Booking.com account takeover shows possible pitfalls in OAuth implementations | Hacker News Reader