25]

As stupid as this whole system is (seriously, what good is a session ID if the "session" lasts indefinitely??) you probably should not have posted this publicly on the SE forums. I know you mean well but SE has banned for less.

the only people that would benefit by this not being posted are the ones exploiting it to spam rmt adverts
since SE is too stupid to figure it out after over a month of it being exploited id say its past due

[Nanga]

So... all you have to do is get a (very specific) virus?

Unless SE's official sites get infected, I'm not seeing the issue here.

Uhm, no. Just accept the fact that you don't really understand how viruses, trojans, etc work (incidentally, it's not actually called a "virus" in this case, either), and understand that anyone can be vulnerable and not realize it.