Unauthorized Cross-App Resource Access on MAC OS X and iOS

Some discussion around this on the OAuth WG mailing list: https://www.ietf.org/mail-archive/web/oauth/current/msg14629...