Which version of OAuth implementation is at risk? 2.0 and 1.0a are quite different.