I was unsure where to cross-post this. But maybe we should discuss this to make sure Lemmygrad users are staying safe? Similar to the unspoken rule that we strongly discourage people using their real names or giving away too many personal details.

cross-posted from: https://mylemmy.win/post/89871

Edit: obligatory explanation (thanks mods for squaring me away)…

What you see via the UI isn’t “all that exists”. Unlike Reddit, where everything is a black box, there are a lot more eyeballs who can see “under the hood”. Any instance admin, proper or rogue, gets a ton of information that users won’t normally see. The attached example demonstrates that while users will only see upvote/downvote tallies, admins can see who actually performed those actions.

Edit: To clarify, not just YOUR instance admin gets this info. This is ANY instance admin across the Fediverse.

  • savoy@lemmygrad.mlEnglish
    1·
    1 year ago

    There’s a lot of info and discussion on this post that explains why. Pretty much that voting has never been private on other platforms as votes must be tied to users, otherwise users could add more than one vote per post. And this data must also be federated so that other instances’ posts are also safeguarded.

    Lemmy isn’t designed as a privacy platform, it’s a socia media type link aggregator powered by ActivityPub. And with this federation brings decentralization, where it’s possible to not share data with other instances, but it will have to be shared in some way with any linked instances. There are pros/cons to each style: the current issues with Reddit show the problems with centralization, and there’s going to be an adjustment period as more people join Lemmy who don’t already know about the Fedi.

    • redtea@lemmygrad.mlOPEnglish
      1·
      1 year ago

      I see that, but I didn’t vote on other platforms. I knew I’d be giving data directly to the owners and their five eyes operatives. I know this platform is public, so I’m careful with my words. Now I know I should be careful with voting, too.

      The people who want our details are incredibly creative at how to interpret data that seems innocuous.

      Edit: that link is very informative, thanks. I should confirm that I assume everything on the internet is public in one way or another and confirm that I don’t have any major concerns with the general security architecture of the Lemmy software or the way Lemmygrad is run. I just thought it’s something that we should talk about to make sure that we’re not increasing the chances of being doxxed by giving away useful metadata.

      Edit 2: when I say, ‘I don’t have any major concerns with the general security architecture’, people should know that I’m not qualified to judge this from the coding side of things!