it seems I missed soeothing two days ago (but frankly, I had other problems): "Major flaw found in Oauth and OpenID affects Google, Microsoft and Facebook" http://www.theinquirer.net/inquirer/news/2342962/major-flaw-found-in-oauth-credential-tool-affecting-google-microsoft-and-facebook - what does this mean for StatusNet/GNUsocial (etc.)? #security (yet again)