The Curious Engineer

All blogs / Security

Security, Privacy & Tech Inquiries

blog.lukaszolejnik.com

Lukasz Olejnik writes about security, privacy, Web, technology and technology policy matters.

SecuritySociety / politics / economyAI / ML

’16’17’18’19’20’21’22’23’24’25’26
Posts
186 from 10 Jul 2016 to 25 Aug 2026
Posting
monthly (17 in the last year)
Kind
personal blog
Feed
https://blog.lukaszolejnik.com/rss/

2026 10

  1. AI grinding: what happens when cryptanalytic ideas become cheap?
  2. How we built and ran the first fully autonomous information operation
  3. The European Commission is turning Google Search into a privacy and national-security risk
  4. Information warfare in Iran - what PSYOP looks like in 2026
  5. When your AI agent publishes internal data
  6. The Agentic Analytical Pipeline?
  7. Intelligence analysis platform for AI Agents (~OpenClaw)
  8. Hard-stopping AI agent pipelines with prompt-level kill switches
  9. Supply-chain risk of agentic AI - infecting infrastructures via skill worms
  10. Physical attacks on crypto holders - wrench assaults rising?

2025 20

  1. Polarisation is not about filter bubbles or echo chambers, here's why
  2. Weaponising AI for political persuasion - information operations on an industrial scale
  3. Did the EU top court prohibit websites with user-generated content and anonymous users?
  4. The GDPR proposal unveiled officially
  5. European Commission GDPR modification to “KILL” cookie consent nightmare
  6. European Commission proposal to ‘overhaul the GDPR risks user privacy
  7. Security vulnerabilities in AI-powered web browsers
  8. Tangible impact of quantum computing
  9. Wave of seed Phrase theft via malicious Firefox browser extensions
  10. Playing with Model Context Protocol and local Large Language Models for privacy engineering
  11. Online inference with LLMs is a security and privacy risk
  12. Prompt Injection and Mode Drift in Qwen3 - a security analysis
  13. Google won’t kill third-party cookies after all
  14. Blockchain and data protection (GDPR)
  15. Reducing fingerprinting risk of Accept-Language browser header
  16. Fixing web browser history leaks
  17. Web Privacy Then and Now - 10 years after my Ph.D.
  18. Pseudonymisation - the critical and the most exciting thing in data protection
  19. Bypassing State app censorship or blockades with PWAs
  20. Filling social media with indistinguishable AI-bots is illegal with EU AI Act

2024 20

  1. Summary of 2024
  2. Biggest Privacy Erosion in 10 Years? On Google’s Policy Change Towards Fingerprinting
  3. Privacy, security, and exfiltration via web browser Background Sync API
  4. Impact assessments, risks, and navigating GDPR compliance
  5. Exaggerated claims of disinformation efficiency considered harmful
  6. My books and how can you support me and my works!
  7. Continued developments in propaganda and disinformation regulations
  8. Cyberattacks, information operations, AI and lethal autonomous weapons systems challenge our realm
  9. PROPAGANDA. My book on information security
  10. Phasing out third-party cookies, user privacy and regulatory games - enough with the theatre
  11. Chrome removing third-party cookies or not?
  12. Digital Markets Act, Google, Chrome extensions - case study
  13. TLS Session Tickets and data protection - GDPR - ePrivacy.
  14. Privacy Sandbox governance submission to the CMA
  15. Shockwaves in security community, but post-quantum cryptography not broken after all
  16. Analysis of European Union election interference guidelines (2024)
  17. Ambient Light Sensor Privacy Constraints, GDPR Data Protection by Design, GDPR state-of-the-art
  18. AI, LLMs, GDPR complaint, and human dignity
  19. Data Protection assessment of Privacy Sandbox's Protected Audience API
  20. Competition aspects of Privacy Sandbox's Protected Audience API

2023 6

  1. Summary of 2023
  2. Invisible disability in the world of technology
  3. LL.M. degree at University of Edinburgh Law School
  4. My cybersecurity book - Philosophy of Cybersecurity
  5. Preliminary assessment of Digital Euro
  6. Cyber Escalation Ladder model based on international law

