Don’t Trust OAuth: Why The Google Docs Worm Was So Convincing

Source: Don’t Trust OAuth: Why The Google Docs Worm Was So Convincing