Hacker News Reader

Maybe the OAuth token for a popular WP app got leaked, and now anyone can authenticate with it?

All OAuth tokens, even the official ones, are leaked at this point. Google them.