Booking.com account takeover shows possible pitfalls in OAuth implementations | Dark Hacker News