Serious security flaw in OAuth, OpenID discovered | Hacker News Reader