The author misses the point that OAuth allows a site to interface with external servers WITHOUT having user credentials pass through a third party. Further, th

The author misses the point that OAuth allows a site to interface with external servers WITHOUT having user credentials pass through a third party. Further, the technique described would not have prevented today's Twitter attacks. It would only prevent continual abuse from a single server. How hard is it for an enterprising young (or old) hacker to find another IP to use though?