Singapore PhD student discovers serious security flaw that affects Facebook, Google and others