Or they could hack into the SR server and then hack into you when you load a page hosted on it.