I recently learned that voting on lemmy is not anonymous. Anyone can get information about who has upvoted and downvoted a post or comment.

In combination with your IP, this is a massive privacy (maybe even physical security) risk. Also, people can target you for your votes.

Sadly, this is something where I would prefer Reddit over Lemmy. Big tech scrapes data from both places anyways, at least Reddit is safe.

  • Dr. Moose@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    24 days ago

    I dsiagree that transparent upvotes are an issue. In fact i think it’s a powerful feature for community to self correct and resist astro turfing.

    On reddit votes have become meaningless because they are not 1 person == 1 vote and its completely astroturfed. You can literally got to buyredditvotes dot com (not real but real ones are very close just google it) and stuff any post with votes and nobody will ever know.

    Transparent interactions are key for community health even if behind anonymous nicknames. So all interactions should be transparent.

    My only issue is that many lemmy instances are blocking popular VPN services which is very dangerous. I understand the bot argument but (even though residential proxies are dirt cheap these days) user safety suffers hard here.

  • teft@piefed.social
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    23 days ago

    I like piefed because it lets you see at a glance if someone is a serial downvoter. On each piefed user profile is a thing called “attitude” and it’s a ratio of your upvotes vs downvotes. 100% means the person doesn’t downvote people. 50% means they downvote and upvote equally. 0% is only downvotes. Edit: I saw someone today with negative % so it must be 100% is all upvotes. 0% is half upvotes half downvotes. -100% is all downvotes.

    It shows up for people outside piefed too so i see you too lemmy angry people.

  • A_norny_mousse@feddit.org
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    23 days ago

    It was something I had to learn, coming from Reddit.

    But I made my peace with it. Let the mods* see my up/downvotes. If that becomes a problem then, well, the Lemmyverse isn’t right for me.

    * I was told that anyone can see this, with a little effort.
    But I have not heard about this applying to IPs.
    Obviously someone running an instance (an admin, not a mod) can see who visits that instance; that’s just how servers work, and it’s valid for reddit as well. If you can’t live with that you must use Tor or VPN.

    So while I agree that everyone should be aware that up/downvotes + username are visible to anyone, I’m not sure about the IP argument.

  • ComradeSharkfucker@lemmy.ml
    link
    fedilink
    English
    arrow-up
    0
    ·
    23 days ago

    Make a new account every once and a while if it concerns you. This is probably the best way to deal with it but it aint perfect

    • npdean@lemmy.todayOP
      link
      fedilink
      arrow-up
      0
      ·
      23 days ago

      I know you are being sarcastic and edgy but point is that voting is assumed to be private by the average person because it is anonymous in elections, it is anonymous on the closest social platform Reddit and popular websites like youtube.

      • Duamerthrax@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        23 days ago

        It’s a federated platform. How could voting have been anonymous?

        Besides, nothing requires you to vote on posts. If you’re not comfortable voting, then don’t vote.

        • npdean@lemmy.todayOP
          link
          fedilink
          arrow-up
          0
          ·
          23 days ago

          I am okay with votes being public but then it should be made explicitly clear to users.

          • Duamerthrax@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            23 days ago

            The people I trust the least on these platforms are the admins and owners of them. Your voting wasn’t anonymous on reddit to those people either.

      • n3m37h@sh.itjust.works
        link
        fedilink
        arrow-up
        0
        ·
        23 days ago

        And reddit also has a problen where you can use bots to farm upvotes and because you cant see that information means you cant tell if posts are legit or propaganda

          • n3m37h@sh.itjust.works
            link
            fedilink
            arrow-up
            0
            ·
            21 days ago

            No shit, but if you’re getting 1000 upvotes from the same bangledeshi or Russian IP you can a least figure it out, hey its prolly not legit…

      • daniskarma@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        0
        ·
        23 days ago

        I don’t know how to break this… But voting in Lemmy is not choosing a president.

        Voting is like booing or clapping in a public agora. It’s not private. If you assume is private that’s on you.

        Not even on your beloved reddit. Reddit admins know all your votes.

          • nimble@lemmy.blahaj.zone
            link
            fedilink
            English
            arrow-up
            0
            ·
            23 days ago

            Mods can also see them for their communities iirc.

            But it’s part of the activity pub protocol and how things work between federated platforms. Some platforms display the votes in public for everyone

          • daniskarma@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            0
            ·
            23 days ago

            That’s precisely your issue before. Voting in reddit is not private as admins know that info and can share with anyone so the “bad voter” could get prosecuted. But users, like you, think it’s private because they don’t see it.

            Be consistent with your argument at least.

            I will disengage here. Bye!

