Top all-time · #463
Lukasz Olejnik
Personal blog · blog.lukaszolejnik.comsecuritywebphilosophy
Lukasz Olejnik writes Security, Privacy & Tech Inquiries, a personal blog at blog.lukaszolejnik.com about security, web and philosophy. Since 2016, 124 different Hacker News readers have linked it 158 times, most often “Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017)”. It is still writing: the last post was on 2026-08-25, and you can follow it by feed.
Too few sampled comments (10) to say how often HN recommends it.?
Why HN links it
HN readers link Olejnik's privacy analyses of Chrome cookies, GDPR consent, Apple tracking and Web Bluetooth. Most comments only correct or update the submitted URL.
- Recommended for · 1 comments
- one commenter says 'I recommend this read' about the GDPR Chrome cookie post
Summarised by Claude from a sample of 10 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Lukasz Olejnik writes about security, privacy, Web, technology and technology policy matters.
Most-linked posts?
- Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017)9 people · 9 mentions · first linked 2017-04-19
- Are You Sure Your iMessage Is Encrypted? Blue Green5 people · 5 mentions · first linked 2017-07-12
- Browser mechanism used by trackers in privacy profiling and fingerprinting4 people · 4 mentions · first linked 2017-03-21
- Am I logged in or not? GDPR case study on the example of Chrome browser change4 people · 4 mentions · first linked 2018-09-24
- France to retaliate to cyberattacks with cyber and conventional responses?4 people · 4 mentions · first linked 2018-02-13
- Privacy Abusing and Tracking Users with Progressive Web Applications4 people · 4 mentions · first linked 2019-04-08
- New european requirements for GDPR consent problem for apps?3 people · 3 mentions · first linked 2018-01-02
- Leaked ePrivacy directive interesting points. Web browsers concerned3 people · 3 mentions · first linked 2016-12-13
- GDPR fines: a technical primer. Not always 20M euros3 people · 3 mentions · first linked 2018-05-07
- Data Protection Assessment of Privacy Sandbox's Protected Audience API3 people · 3 mentions · first linked 2024-01-03
What Hacker News says?
Your url does not work for me (404), this one does: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-ca...
Comment linking /am-i-logged-in-or-not-gdpr-case-study-on-the-example-of-chrome-browser-change/
on “Chrome 69 will keep Google Cookies when you tell it to delete all cookies”Submitted Am I logged in or not? GDPR case study on the example of Chrome browser change as a story · 681 points
HN discussionI recommend this read: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-ca...
Comment linking /am-i-logged-in-or-not-gdpr-case-study
on “Chrome 69 will keep Google Cookies when you tell it to delete all cookies”Submitted European Union dedicated questionnaire on the Encryption of Data as a story · 240 points
HN discussionReal URL in case you don't allow JavaScript for the redirect: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-ca...
Comment linking /am-i-logged-in-or-not-gdpr-case-study-on-the-example-of-chrome-browser-change
on “Am I logged in or not? GDPR case study on the example of Chrome browser change”Submitted Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017) as a story · 113 points
HN discussionhttp://info.iapp.org/dz0uBmdUa20MA00Z5o100E0 redirects to: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-ca... Please update the submission URL.
Comment linking /am-i-logged-in-or-not-gdpr-case-study-on-the-example-of-chrome-browser-change/
on “Am I logged in or not? GDPR case study on the example of Chrome browser change”Submitted Stealing Sensitive Browser Data with the W3C Ambient Light Sensor API as a story · 105 points
HN discussionThis is starting to remind me of when Intelligent Tracker Prevention(tm) was released and instead was a super cookie leaking history. http://blog.lukaszolejnik.com/curious-case-of-privacy-vulner... I'd be much more comfortable with Apple being Privacy, Inc. if they kept their commitment to it, too often it looks like engineers got overrode by marketing. It's v unlikely a privacy engineer signed off on something, wit…
Comment linking /curious-case-of-privacy-vulnerability-in-intelligent-tracking-prevention/
on “Emulating AirTags to upload arbitrary data via Apple's FindMy network”Submitted Russia confirms US cybercommand cyberattack; RAID controllers destroyed as a story · 99 points
HN discussionBrave indeed does block WebBluetooth by default, but it can be turned on by the user using flags. It's by no means a new feature, but the privacy concerns outlined in this post are still valid 10 years later: https://blog.lukaszolejnik.com/w3c-web-bluetooth-api-privacy...
Comment linking /w3c-web-bluetooth-api-privacy/
on “Developers are choosing older AI models”Submitted Reidentification ban is not a solution as a story · 59 points
HN discussionI would argue it's because Google has to value security and privacy in a way Apple doesn't - Google has to build platforms instead of gardens, so there's an 'adversarial' incentive to make sure you're not held liable due to a 3rd parties actions. Also, these incidents would be a thermonuclear event for search due to the intimacy and inherent 'Internet-ness' of the data - versus Apple, who can get away with incidents…
Comment linking /curious-case-of-privacy-vulnerability-in-intelligent-tracking-prevention/
on “Safely open apps on your Mac”Submitted European Union allowing the use of deepfakes as a story · 56 points
HN discussionUrl changed from https://blog.lukaszolejnik.com/solving-phishing-is-not-simpl... , which points to this.
Comment linking /solving-phishing-is-not-simple-can-anti-phishing-training-make-it-even-worse/
on “Phishing in organizations: Findings from a large-scale and long-term study”Submitted French application of international rules to cyberwarfare as a story · 56 points
HN discussionThanks! changed from https://blog.lukaszolejnik.com/am-i-logged-in-or-not-additio... .
on “Google made a joke out of Chrome privacy policy”Submitted On Google’s Policy Change Towards Fingerprinting as a story · 48 points
HN discussionlink should be: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-additio...
Comment linking /am-i-logged-in-or-not-addition-to-the-gdpr-case-study-on-the-example-of-google-chrome-69-70/
on “Google made a joke out of Chrome privacy policy”Submitted TikTok could bypass US blockade by making a PWA as a story · 31 points
HN discussionSubmitted The EC is turning Google Search into a privacy and national-security risk as a story · 6 points
HN discussionSubmitted Fixing web browser history leaks as a story · 6 points
HN discussionSubmitted New GDPR changes the definition of personal data as a story · 5 points
HN discussionSubmitted Chrome will tell sites what text users search for on websites – privacy analysis as a story · 5 points
HN discussionSubmitted Web browsing history kind of confirmed as a new type of personal data – now what as a story · 4 points
HN discussionSubmitted Netherlands on rules applying to cyberattacks and legal attribution steps as a story · 4 points
HN discussionSubmitted French doctrine of offensive cyber operations as a story · 4 points
HN discussionSubmitted Google made a joke out of Chrome privacy policy as a story · 4 points
HN discussionSubmitted Privacy Engineering Principles Recommended by NIST as a story · 4 points
HN discussionSubmitted Uber is profiling users based on battery level information? as a story · 4 points
HN discussion
