• cmgvd3lw@discuss.tchncs.de
    link
    fedilink
    arrow-up
    12
    arrow-down
    2
    ·
    4 hours ago

    That is really concerning. Activity Pub should have a mechanism to hide those. If by any chance, one’s identity is reviled, their entire behaviour history would be out in the wild. The more one use an account, the more information is getting shared. Social engineering is a real thing.

    The only way is it be absolutely private by not interacting (lurkers), which is not good for a social media like Lemmy or by changing accounts often.

  • Pissmidget@lemmy.world
    link
    fedilink
    arrow-up
    37
    ·
    edit-2
    7 hours ago

    I get really surprised going through my up- and downvotes. Seems sausage fingers and mobile app leads to interesting votes sprinkled in with the ones I’ve actually voted for.

    Pretty neat layer of obfuscation, though I can’t imagine being interesting or infuriating enough for anyone to go through my voting history.

    If it were to happen, I hope it’s because of some shitpost of epic proportions.

    • credo@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      3 hours ago

      There was another instance that revealed all the data by post/comment. Far more useful to see if s post is getting brigaded, etc, or to see maybe if you have a wierdo stalker.

      I just can’t remember what the instance was.

    • Carrolade@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      5 hours ago

      Yeah, every once in awhile I check my starred pages just to see what random things got fat fingered onto it. It’s mildly amusing.

  • Substance_P@lemmy.world
    link
    fedilink
    English
    arrow-up
    27
    arrow-down
    1
    ·
    7 hours ago

    Seems like a fantastic stalking tool for anyone looking to check if you have been a model of social media purity. I’d be shocked if it got used to find derisive upvotes by authorities looking to screen individuals for political reasons. But hey, call me paranoid.

    • Azzu@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      14
      ·
      edit-2
      5 hours ago

      If you’re really worried about that, there’s no reason why you need to have your private details associated to your account. You can even have a “clean” main account for show and a “real” secondary account.

      Your votes being public is only a problem if your account can be associated with you.

      • sad_detective_man@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 hour ago

        I just had a realization. A lot of content on the fediverse that we interact with is region specific. A user could have no identifying info in their comments or profile but still get doxxed because they upvoted a post associated with things like their job, their home state, places they frequent, medical conditions.

        Do you suppose this got posted today because there is a doxxing project happening right now on 4chan?

        • YellaLeber@sh.itjust.works
          link
          fedilink
          arrow-up
          4
          ·
          1 hour ago

          I have no doubt it’s incredibly easy to dox someone from upvotes alone. Maybe not on lemmy because interactions are just a lot more infrequent, but on reddit if you upvote posts about Omaha Nebraska, retro game collecting, Subaru wrx, and e bikes, you really narrow down your choice of people. If you just had one other bit of information about the user, like just a general photo or where they went to high school you could definitely nail someone down.

          I really do hate this part of the Lemmyverse and wish it was all obfuscated. That with it being impossible to delete your posts really limits how much I want to interact with the site.

          • sad_detective_man@sopuli.xyz
            link
            fedilink
            English
            arrow-up
            1
            ·
            59 minutes ago

            That is pretty dark. I was hoping the admin would take people’s safety a little more seriously but I guess it’s going to be on us to make sure word gets around a lot more

            • wizardbeard@lemmy.dbzer0.com
              link
              fedilink
              English
              arrow-up
              2
              ·
              37 minutes ago

              This is a foundational restriction with how federation works and was discussed back during the exodus from reddit when they cut off their API. Votes can’t be federated without identity attached, or you’d end up with a single vote multiplied by however many instances federated it to yours.

              This is the price of the fediverse being uncensorable. Everything you do on it is oublic, and norhing can be reliably deleted from the entire fediverse.

              There was some efforts to obsfucate voting by one of the m/kbin lemmy alternatives, to have each account have an associated hidden account with a randomly generated name that would technically be the account used for voting, so only the admin of your own instance could connect between your public account identity and your voting identity, but that could also just be defeated by basic pattern identification.

              As far as instance admins are concerned, this has been known from the start, and is completely outside of their control. That said, it could definitely use some more signposting for awareness. It’s shocking how often this entire discussion gets repeated by people who apparently never thought to look into how federation actually works.

              • sad_detective_man@sopuli.xyz
                link
                fedilink
                English
                arrow-up
                1
                ·
                26 minutes ago

                You’re right. I’m pretty sure now that I may have even asked this all before but lost it because I have goldfish memory.

    • hector@lemmy.today
      link
      fedilink
      arrow-up
      3
      ·
      2 hours ago

      I just joined but lemmy does not seem to have a running Karma total attached to each user right? Or is that just this instance that does not have that?

      • compostgoblin@piefed.blahaj.zone
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        1 hour ago

        AFAIK, you are correct, Lemmy does not have karma. Piefed has some sort of karma/reputation by account, but I think it’s geared more toward easing moderation than providing a status symbol

      • Tattorack@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        1 hour ago

        It doesn’t, which is refreshing. A lot of personal ego and insecurity is tied to those that care about how many upvotes they have.

        My concern is that something like OP posted just brings that crap over here, albeit not in an integrated fashion.