Serious Security: Verification is vital – examining an OAUTH login bug Posted 2 years ago by Paul Ducklin What good is a popup asking for your approval if an attacker can bypass it simply by suppressing it?