2022 10

  1. Why would you want to hack Electric Vehicle Charging Stations?
  2. Improving communication in cyber threat intelligence reports
  3. Permissions Policy as a key configuration component of site privacy and security
  4. Privacy architectural changes in the web are coming
  5. Regulating the fight with disinformation
  6. GDPR fines, how does this system work? Part two.
  7. Transparency of cyber capabilities and US building Stuxnets 2/3/4?
  8. Dangerous cyber tools spotted and analysed - potentially lethal
  9. Privacy analysis of European eID Regulation proposal
  10. Solving phishing is not simple - can anti-phishing training make it even worse?

2021 18

  1. Cyber insurance and cyber war
  2. EU ideas for transparency of political content targeting
  3. French doctrine of information operations - engaging over information space
  4. Designing technologies with Values? Possibility - Necessity - and European story.
  5. On civilian harms from military cyber operations
  6. German views on international cybersecurity and cyberwarfare rules
  7. Technically-focused analysis of AI Regulation - AI Governance and technical assessments
  8. European Union regulating AI - allowing the use of deepfakes
  9. The Risk of Cyberattacks on Weapons Systems
  10. Updated Russian technology policy relating to cybersecurity - Cyber Agency to reconcile cyber conflicts?
  11. Privacy of Google’s Privacy Sandbox 2 - Federated Learning of Cohorts leaking user’s visited websites?
  12. Governance of privacy-preserving digital advertising systems?
  13. Analysis of UK Integrated Report in scope of cyber operations
  14. Initial privacy analysis of Google’s Privacy Sandbox - Federated Learning of Cohorts leaking information about browsing in incognito mode
  15. Large-scale Analysis of DNS-based Tracking Evasion - broad data leaks included?
  16. Do we need more transparency of cyber operations doctrines?
  17. Analysing the Council of the EU ePrivacy Regulation - is it obsolete?
  18. Privacy and freedoms consideration of Covid-19 health passports or certificates

2020 26

  1. Analysis of new European cybersecurity strategy and new NIS2 Directive
  2. Analysis of Digital Services Act with a technology angle
  3. On the road to regulate microtargeting and disinformation
  4. Are we reaching privacy preserving digital advertising? Historical view
  5. Privacy analysis of websites knowing what apps are installed - getInstalledRelatedApps
  6. The policy of Security Despite Encryption
  7. Privacy of IPv6 IP address configuration - what can the tale of 20-years old privacy bug teach us?
  8. Web advertising moving towards more privacy - is it possible? Six issues to consider
  9. My analysis of the European regulation of digital operational resilience regulation
  10. On privacy and algorithmic fairness of machine learning and artificial intelligence
  11. Shedding light on designing web features with privacy: risks, impact assessments, case study
  12. Cybersecurity will look differently in times of armed conflict than in peacetime
  13. Web browsing histories are private personal data - now what
  14. Why States resort to cyber operations - fast, easy, effective?
  15. Analysis of interesting points in Australian 2020 cybersecurity strategy
  16. Initial data protection assessment of quantum computing
  17. Technology impact of Privacy Shield invalidation - is it the EU data localization?
  18. European Parliament calls to ban micro-targeted ads. Now what?
  19. iPhone to deploy the EU Tracking Cookie Consent Popup to the whole world?
  20. Privacy analysis of web browser access to Magnetometer sensor
  21. Case study: how the use of Progressive Web Apps may trigger data protection
  22. Privacy analysis of... Search in the page?
  23. Cyber risk theme and COVID-19 - why scams or unauthorized access attempts using coronavirus theme is something unwelcome but unprecedentedly risky
  24. Crafting broad State cybersecurity strategy on the example of Cyber Solarium Report
  25. India's Data Protection Bill Threatens Global Cybersecurity
  26. Curious case of privacy bug in Intelligent Tracking Prevention

