This is how he could hijack Reddit accounts with just ONE click: a $10,000 bug bounty

Exploring Frans Rosén’s bypass of OAuth security

[Continue reading on InfoSec Write-ups »](http … ⌘ Read more