            • npdean@lemmy.todayOP
              link
              fedilink
              arrow-up
              0
              ·
              23 days ago

              How likely is an admin to share something with someone else vs something being already public?

    • BoosBeau@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      23 days ago

      Only you can see this comment Daniskarma. The Leering League of Lemmy SEES you Daniskarma and we have taken notice. Cease your efforts to spread information about public posts and comments, or ELSE Daniskarma. We’re watching you.

  • dickalan@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    23 days ago

    Get bent you You spreader of blatant misinformation with a agenda for certain, go, jump up your own ass you weirdo

  • dan@upvote.au
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    23 days ago

    It’s currently impossible to have private upvotes and downvotes with a federated service. It could probably be done, but it’d need a big revamp of the ActivityPub protocol, and apps would need to adopt the new protocol version. It’s not trivial.

    Just hiding the data in the UI doesn’t solve it, because the data is still there.

    Additionally, a lot of other social media sites have public votes/likes, as long as the content is public. Facebook, Twitter, Instagram, Discord, LinkedIn, Telegram (if you consider it social media?), and probably some others all have public likes by default.

    • npdean@lemmy.todayOP
      link
      fedilink
      arrow-up
      0
      ·
      23 days ago

      It is okay to have public votes but it should be made clear to the users. Instagram and others allow you to see who has liked easily (next to the like button), so everyone knows it is public. Lemmy does not let me see who voted easily and it being a reddit alternative further makes it seem anonymous.

      • dan@upvote.au
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        23 days ago

        Lemmy does have a way to view votes, but it’s only visible to admins. It’s weird because admins can view votes for anything, even posts and comments not on the server they admin. I’m not sure why they did it that way.

  • TrickDacy@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    23 days ago

    Why are you saying IP addresses are publicly shown here and why is (almost) no one correcting you? That would’ve been an enormous privacy risk that would’ve required intentionally fucking users over. Just doesn’t even make sense to write what you did about IP addresses. Seems like you’re just hoping to cause some panic.

  • YappyMonotheist@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    23 days ago

    It shouldn’t be private. I want to know which members of the community lean one way or another through their voting record, it makes me understand them better and allows me to call them out on it. In fact, I wish it were openly displayed like in LSA. But AA women are a brave and ‘real’ group of people, at least comparatively, I guess. 🤷😅

    OP, you’re a coward!

    • npdean@lemmy.todayOP
      link
      fedilink
      arrow-up
      0
      ·
      23 days ago

      I am a coward for having a different opinion and then putting it on display after being called out about it?

      • FelixCress@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        23 days ago

        having a different opinion

        By “having different opinion” you mean justifying Putin’s aggression? You have rightly been called out about it. I suggest you should stick to Lemmy.ml next time.

        • npdean@lemmy.todayOP
          link
          fedilink
          arrow-up
          0
          ·
          23 days ago

          You are following me around and replying to every comment. Please do something better with your time.

          You are extrapolating one comment to mean I am a Russian supporter, zero nuance.

  • jqubed@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    24 days ago

    I don’t think IP addresses federate? I think only your instance admin can see your IP address. In any case, though, you should generally always assume that your up/down votes on any service are recorded and tied to your username. If you can come back later and change your vote, that vote is tied to your username. It may not be visible to other users, but the server admins can absolutely see what you’re doing.

    Reddit might not make your votes publicly visible, but they’re absolutely tracking them and using that information to select what you see, including advertising. They might not directly share those votes with advertisers, but they almost certainly are sharing your interests based on your votes. And you should assume Reddit and others will comply if the government comes asking for what users liked a post the government opposes, or who downvoted a post praising a new government initiative.

    It depends on your threat model, but your threat model might change. Freedom of speech might be curtailed by politicians even when that’s supposed to be unconstitutional. What might be safe to do online now might become unsafe in a year or two.

    YSK: every action you take online, even as simple as an Upvote or Like, might be recorded and may come back to haunt you

  • Sundray@lemmus.org
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    24 days ago

    It’s a good thing to be concerned about privacy! While voting patterns/voting retaliation is certainly possible on Lemmy, I think following good general security practices can go a long way towards mitigating those things. (Anyone who’s new to online privacy or needs a helping hand to get started should def check out the EFF’s Surveillance Self-Defense site.)

  • LousyCornMuffins@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    24 days ago

    My votes are a massive privacy risk? How? I’m putting them out there publicly willingly. As is the nature of the internet.

  • Angelusz@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    24 days ago

    Cool stuff right? Everyone can spy on you, and you can keep them guessing by behaving incongruent. Lots of fun!

