XSS account persistence with oauth | Hacker News Reader