Why the Google Docs scam was a different kind of phishing - CNET

In an OAuth attack, hackers can get access to your account and you wouldn't even need to type a thing.