From the changelog;
WordPress: The WordPress automatic update system destroys a user-provided whitelist.ini file, making it difficult for WordPress users to maintain a whitelist. For this reason, Bad Behavior no longer uses whitelist.ini on WordPress. Instead, a new administrative page is now available where users can manage their whitelists within WordPress.
In the Plugins > Bad Behaviour > Whitelist URL text area, enter the following to allow OpenID;