3386
submitted 1 year ago* (last edited 1 year ago) by muddybulldog@mylemmy.win to c/youshouldknow@lemmy.world

Edit: obligatory explanation (thanks mods for squaring me away)...

What you see via the UI isn't "all that exists". Unlike Reddit, where everything is a black box, there are a lot more eyeballs who can see "under the hood". Any instance admin, proper or rogue, gets a ton of information that users won't normally see. The attached example demonstrates that while users will only see upvote/downvote tallies, admins can see who actually performed those actions.

Edit: To clarify, not just YOUR instance admin gets this info. This is ANY instance admin across the Fediverse.

you are viewing a single comment's thread
view the rest of the comments
[-] s4if@lemmy.my.id 66 points 1 year ago

Nothing private in fediverse except when you are selfhosting yourself.

[-] muddybulldog@mylemmy.win 80 points 1 year ago

and not interacting with anyone else.

[-] s4if@lemmy.my.id 6 points 1 year ago
[-] hemmes@vlemmy.net 5 points 1 year ago

I’m off to my cabin in the woods

[-] vinnymac@lemmy.world 15 points 1 year ago

If post views are public that’s a fairly poor implementation on the developers part. I’m sure it will change over time.

E.g. someone using your account to view illegal content in a community you are not a member of, and you being held accountable.

[-] s4if@lemmy.my.id 20 points 1 year ago

I think the in the current implementation, your post views is not public. But any data you have is still accessible to your instance admin.

[-] PutangInaMo@lemmy.world 13 points 1 year ago

I'm about to self host, sounds like a great move towards data privacy and ownership.

[-] chris@l.roofo.cc 14 points 1 year ago

Nope. Everything you do is sent to all other instances. If you upvote your instance sends that upvote to the instance where the community lives and that instance broadcasts your vote to alle instances that subscribe to that community. Every instance operator can see the upvotes.

[-] PutangInaMo@lemmy.world 2 points 1 year ago

Well then nevermind! I need to go read about activity pub protocol.

[-] s4if@lemmy.my.id 1 points 1 year ago

At least your password hash not accessible by anyone but you.. and your dm is also only accessible by your recipient and his/her admin... 😅

[-] variants_of_concern@lemmy.one 2 points 1 year ago

Would be awesome if you could just install an application onto your machine to be self hosted from

[-] Caligvla@lemmy.dbzer0.com 9 points 1 year ago

I mean, you can, that's literally the definition of self hosting.

[-] ninjan@lemmy.mildgrim.com 7 points 1 year ago

While you're 100% correct Lemmy would feel pretty slow running on your normal computer unless you keep it online and powered on 24/7. Since Lemmy fetches new content continuously and being offline causes a big backlog which will take time to process. It also presents a few extra challenges since you need a domain and cert and a home static IP isn't super common which means you need dynamic dns and have to set that up. Any restart where you get a new IP will be even slower since you need your updated A host record to propagate before your Lemmy instance can fetch the backlog. Those issues aside though you could absolutely just run it like any dockerized application on your normal computer.

[-] xtremeownage@lemmyonline.com 5 points 1 year ago

If your lemmy goes offline- there is a good chance it WONT catch-up.

Servers only retry sending content so many times. ActivityPub PUSHES, rather then pulls mostly.

[-] vinnymac@lemmy.world 5 points 1 year ago

Not too bad then, at that point it just depends how they handle log storage on the instance you are visiting.

Thanks for clarifying.

[-] SomeOtherUsername@lemmynsfw.com 13 points 1 year ago

These are upvotes and downvotes. I doubt views are logged anywhere, apart from the webserver.

[-] Wander@yiffit.net 4 points 1 year ago

It's not possible to make votes private is your care about no manipulation happening. Otherwise any self hosted instance could just communicate any made up amount of votes.

[-] WIPocket@lemmy.world 2 points 1 year ago

Cant they? Sure, they would have to make up new users instead of simply saying a number, but what is actually preventing that?

[-] Wander@yiffit.net 3 points 1 year ago

We can monitor actual active users that an instance has. Anything artificial in volumes enough to have an impact would be noticeable in some way to other instances.

[-] lightrush@lemmy.ca 3 points 1 year ago

Can't someone talk ActivityPub directly and do this? If the instance is responsible to authenticate the users, the instance can just directly talk ActivityPub to the rest of the network and tell it users and votes on the fly, without even Lemmy running there.

[-] QuadratureSurfer@lemmy.world 2 points 1 year ago

Given the number of lurkers on Reddit, you would probably end up with a lot of false flags.

