Question I'd like to hear everyone's thoughts on possibly making votes public. This has been discussed in a lot of other issues, but here's a dedicated one for discussion. Positives Could help figh...
Probably better to post in the github issue rather than replying here.
requiring either technical skill or admin access to circumvent.
What if some troll sets up a website that indexes/publishes this data? What technical skill would be required then?
The data is public and ignorance is not bliss. People need to be made aware of this. If this will lead to people being more careful about what they post online or how they interact with a public social media service, then all the better.
How is the data public? I’m asking in the most technical sense?
This informs an issue I’ve had lately with a group of three people or bots following along my comment chain (All my comments, for a while, were dropping consistently to -2 score in all contexts).
It’s my understanding that votes are not public. Am I wrong?
All votes are public, they’re literally broadcast to the Fediverse writ large. You vote on something on your server, your server then tells the server owning the thing you voted on and that server then tells anyone who is interested (subscribers on other servers). That way everyone knows that this comment was voted on, but that information is indelibly tied to you - an entity on the Fediverse.
Lemmy devs just chose not to a) show that information in a UI (plenty of other software out there does) and b) not inform people that was the case. Which leads to the whole point of the thread, hiding this from users merely gives a false sense of security.
How do you know who you’re defederating with? When I set up my instance, the list of federated instances was thousands. How do you know which one is scraping the data?
And the “we should not make it available for the public at large because it will lead to abuse” is also theoretical.
Anyway, I’m already on record saying that I don’t like the voting system and that we should get rid of it altogether. Voting on content used to be about collective curation, not a constant popularity contest.
I’m also on record saying that we need to stop relying on systems that only give us the illusion of privacy and depend on the software developers for culture shaping.
If making the vote public gets people to be exposed to these fundamental issues of the current design, and leads us to search for better solutions, then I’m all for it.
This feels a bit of a conversation-shutting argument. Lots of things (good and bad) will happen on a platform that has billions of users. The real question is to about many of those instances happened solely due to the data being (easily) available to the public.
In any case, I really don’t think that the solution to the problem of targeted harassment is by providing quote-unquote-privacy. Today, people want to obfuscate votes. Tomorrow it will be subscription lists and later it will be even posts/comments. By then it will be better to just use a closed network or just go full darknet. I’d rather we spent more time educating the people on how to use actually secure and private communications platform instead of sacrificing Transparency and Accountability for the sake of a vocal minority who will keep trying to turn the “Open Social Web” (which is meant to be open and public) into their exclusive, cocooned service.
That’s because it’s supposed to be. I was on Reddit for a decade until their management shit the bed, and these kinds of problems weren’t a thing there despite the much larger userbase.
For the record, to me it’s less about privacy and more about setting expectations. I’m not anonymous online, I’m pseudonymous, I’ve had this handle for a long time. I am my online identity, and when I post and vote I don’t feel anonymous, even if I’m relatively protected from someone knocking on my door or messaging my boss about a statement.
If voting “ledgers” aren’t presented in the discussion, that’s because they aren’t intended to be part of the discussion. This reduces the value of influential individuals votes (ooh Bill Gates liked X, Kamala Harris disliked Y etc.) and shifts focus to how the community values of the content. It’s the same reason that we follow communities rather than individuals. We get an internet “hive mind” of sorts without cult of personality.
These specific kinds of things were not a problem, yet it didn’t stop the mob from doxxing people “by mistake”, getting the police breaking into people homes based on false allegations or getting people fired over something stupid that was said years ago…
If this is about “expectations” of privacy, then it would be better to just expect the worst always and only write/post/share things when you are 100% sure you don’t mind them being ever attributed to you.
What if some troll sets up a website that indexes/publishes this data? What technical skill would be required then?
The data is public and ignorance is not bliss. People need to be made aware of this. If this will lead to people being more careful about what they post online or how they interact with a public social media service, then all the better.
How is the data public? I’m asking in the most technical sense?
This informs an issue I’ve had lately with a group of three people or bots following along my comment chain (All my comments, for a while, were dropping consistently to -2 score in all contexts).
It’s my understanding that votes are not public. Am I wrong?
All votes are public, they’re literally broadcast to the Fediverse writ large. You vote on something on your server, your server then tells the server owning the thing you voted on and that server then tells anyone who is interested (subscribers on other servers). That way everyone knows that this comment was voted on, but that information is indelibly tied to you - an entity on the Fediverse.
Lemmy devs just chose not to a) show that information in a UI (plenty of other software out there does) and b) not inform people that was the case. Which leads to the whole point of the thread, hiding this from users merely gives a false sense of security.
They’d get defederated.
How do you know who you’re defederating with? When I set up my instance, the list of federated instances was thousands. How do you know which one is scraping the data?
Ok, yeah, theoretically.
But we’re talking about putting voting info into the UI for anyone to see. Not highly motivated and skilled bad actors.
And the “we should not make it available for the public at large because it will lead to abuse” is also theoretical.
Anyway, I’m already on record saying that I don’t like the voting system and that we should get rid of it altogether. Voting on content used to be about collective curation, not a constant popularity contest.
I’m also on record saying that we need to stop relying on systems that only give us the illusion of privacy and depend on the software developers for culture shaping.
If making the vote public gets people to be exposed to these fundamental issues of the current design, and leads us to search for better solutions, then I’m all for it.
We’ve already seen that kind of harrasment on major platforms including X and those owned by Meta.
This feels a bit of a conversation-shutting argument. Lots of things (good and bad) will happen on a platform that has billions of users. The real question is to about many of those instances happened solely due to the data being (easily) available to the public.
In any case, I really don’t think that the solution to the problem of targeted harassment is by providing quote-unquote-privacy. Today, people want to obfuscate votes. Tomorrow it will be subscription lists and later it will be even posts/comments. By then it will be better to just use a closed network or just go full darknet. I’d rather we spent more time educating the people on how to use actually secure and private communications platform instead of sacrificing Transparency and Accountability for the sake of a vocal minority who will keep trying to turn the “Open Social Web” (which is meant to be open and public) into their exclusive, cocooned service.
That’s because it’s supposed to be. I was on Reddit for a decade until their management shit the bed, and these kinds of problems weren’t a thing there despite the much larger userbase.
For the record, to me it’s less about privacy and more about setting expectations. I’m not anonymous online, I’m pseudonymous, I’ve had this handle for a long time. I am my online identity, and when I post and vote I don’t feel anonymous, even if I’m relatively protected from someone knocking on my door or messaging my boss about a statement.
If voting “ledgers” aren’t presented in the discussion, that’s because they aren’t intended to be part of the discussion. This reduces the value of influential individuals votes (ooh Bill Gates liked X, Kamala Harris disliked Y etc.) and shifts focus to how the community values of the content. It’s the same reason that we follow communities rather than individuals. We get an internet “hive mind” of sorts without cult of personality.
These specific kinds of things were not a problem, yet it didn’t stop the mob from doxxing people “by mistake”, getting the police breaking into people homes based on false allegations or getting people fired over something stupid that was said years ago…
If this is about “expectations” of privacy, then it would be better to just expect the worst always and only write/post/share things when you are 100% sure you don’t mind them being ever attributed to you.