Łukasz Olejnik
blog.lukaszolejnik.com · Personal blog · on HN since 2016
Łukasz Olejnik, a privacy researcher, writes about browser privacy, web standards, GDPR, tracking, and security of web APIs.
What HN saysHN commenters link it for privacy analyses of Web Bluetooth, Chrome login changes under GDPR, and a tracking prevention vulnerability.
124HN people shared it
8linked it in comments
148stories submitted
1.8Kstory points
6 months agolast shared
2016people per year2026
Most-shared posts
- 1Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017)9 people · 232 points · first shared 2017 · 51 comments on HN
- 2Am I logged in or not? GDPR case study on the example of Chrome browser change5 people · 683 points · first shared 2018 · 485 comments on HN
- 3Are You Sure Your iMessage Is Encrypted? Blue Green5 people · 9 points · first shared 2017 · discussion on HN
- 4Privacy Abusing and Tracking Users with Progressive Web Applications4 people · 9 points · first shared 2019 · discussion on HN
- 5France to retaliate to cyberattacks with cyber and conventional responses?4 people · 7 points · first shared 2018 · discussion on HN
- 6Browser mechanism used by trackers in privacy profiling and fingerprinting4 people · 7 points · first shared 2017 · discussion on HN
- 7Privacy risks of W3C Vonbr4 people · 6 points · first shared 2016 · discussion on HN
- 8Russia to develop strong cyber-offensive capabilities3 people · 6 points · first shared 2017 · discussion on HN
- 9Leaked ePrivacy directive interesting points. Web browsers concerned3 people · 6 points · first shared 2016 · discussion on HN
- 10GDPR fines: a technical primer. Not always 20M euros3 people · 5 points · first shared 2018 · discussion on HN
- 11New european requirements for GDPR consent problem for apps?3 people · 4 points · first shared 2018 · discussion on HN
- 12Data Protection Assessment of Privacy Sandbox's Protected Audience API3 people · 4 points · first shared 2024 · discussion on HN
- 13Web Bluetooth. Pairing devices with remove websites stealing location data?3 people · 3 points · first shared 2016 · discussion on HN
- 14European Union dedicated questionnaire on the Encryption of Data2 people · 243 points · first shared 2016 · 110 comments on HN
- 15On Google’s Policy Change Towards Fingerprinting2 people · 51 points · first shared 2024 · 60 comments on HN
What HN people wrote when they linked it
ctavan · 2018-09-25
I recommend this read: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-case-study
sharken · 2025-11-05
Brave indeed does block WebBluetooth by default, but it can be turned on by the user using flags.
It's by no means a new feature, but the privacy concerns outlined in this post are still valid 10 years later: https://blog.lukaszolejnik.com/w3c-web-bluetooth-api-privacy/
dang · 2022-01-26
Url changed from https://blog.lukaszolejnik.com/solving-phishing-is-not-simple-can-anti… which points to this.
refulgentis · 2021-05-12
This is starting to remind me of when Intelligent Tracker Prevention(tm) was released and instead was a super cookie leaking history. http://blog.lukaszolejnik.com/curious-case-of-privacy-vulnerability-in…
I'd be much more comfortable with Apple being Privacy, Inc. if they kept their commitment to it, too often it looks like engineers got overrode by marketing. It's v unlikely a privacy engineer signed off on something, with so many side channels, with real world consequences, compromising a billion + iOS devices
xemoka · 2018-09-26
czechdeveloper · 2018-09-25
Your url does not work for me (404), this one does: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-case-study-o…
jwilk · 2018-09-24
http://info.iapp.org/dz0uBmdUa20MA00Z5o100E0 redirects to:
https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-case-study-o…
Please update the submission URL.
stesch · 2018-09-24
Real URL in case you don't allow JavaScript for the redirect: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-case-study-o…