Confused Deputy: Google IdP Account Takeover via Device Code Flow Hijacking | Hacker News Reader