Serious security flaw in OAuth, OpenID discovered http://www.cnet.com/news... < oh my