Almost two years after pointing out a public key vulnerability to GitHub, security researcher Egor Homakov has focused his attention on the service’s OAuth implementation.