Researchers find two flaws in OAuth 2.0 | Dark Hacker News