Submitted 3 weeks ago by j4k3@lemmy.world to youshouldknow@lemmy.world
https://lemmy.world/pictrs/image/03bb45ac-2878-4ab0-b0b3-25d9fb7d7b3f.png
I get really surprised going through my up- and downvotes. Seems sausage fingers and mobile app leads to interesting votes sprinkled in with the ones I’ve actually voted for.
Pretty neat layer of obfuscation, though I can’t imagine being interesting or infuriating enough for anyone to go through my voting history.
If it were to happen, I hope it’s because of some shitpost of epic proportions though.
There was another instance that revealed all the data by post/comment. Far more useful to see if s post is getting brigaded, etc, or to see maybe if you have a wierdo stalker.
I just can’t remember what the instance was.
Yeah, every once in awhile I check my starred pages just to see what random things got fat fingered onto it. It’s mildly amusing.
Seems like a fantastic stalking tool for anyone looking to check if you have been a model of social media purity. I’d be shocked if it got used to find derisive upvotes by authorities looking to screen individuals for political reasons. But hey, call me paranoid.
If you’re really worried about that, there’s no reason why you need to have your private details associated to your account. You can even have a “clean” main account for show and a “real” secondary account.
Your votes being public is only a “problem” if your account can be associated with you.
I just had a realization. A lot of content on the fediverse that we interact with is region specific. A user could have no identifying info in their comments or profile but still get doxxed because they upvoted a post associated with things like their job, their home state, places they frequent, medical conditions.
Do you suppose this got posted today because there is a doxxing project happening right now on 4chan?
The authorities could do this without Lemvotes, just set up a lemmy instance and voilà, you have access to votes
Now I’ll know which of you goons don’t like my jokes.
All me :P
That is really concerning. Activity Pub should have a mechanism to hide those. If by any chance, one’s identity is reviled, their entire behaviour history would be out in the wild. The more one use an account, the more information is getting shared. Social engineering is a real thing.
The only way is it be absolutely private by not interacting (lurkers), which is not good for a social media like Lemmy or by changing accounts often.
No we shouldn’t. Anyone can create an instance and scrape whatever data.
Assume that all the posts and comment you make are public and linked to your real identity and don’t say things you wouldn’t say in person.
It’s a pretty simple concept.
Shame, guess I can’t say categorising Palestine Action as a terrorist group is dumb.
This post might as well encourage people to go and harass them, it genuinely isn’t a good look for Lemmy as a whole.
That is really concerning
The only way is it be absolutely private by not interacting…
This is not a lemmy specific problem and basically applies to the entire internet…
The only way is it be absolutely private by not interacting…
I don’t know if this is news to you but this is not a lemmy specific problem and basically applies to the entire internet…
Hyphanet’s Frost can provide pretty solid pseudonymity.
But that comes with its own performance and functionality tradeoffs.
identity is reviled [I assume revealed]
The fact that most instances permit external image hosting permits obtaining user IP addresses by posting inline images hosted on a server created by an attacker, then harvesting IPs there. I noticed when going through the code that Lemmy, as of 0.19.4 has an option to protect users of a home instance by proxying images viewed there. However, it’s bandwidth-intensive and I don’t think that many instances have it on.
join-lemmy.org/…/2024-06-07_-_Lemmy_Release_v0.19…
Image Proxying
There is a new config option called image_mode which provides a way to proxy external image links through the local instance. This prevents deanonymization attacks where an attacker uploads an image to his own server, embeds it in a Lemmy post and watches the IPs which load the image.
Instead if image_mode is set to ProxyAllImages, image urls are rewritten to be proxied through /api/v3/image_proxy. This can also improve performance and avoid overloading other websites. The setting works by rewriting links in new posts, comments and other places when they are inserted in the database. This means the setting has no effect on posts created before the setting was activated. And after disabling the setting, existing images will continue to be proxied. It should also be considered experimental.
Many thanks to @asonix for adding this functionality to pict-rs v0.5.
I donlt know whether PieFed and Mbin presently have comparable functionality.
One major issue is that proxying the images will create more bandwidth usage on a home node, since they’re serving up all the images viewed by users of that home node — it’s more-expensive to run a node in that mode.
If by any chance, one’s identity is reviled, their entire behaviour history would be out in the wild.
So close to a sweet meter. What do you think of
“If, by some chance, one’s handle’s reviled / their foul history would be out in the wild.”
? It’s not perfect. Probably just a little more work-shopping.
I know this is how the fediverse works, and how it has to work. But maybe we shouldn’t be advertising this right now when the right is trying to dox people and get them fired for liking a kirk meme.
Does it show how an individual votes, something has been voted or both?
Both
Good, hopefully someone will train an ai on them and offer me better porn!
AI generates porn of scantily clad woman scrolling and upvoting on lemmy
It can be blocked at the instance level by an admin defederating with them.
Is it known what Lemmy instance is actually running that site? Even if it were widely known and most instances decided to defederated from it, Lemvotes is open source software that is made to be self-hosted. Anyone could revive the website by running their own instance.
Yes.
gregtech.eu is the instance.
piefed.social has defederated from it so any community on piefed.social will not be broadcasting votes cast within it to lemvotes.
I will use this to find my many enemies.
unless they’re defederated or blocked by gregtech.eu
Narcissists hate it, everyone else loves it!
I don’t get it. Is this the Lemmy version of Reddit’s karma?
I just joined but lemmy does not seem to have a running Karma total attached to each user right? Or is that just this instance that does not have that?
AFAIK, you are correct, Lemmy does not have karma. Piefed has some sort of karma/reputation by account, but it seems geared more toward easing moderation than providing a status symbol, iirc
It doesn’t, which is refreshing. A lot of personal ego and insecurity is tied to those that care about how many upvotes they have.
My concern is that something like OP posted just brings that crap over here, albeit not in an integrated fashion.
Good to know. I keep jumping between instances during outages and I’m worried in upvoting stuff twice
mrdown@lemmy.world 3 weeks ago
Nothing private about the fediverse
Azzu@lemmy.dbzer0.com 3 weeks ago
Except the ability to register an account without any personal details. Which makes it completely private if you want.
glitchdx@lemmy.world 2 weeks ago
anonymous, not private. the two ideas are not the same.
AntiBullyRanger@ani.social 3 weeks ago
says me, and my army of alts.
/s