How PayPal could have easily avoided the last account hack of briankrebs
auth0.com