Researchers find two flaws in OAuth 2.0 | Hacker News Reader