Google’s OAuth login doesn’t protect against purchasing a failed startup domain(trufflesecurity.com)
466 points by simiones | 255 comments
Truffle Security blog post describing how buying expired domains of failed startups lets attackers log into former employees' accounts via Google OAuth.