this post was submitted on 22 Jun 2023
123 points (98.4% liked)

Lemmy

12575 readers
1 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.

founded 4 years ago
MODERATORS
nutomic@lemmy.ml
123
Interesting difference from Reddit: Upvotes/Downvotes are not anonymous (programming.dev)
submitted 1 year ago by o_o@programming.dev to c/lemmy@lemmy.ml
107 comments fedilink hide all child comments
 

Hey folks! Just realized something that makes Lemmy different from Reddit. Because of the federation, your votes are not technically anonymous on Lemmy. At least, I think.

Although there’s no UI to look at a user’s voting history yet, one could conceivably be built by an instance. Perhaps coincidentally, I hear there’s instances out there populated by mostly bots?

you are viewing a single comment's thread
view the rest of the comments
[–] PriorProject@lemmy.world 14 points 1 year ago* (last edited 1 year ago) (3 children)

Because of the federation, your votes are not technically anonymous on Lemmy. At least, I think.

I was a little skeptical of this assertion without any sources, but 10m of source scanning does seem to support it:

I haven't looked for APIs to extract this data, it might only be available to an instance admin... but yeah Lemmy does not seem to aggregate vote histories, but rather stores them on a per-user basis.

[–] o_o@programming.dev 4 points 1 year ago

Good on you for actually checking and not blindly assuming like me! Hahaha glad to see my assumptions bore out this time.

But yeah, even if lemmy doesn’t aggregate it, it would be possible to set up a bot pretending to be an instance which collects and aggregates vote histories.

[–] CoderKat@kbin.social 3 points 1 year ago

You can't aggregate them internally, anyway. You need to be able to know if someone already voted on something.

I think activitypub needs to be extended so that the likes and reduces only need to be sent to the host of the content, with federation then being told just the aggregate number. Then the only servers that need to know identity of votes are the host server (necessary to ensure nobody can multi vote) and optionally the server the user voted on (could just relay the information to the host server and not store it locally, but then it'd be harder to tell what you've already upvoted -- could use local storage but I think lots of people use social media on multiple devices).

[–] seacocker@lemmy.world 1 points 1 year ago (3 children)

Is that ID local to the instance or universal across the fediverse?

[–] XanXic@lemmy.world 3 points 1 year ago

Thanks to Marius, looks like when you interact with a server you get assigned a local id that's tied to your username/email combo. So no global ID but all your actions on a server are tied to you. It wouldn't take a lot to link that to your account on your home server.

Overall idk if it's a big deal. Upvotes and such need to have a user ID tied to them in order to keep things straight. Unless someone wants to update the Lemmy software to start encrypting the GUID on the table an instance owner will always be able to see what you've voted on ON THEIR instance. Reddit totally can as well, but they had a reason not to put their users on blast (At least until lately lol).

It'd take some collusion to put that all together across the fediverse.

[–] PriorProject@lemmy.world 1 points 1 year ago

Is that ID local to the instance or universal across the fediverse?

I dunno, this is as far as I chased it. It should give you a starting point to dig further if you choose... but I don't plan to at the moment.

[–] o_o@programming.dev 1 points 1 year ago

As far as I know (another assumption haha), there’s no universal IDs across the fediverse.