If you're confused too, don't be like #facebook - watch my video from OWASP AppSec 2018 where I went into details how these two are different:
https://scitech.video/videos/watch/38bc6082-c97a-4422-bbb5-5a96d94f8603