Explaining the OAuth Session Fixation Attack « hueniverse

Great writeup on what the oauth session fixation attack actually is