[danielhua]

https://news.ycombinator.com/item?id=24470530

Looks like it was a real Facebook login webview.

[gridlockd]

...which is different from a browser window, running inside the actual system browser.

The difference may of course be subtle, but even obviously fake logins can work on the untrained eye.