A flaw in Google OAuth system is exposing millions of users via abandoned accounts

Google says the responsibility lies elsewhere, but users should still be wary