It's not possible unless you have zero-days against the USB drivers or firmware on your laptop, in which case being logged in or not doesn't really matter.
Reputation is everything.
(Except this one, of course. To be fair it was Otto before the acquisition)