XSS account persistence with oauth | Dark Hacker News