How long until someone learns to use replay attack to hijack sessions from a mobile app? I'd say about half, probably more, of the web sites I log into are abl

How long until someone learns to use replay attack to hijack sessions from a mobile app? I'd say about half, probably more, of the web sites I log into are able to hold the session for an extended period of time. A few are very aggressive about expiring cookies and often it's because my IP address changes. Those sites are also ones that deal with frequent spamming or DDoS. On the other hand, frequently having to login helps me remember my passwords. I can tell you right now I probably won't get into HN on the first try because I haven't had to type the password here for over a year.