[-] lightrush@lemmy.ca 2 points 1 year ago* (last edited 1 year ago)

Without a common authentication scheme that every instance checks against... Probably anyone can do it. I don't know how you'd even approach this. Signed messages via GPG with a common pubkey host? Some blockchain scheme for authentication that obviates the need for a central host? I've no idea.

[-] sauerkraus@lemmy.world 1 points 1 year ago

Yeah anyone can create dummy accounts on an instance.

[-] CmdrShepard@lemmy.one 2 points 1 year ago

E.g. someone using your account to view illegal content in a community you are not a member of, and you being held accountable

Can you explain what you mean here? How would someone else be using your account without your knowledge?

[-] xtremeownage@lemmyonline.com 2 points 1 year ago

Sounds to me like they are trying to make scapegoats for looking at illicit content.

[-] vinnymac@lemmy.world 1 points 1 year ago* (last edited 1 year ago)

You’re reading too much into my comment.

I am a software engineer, and am always thinking of user experiences in my day job. This is simply the scenario that popped into my mind, but many do exist.

Besides hacking, phishing scams, and pranks. Users trick others all the time into viewing content they didn’t mean to view.

My concern isn’t so much that this can happen at all, but rather that if views were public, how it’d be trivial to write software that auto bans users based on those views. Without great moderation tools, and petitioning it wouldn’t scale well.

[-] xtremeownage@lemmyonline.com 1 points 1 year ago

E.g. someone using your account to view illegal content in a community you are not a member of, and you being held accountable

I may have replied to the incorrect content, but, I meant to reply to this one above.

[-] XiELEd@lemmy.fmhy.ml 2 points 1 year ago

Your friend or classmate would be like "You've got games on your phone?" then when you're not looking they'll try to access your social media.

[-] CmdrShepard@lemmy.one 1 points 1 year ago

I suppose, but then they're going to look up illicit content on said account in the hopes of framing you for a crime? That's quite a stretch.

[-] vinnymac@lemmy.world 1 points 1 year ago* (last edited 1 year ago)

I was just providing a scenario that came to mind. I am sure many exist outside the one I described.

Nobody has mentioned crime, so I am not sure where that came from. Accountability can come in many forms, and often on the internet users will be banned or excluded based on their direct actions. However, if views were public, it would be trivial to setup a bot to autoban users from communities before they even join, based solely on what they’ve seen.

[-] vinnymac@lemmy.world 1 points 1 year ago

As I’ve explained elsewhere, this is just what popped into my mind.

Many scenarios exist where you view content you did not intend on viewing.

For example, have you ever been Rick Rolled?

[-] messem10@lemmy.world 0 points 1 year ago
[-] CmdrShepard@lemmy.one 1 points 1 year ago

But that could apply to any online account not something unique to Lemmy.

this post was submitted on 04 Jul 2023
3386 points (96.1% liked)

You Should Know

33379 readers
24 users here now

YSK - for all the things that can make your life easier!

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules (interactive)


Rule 1- All posts must begin with YSK.

All posts must begin with YSK. If you're a Mastodon user, then include YSK after @youshouldknow. This is a community to share tips and tricks that will help you improve your life.



Rule 2- Your post body text must include the reason "Why" YSK:

**In your post's text body, you must include the reason "Why" YSK: It’s helpful for readability, and informs readers about the importance of the content. **



Rule 3- Do not seek mental, medical and professional help here.

Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.



Rule 4- No self promotion or upvote-farming of any kind.

That's it.



Rule 5- No baiting or sealioning or promoting an agenda.

Posts and comments which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.



Rule 6- Regarding non-YSK posts.

Provided it is about the community itself, you may post non-YSK posts using the [META] tag on your post title.



Rule 7- You can't harass or disturb other members.

If you harass or discriminate against any individual member, you will be removed.

If you are a member, sympathizer or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people and you were provably vocal about your hate, then you will be banned on sight.

For further explanation, clarification and feedback about this rule, you may follow this link.



Rule 8- All comments should try to stay relevant to their parent content.



Rule 9- Reposts from other platforms are not allowed.

Let everyone have their own content.



Rule 10- The majority of bots aren't allowed to participate here.

Unless included in our Whitelist for Bots, your bot will not be allowed to participate in this community. To have your bot whitelisted, please contact the moderators for a short review.



Partnered Communities:

You can view our partnered communities list by following this link. To partner with our community and be included, you are free to message the moderators or comment on a pinned post.

Community Moderation

For inquiry on becoming a moderator of this community, you may comment on the pinned post of the time, or simply shoot a message to the current moderators.

Credits

Our icon(masterpiece) was made by @clen15!

founded 2 years ago
MODERATORS