LOGIN Serious hard-to-fix bug in OAuth and OpenID discovered, lots of major sites affected May 3, 2014