2019 19

  1. Analysis of Irish cybersecurity strategy
  2. Websites Ask for Permissions and Attack Forgiveness
  3. Software as munitions - Wassenaar including offensive tools
  4. ICRC on some basic rules of cyberwarfare
  5. Dutch application of international rules to cyberspace/warfare
  6. Censorship-resilient apps with Progressive Web Applications
  7. Global Consequences of Escalating Cyber Conflict
  8. French application of international rules to cyberwarfare
  9. On proposals affecting the privacy of web architecture
  10. On privacy impact assessment and leaking data of millions of users
  11. On cyber insurance exclusions or not
  12. ICRC report on cyberoperations
  13. Advising at the European Data Protection Supervisor is not about chocolate
  14. Tracking users with rogue Progressive Web Applications
  15. When tech policy meets tech - is it too soon to turn the page on Do Not Track?
  16. Enhancing user transparency with Adstxt
  17. Target confirming an offensive cyber operation
  18. Should we expect less secrecy about GDPR performance?
  19. The French doctrine of offensive cyber operations

2018 18

  1. European ideas on fighting disinformation - want it fast or good?
  2. Interesting points in cybersecurity strategy of Luxembourg
  3. Designing accessible web with privacy - when web browsing reveals information
  4. Am I logged in or not? Addition to the GDPR case study on the example of Google Chrome 69/70
  5. Am I logged in or not? GDPR case study on the example of Chrome browser change
  6. Recent developments in cyber - France - combattants cyber et l’arme cybernetique
  7. Interesting points in the data privacy regulation of India project
  8. Making Web Ecosystem Safer - Certificates, Browsers, Web
  9. Exfiltrating data from the browser using battery discharge information
  10. Cyber Security Summit and the cyber policy development
  11. Everything you should know about the GDPR fines
  12. Is GDPR recharging cookie notice popups?
  13. There is more to Geneva than chocolates - my role as a cyberwarfare advisor at the ICRC
  14. Firefox makes sensors access user configurable
  15. ePrivacy slowed down? Analysis of French advisory document
  16. Highlights of the French cybersecurity strategy
  17. The case for mandatory cybersecurity and privacy certifications
  18. How to: GDPR, consent and data processing

2017 24

  1. Organizations must inform users about privacy breaches
  2. Guidelines to Data Protection Impact Assessment
  3. Privacy of Web Request API
  4. Privacy of London Tube Wifi Tracking
  5. Making third-party hosted scripts safer with Subresource Integrity
  6. Real-Time Bidding transparency - Ads.txt update
  7. Reidentification ban is not a solution
  8. Real-Time Bidding transparency via Ads.txt
  9. Are you sure your iMessage is encrypted? Blue > Green.
  10. Smart technology policy in Europe is a trend?
  11. New NIST guidelines: security and privacy recommendations
  12. Proposed amendments to ePrivacy Regulation are great
  13. ePrivacy Roundtables - My Input
  14. Europe’s Privacy Regulators vs Facebook
  15. Stealing sensitive browser data with the W3C Ambient Light Sensor API
  16. Analysis of Working Party 29 DPIA Guidelines
  17. Technology Policy - My Involvement in the ePrivacy Regulation Works
  18. Battery Status Not Included: Assessing Privacy in W3C Web Standards
  19. GDPR Consent Requirements. First ICO Guidelines
  20. ePrivacy Regulation Importance
  21. Data Protection Impact Assessment. First guidelines
  22. ePrivacy Proposal Officially Released
  23. Privacy Engineering Principles Recommended by NIST
  24. Interesting Points in New Russian Information Security Doctrine

2016 14

  1. 2017 Will Be The Year of Privacy And Here is Why
  2. Interesting points in leak of new ePrivacy Directive
  3. Battery status information used for fraud detection
  4. European Union wants to regulate cryptography?
  5. Browsers remove functionality due to privacy
  6. Web Bluetooth API Privacy
  7. Additional security and privacy risks of light sensors
  8. Switzerland’s new surveillance law
  9. Privacy analysis of Ambient Light Sensors
  10. Technological soft influence on elections
  11. Privacy analysis of W3C Proximity Sensor
  12. Battery Status readout as a privacy risk
  13. Privacy of W3C Vibration API
  14. Why do I need this?

Undated 1

  1. My Books