The latest in the outside world's OAuth saga for those interested in the future of api authentication in MW.
http://hueniverse.com/2012/11/fuckoauth-realtimeconf/
wikitech-l@lists.wikimedia.org