  • gedaliyah@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    24 days ago

    While it is important to know that voting is not private (nor truly is direct messaging), that is not in itself a danger.

    Lemmy is community driven, and so it is — broadly speaking — governed by community norms and the platform is responsive to the needs of those norms. If someone is harassing or mistreating you on the basis of your voting, then you can take it up with an admin. I’ve seen people called out for the use of vote manipulation, but I’m not sure what it would look like to be targeted based on your votes.

    By the way, there are also mechanisms for publicly addressing grievances with mods and admins.

    Most importantly, recognize that it does take time to adjust to the reality that no one cares about the fake internet points here. Reddit uses dark patterns to manipulate users into equating votes with worthiness. Having a lot of karma on reddit contributes to a person’s reputation and credibility there. Here, no one cares, or even sees, a person’s vote totals. Like most everything else, it’s technically public, but it’s not visible or indicated.

    Why does reddit want you to care about your karma? For engagement and metrics. If people are only incentivized to share genuine interests and human interaction, then they won’t scroll mindlessly for quite as long. If every post and comment is incentivized for maximum virality, then Reddit can sell more eyeballs to advertisers. Plus, if people care enough about their fake points, they will literally pay to buy reputation. Reddit doesn’t care about your well-being, just your ad impressions. Like any other social media corp.

    Welcome to a better, healthier, more transparent place. We are far from perfect, but no one here will use dark patterns to mine you for content.

    • A_norny_mousse@feddit.org
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      23 days ago

      Most importantly, recognize that it does take time to adjust to the reality that no one cares about the fake internet points here.

      Oh but they do.

      It also informs how comments are sorted under each post (unless you choose New or Old by default).

      IMHO the voting system is the best part of both reddit and lemmy: it gives certain powers to the majority. It gives a rough picture of how other people - even those that do not comment - feel about opinions.

      edit: lol, even you do

      • gedaliyah@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        23 days ago

        Voting functions completely differently between the two sites. I didn’t say that voting doesn’t matter, I said that no one cares about the “points.”

        People can and do use voting to let others know about interesting content or to express displeasure at seeing a post (which is why it is sometimes surprising to see any downvotes on certain posts such as the nice one I was responding to in the screenshot).

        What people don’t use them for is a measure of merit or reputation. Voting here functions much more like reddit used to years ago. It helps sort content by what people want to see.

    • npdean@lemmy.todayOP
      link
      fedilink
      arrow-up
      0
      ·
      23 days ago

      I took it up with a mod. They said it is public information. That is how I learned about it. Mods won’t do shit if they favor the abuser.

    • sad_detective_man@leminal.space
      link
      fedilink
      English
      arrow-up
      0
      ·
      23 days ago

      if someone is harassing or mistreating you on the basis of your voting, then you can take it up with an amin.

      this is a highly demanding solution for a misbehavior that takes very little energy to engage in. at least in my experience with admins, even when you have an effective one that doesn’t mean they will be effective in the coming months or years. ultimately a lot of people will end up having to explain somebody else’s bad behavior to another who just might not care.

      but never mind that. what I’ve actually got to wonder is what does having votes public even accomplish positively? is the goal to help users understand each other based on actions we made that up to this point we thought were anonymous?

      • WellThisIsNew@fjdk.uk
        link
        fedilink
        English
        arrow-up
        0
        ·
        23 days ago

        Votes are public more of a side effect of the fact that Lemmy is federated, rather than intentionally as something to be publicly visible, I don’t believe you can go find someone’s vote history just from the normal Lemmy ui, but someone could create their own Lemmy/mastodon/kbin version (or just some custom scraper that speaks activity pub and pretends to be one of these) to start collecting vote counts.

        Votes being tied to accounts makes it slightly harder to do vote manipulation, but only slightly. It would be as simple as having my server tell the server of the original post that 5000 users that totally exist voted on this post. Of course you could do the same by actually creating 5000 fake accounts on your server, but that’s marginally more work, and also slightly more detectable. There’s a lot of trust in the activity pub protocol.

        • dan@upvote.au
          link
          fedilink
          arrow-up
          0
          ·
          edit-2
          23 days ago

          I don’t believe you can go find someone’s vote history just from the normal Lemmy ui

          If you run your own Lemmy server, you can probably just query your server’s database. Lemmy admins can see upvoters and downvoters for all comments (and posts I think), not just comments/posts on servers they’re an admin on, so that data must be in the database.

      • gedaliyah@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        23 days ago

        There have been a lot of discussions about whether voting on Lemmy should be public. Some threadiverse platforms actually take the step of displaying votes and reactions publicly for that very reason.

        I won’t attempt to recap those discussions here, but you may be able to search for them.