I recently learned that voting on lemmy is not anonymous. Anyone can get information about who has upvoted and downvoted a post or comment.

In combination with your IP, this is a massive privacy (maybe even physical security) risk. Also, people can target you for your votes.

Sadly, this is something where I would prefer Reddit over Lemmy. Big tech scrapes data from both places anyways, at least Reddit is safe.

  • discosnails@lemmy.wtf
    link
    fedilink
    arrow-up
    0
    ·
    2 days ago

    I was unaware that it was unclear to anyone but children and the intellectually behind that anything you do on the Internet is traceable to you without significant countermeasures.

  • socsa@piefed.social
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    A lot of people here still refuse to understand that Lemmy, as it currently exists, is a privacy nightmare, and the voting thing is just the top of the iceberg. There are several de-anonymization attacks possible involving dynamically serving different content to different users. This, combined with the public voting makes it possible that someone can dox an account and expose a lot more information than other forums where that information is more private.

    Public votes also open the fediverse up to much worse astroturfing IMO. It’s incredible feedback for bots and trolls to see exactly who is interacting with their posts and comments. It’s frustrating that a bunch of people here have convinced themselves of the opposite, and insist that public voting is the only way to combat brigades and trolls, which is an incredibly shortsighted stance which doesn’t scale nearly as well as it does in the other direction.

  • omniman@piefed.zip
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    whats the problem with it . you did not liked it you downvoted . its not like they can ban your account

  • Dholi@lemmy.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    at least Reddit is safe.

    Lmao, what!? Reddit tries their best to know exactly who you are, where you live, your education, where you work, etc… And then they sell that data to anyone.

  • Xylight@lemdro.id
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 days ago

    If you’re an instance admin, for any post, you can just click “view votes” and see everything tied to usernames, even outside your own instance. Moderators can too, but it’s restricted to the communities they moderate.

    • moseschrute@lemmy.zip
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      2 days ago

      So if a bad actor wanted to get aces to vote data, they could setup and instance and have it federate with any instance they want to extract voting data from?

      • Xylight@lemdro.id
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 days ago

        Yes, it’s very simple too. You don’t even need to extract anything from a database or do some complicated stuff. As an admin you have free access to all moderation tools no matter where the post is from, including the option to “view votes”.

      • Smeagol666@crazypeople.online
        link
        fedilink
        arrow-up
        0
        ·
        4 hours ago

        I got kicked off of Reddit for saying “fuck Ukraine” when some little bundle of twigs said they liked a certain Van Gogh painting because “it matches the color of the Ukraine flag”. That was in r/museum, where you’d think there wouldn’t be much political horseshit.

  • Wispy2891@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    3 days ago

    The IP address thing is not real, though

    Just choose a nickname that is random word+4 random digits and don’t reuse it on other services