http://www.cnet.com/news/serious-security-flaw-in-oauth-and-openid-discovered/AvatarW&Kflipped into Tech SecSimon PhilipMay 3, 2014