On (OAuth) token hijacks for fun and profit (Google/Microsoft integration) | Hacker News Reader