Catching AuthTokens in the Wild The Insecurity of Google's ClientLogin Protocol
uni-ulm.de