Upvotes seem to just federate as likes and dislikes.
There's no way that isn't going to be abused. Some marketing or tracking agency will setup a fediverse server and just collect all data like this for free. Or worse, take advantage of a friendica instance to bombard it with requests for data collection purposes.
Well yes, the whole concept of the fediverse is that of social media as a public service. All activitypub data is public.
Yes, but as long as you don’t reveal your identity, they can’t do much to track you.
They don’t have access to your IP.
Of course, it you’re using the same username over multiple services, or reveal identifying information (which is much easier to analyse now due to AI) they will be able to track you.
My name is actually Ricky Rigatoni and I am King of the Brooklyn Mafia.
This feature has been available to all kbin/Mbin users since the beginning, btw.
I wanna say it was built into Lemmy originally as well but they removed it from the FE
It’s in lemmy but only available to instance admins
This is nothing new. Fire up any ActivityPub server and you can see everything over the wire. As a Lemmy admin of my server of just me, I can also see it in the UI.
Yes, after all other servers need this information in order to prevent double voting, you can't just have servers sending each other information "somebody upvoted this" and also tell when servers are allowing users to vote more than once.
So upvotes and downvotes aren't actually private, never have been, some servers may display them publicly even if most don't.
The server hosting the post needs it.
It only needs to tell other servers the vote count, and the votes of people on that other server.
That may not be how it actually works, but that's all that's needed
Yes, but then you can have malicious servers sending fake numbers without other server operators being able to check whether this is at all plausible.
(It's still possible for malicious servers to send fake votes, but server operators can see which users they are stated to originate from, then block that server if that looks like it's doing that. At least that is my understanding.)
Over thinking.
Only the instance with the post needs the username to register the vote, the count can then be updated by the instance. Simple and lightweight
The whole concept of the Fediverse as social media is that all the data is public. Stop acting like these servers are giving out private data. This data has never been private, and it never will be. Data like this being shared with any other server is how ActivityPub and the Fediverse work.
I know, but some people assume votes are private.
If you'd only ever interacted with Lemmy and not read up on how ActivityPub works then that's a reasonable assumption, it's not like anything (that I've noticed!) actually tells you that your votes are public, and they don't look to be public in the places you're likely to see!
It's not good practice. Really one shouldn't be assuming anything is private or some entitlement to privacy on a service where all content you post is made publicly available to any and all linked instances. They miss the point of a federated public forum. If one wants privacy, data must be kept locally only. That's why Lemmy has local-only communities, the "private" community aspect that many people want just won't be federated, because you can't make something like this private otherwise.
Or you can be an instance admin. Iirc In the next lemmy version (1.0.0), mods will also be able to view votes in their communities.
mods will also be able to view votes in their communities.
You can already do this using tesseract, by the way (not tesseract.dubvee.org, strangely?)
On t.lemmy.dbzer0.com i can see both upvotes and downvotes (for all my modded comms):
You can already do it with a database query iirc.
I'm not sure about the downvotes part (i failed to recreate this lmao) but you can already view upvotes with mbin. Piefed solves this problem with a option to make your votes private but only with untrusted instances (but from my tests it didn't work? weird)
IIRC, piefed's private votes are disabled for "trusted" instances. You can see which instances are trusted here.
Ah, well that sucks :( i thought it just used a different strategy to do so if it was trusted, not outright disable it.
Will correct it, thanks
IIRC PieFed’s method is to send the upvote using a second random username not connected to your username.
Petty mods or users would abuse this
It's already possible to see if you really want to look. Friendica is just another way.
Same was the case on /kbin, and while Mbin got rid of the downvotes, it still has public upvotes.
I think lemmy instance admins can see this too. Doesn’t even have to be a friendica instance
I get this is obviously intended behaviour on part of actpub but I'd love for there to be a pseudo-anonymous voting system too. Maybe an option to hash user credentials when added to likes to ensure that they're unique whilst obfuscating the original user.
I was thinking that it would make sense to federate upvotes, but with the hash of your username instead of your actual handle. Would this work?
The userbase is small enough that hashing would be easy cracked by a determined person. Even with salting, iterating through the entire userbase and hashing each username+salt to check for a match would probably not take long
Replace "hashing" with "encrypted" (perhaps just using a symmetric key that the admin sets up) and then it gets impossible to know for any outsiders who is the real user behind the vote.
I for one just wish people understood once and for all that anything you do on social media is public.
If you are not comfortable backing up your opinion or action, then don't do it.
Assuming each user will always encrypt to the same value, this still loses to statistical attacks.
As a simple example, users are e.g. more likely to vote on threads they comment in. With data reaching back far enough, people who exhibit "normal" behavior will be identified with high certainty.
One of the advantages of votes being public is that it keeps instance owners honest and, perhaps more importantly, means they know other instance owners are honest.
If they weren't public it would be easy to modify your lemmy instance to send 10 votes with fake hashes for every real vote. There would be constant accusations of brigading and faking votes.
How long until it gets abused, and trolls start brigading though instances that hide their votes?
I mod a small community with like 6 monthly users, I'm the only one who post or comment and the average post have 3/4 upvotes and 1 downvote. And I always ask myself who is downvoting my submissions, because it's make no sense to me that someone take the job of pressing the downvote button on a link to a EDM set. Couldn't they just block the community?
this is an icky issue because lemmy sends votes with empty addressing, so remote instances should count them but not show them to anyone. however mastodon (and *key) sends likes with empty addressing too, but considers them public. lemmy is (surprisingly) right here and should request that the rest of fedi respects the protocol and hides stuff based on its addressing. maybe open issues on mastodon and friendica
also this issue probably exists when seeing lemmy posts on any microblogging instance
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)