An Innovative Phishing Style
Doesn't OAuth and similar work by <i>redirecting</i> you to the login page?<p>I don't recall ever seeing a version that opens a popup to get you to login. This would immediately raise my suspicions on this basis (popup windows can be controlled by the opening website to a large degree!).