[codinghorror]

I think phishing is a more generalized problem; blaming OpenID or OAuth 2.0 for that is like blaming the weather.