I recently learned that voting on lemmy is not anonymous. Anyone can get information about who has upvoted and downvoted a post or comment.

In combination with your IP, this is a massive privacy (maybe even physical security) risk. Also, people can target you for your votes.

Sadly, this is something where I would prefer Reddit over Lemmy. Big tech scrapes data from both places anyways, at least Reddit is safe.

  • anamethatisnt@sopuli.xyz
    link
    fedilink
    arrow-up
    11
    ·
    edit-2
    4 days ago

    Even if sites like lemmyvotes disappear and software like kbin/mbin starts hiding the votes all you need to do is to spin up your own lemmy server. Piefeds dev is actively trying to find a way to obscure voting, but I think that ended with the choice of public (federated) vote or private (instance-only) voting.

    I agree that the public nature of votes could be made more apparent, but the lemmy devs has decided against that
    https://github.com/LemmyNet/lemmy/issues/4967

    • socsa@piefed.social
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 days ago

      I don’t understand why everyone is so dismissive of this being a problem. Especially considering it is easily mitigated using simple voting agents.

      It’s not just a privacy concern either, I promise you that trolls love being able to see which accounts are engaging with them in order to target certain demographics. Like we know this kind of shit has been used to manipulate elections already, and people here are just like “well I guess that’s just the world now.”

        • socsa@piefed.social
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 days ago

          Piefed literally already implemented voting agents and it worked fine until forum politics killed it.

          • anamethatisnt@sopuli.xyz
            link
            fedilink
            arrow-up
            1
            ·
            2 days ago

            Ah, so what Rimu calls an alt/sockpuppet account that automatically votes on their behalf.
            I haven’t seen the Matrix chat but having a dev look for feedback and then implement changes based on feedback received isn’t “forum politics” in my world.

            Good luck with your fork!
            https://piefed.social/post/956572

            • socsa@piefed.social
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 days ago

              Yes that thread is quite literally just describing forum politics, based on a very small amount of feedback from a select group of individuals discussing the matter in back channels.

              Simply put, admins were not satisfied just banning the agents for voting and the user for commenting. This is entirely a perception issue and caused no actual problems besides feels. This caused the implementation of trusted instances which was actually a flawed concept. Rather than iteration on the idea, the pressure from other admins caused it to be abandoned unceremoniously with almost zero input from users. I’m not sure how you can interpret this as anything other than forum politics.

    • PhilipTheBucket@quokk.au
      link
      fedilink
      English
      arrow-up
      7
      ·
      4 days ago

      It’s ridiculously stupid. In my opinion. Actually making the votes private would be fine. Making the votes public but making sure everyone knows that would be fine. Trying to pretend they’re private, and hiding them in the UI but making it an open secret that they’re not private and anyone who knows what they’re doing can look at how other people are voting, is textbook harmful security-by-obscurity misleading your users.

      It kind of goes with their authoritarian mindset I guess. “Don’t question me, I don’t have to be honest with you about what’s going on, just shut up and go back to your UI which has only the features I allow you to have. Mine has a little dropdown that can look at the votes. Yours doesn’t. Get back in your box. All the good users won’t look outside what I tell them to.”

      • clb92@feddit.dk
        link
        fedilink
        English
        arrow-up
        4
        ·
        4 days ago

        Making the votes public but making sure everyone knows that would be fine.

        This is why I actually like that in kbin/mbin you can see up front who has voted what. It doesn’t pretend votes are secret when they aren’t.