CWmike writes Researchers Nate Lawson and Taylor Nelson say they have discovered a basic security flaw that affects dozens of open-source software libraries ??? including those used by software that implements the OAuth and OpenID standards ??? that are used to check passwords and user names when people log into websites such as Twitter and Digg.