Comment on Upvotes and downvotes are public information on Lemmy
PhilipTheBucket@quokk.au 1 week agoAs long as we're talking about privacy issues on Lemmy, I'm pretty sure that isn't true. I strongly suspect that it would be possible to set up a tool that would post image links, or even just track the accesses for your own avatar, in a way where you could statistically be pretty confident of associating IP addresses with usernames after participating in Lemmy for a while (correlating people accessing your avatar image with replying to particular people's comments and then them replying to those comments, sending DMs to particular people from a not-very-much used account, something like that.)
I think modern versions of Lemmy can proxy images to reduce this, but it's hard enough to do robustly that I would bet that there is some kind of way the information leaks out. It's really hard to prevent this kind of thing even if you're trying hard to make it difficult and the Lemmy devs don't seem to be trying all that hard.
I don't even think image proxying is on by default in Lemmy, although I just checked and this Piefed instance is doing it.