Łukasz Olejnik
Łukasz Olejnik, a privacy researcher, writes about browser privacy, web standards, GDPR, tracking, and security of web APIs.
What HN says
HN commenters link it for privacy analyses of Web Bluetooth, Chrome login changes under GDPR, and a tracking prevention vulnerability.
Stats for nerds
124HN people shared it
148linked in comments
1.8Kstory points
Nov 2025last shared
Top posts on HN
- 1Am I logged in or not? GDPR case study on the example of Chrome browser change5 people · 683 points · first shared 2018 · 485 comments on HN
- 2European Union dedicated questionnaire on the Encryption of Data2 people · 243 points · first shared 2016 · 110 comments on HN
- 3Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017)9 people · 232 points · first shared 2017 · 51 comments on HN
- 4Russia confirms US cybercommand cyberattack; RAID controllers destroyed1 person · 99 points · first shared 2019 · 61 comments on HN
- 5Reidentification ban is not a solution1 person · 59 points · first shared 2017 · 13 comments on HN
- 6French application of international rules to cyberwarfare1 person · 56 points · first shared 2019 · 8 comments on HN
- 7European Union allowing the use of deepfakes1 person · 56 points · first shared 2021 · 35 comments on HN
- 8On Google’s Policy Change Towards Fingerprinting2 people · 51 points · first shared 2024 · 60 comments on HN
- 9TikTok could bypass US blockade by making a PWA1 person · 31 points · first shared 2025 · 20 comments on HN
- 10Are You Sure Your iMessage Is Encrypted? Blue Green5 people · 9 points · first shared 2017 · Discussion on HN
What HN people wrote when they linked it
- refulgentisMay 2021
This is starting to remind me of when Intelligent Tracker Prevention(tm) was released and instead was a super cookie leaking history. http://blog.lukaszolejnik.com/curious-case-of-privacy-vulnerability-in-intelligent-tracking-prevention/
I'd be much more comfortable with Apple being Privacy, Inc. if they kept their commitment to it, too often it looks like engineers got overrode by marketing. It's v unlikely a privacy engineer signed off on something, with so many side channels, with real world consequences, compromising a billion + iOS devices
- sharkenNov 2025
Brave indeed does block WebBluetooth by default, but it can be turned on by the user using flags.
It's by no means a new feature, but the privacy concerns outlined in this post are still valid 10 years later: https://blog.lukaszolejnik.com/w3c-web-bluetooth-api-privacy/
- jwilkSep 2018
http://info.iapp.org/dz0uBmdUa20MA00Z5o100E0 redirects to:
https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-case-study-on-the-example-of-chrome-browser-change/
Please update the submission URL.
- steschSep 2018
Real URL in case you don't allow JavaScript for the redirect: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-case-study-on-the-example-of-chrome-browser-change
- czechdeveloperSep 2018
Your url does not work for me (404), this one does: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-case-study-on-the-example-of-chrome-browser-change/
- dangJan 2022
Url changed from https://blog.lukaszolejnik.com/solving-phishing-is-not-simple-can-anti-phishing-training-make-it-even-worse/, which points to this.