Food for thought. Article about a vulnerability in OAuth and OpenID:

http://www.computerworld.com/s/artic...ffect_millions