Don’t trust OAuth: Why the “Google Docs” worm was so convincing https://arstechnica.com/?post_type=post&p=1090565 via @ArsTechnica