Signing into one billion mobile app accounts effortlessly with oauth2.0 [pdf]
blackhat.com