Hi again mateys!

As most of you are probably aware, since the development of Lemvotes Lemmy votes are no longer private for users.

The way lemvotes works right now afaik, is it uses an admin level account to collect voting data from all federated instances, thus enabling the identification of every voter. This method effectively bypasses the guardrails the developers put in place to keep this info more restricted.

However, the developer of lemvotes has recently developed an “opt out” for instances that don’t want their user data collected in this way. So now we have a choice of whether or not to continue. For total transparency, I asked the developer to create an opt out because I wanted to give our users the option to choose that path without defederating from the lemvotes instance.

I think there are (at least) two schools of thought on this topic, which I will attempt to succinctly summarize below:

  1. Votes should be kept private to users as they were only ever meant to be viewable by instance admins. Making votes public to everyone via lemvotes, when users have a reasonable expectation of privacy when it comes to voting, is a betrayal of user trust. It also leads to arguments and a lot of unnecessary drama, caused by users trawling though each others’ vote histories.

  2. It’s good that voting is transparent and that users have the same tools available as admins to conduct their own investigations into other users. This creates a level playing field and helps hold everyone accountable for their voting patterns.

So now you have some of the context, I’d like to ask our community what are your thoughts on lemvotes… is it a social good or a bad idea?

Personally, I quite like it from an admin perspective - it’s a handy tool, and a pretty cool project. But I also have an expectation (mainly from other forms of social media) that users’ votes should be kept private from other users, so I still think it’s problematic from that perspective.


Proposal: To opt out of lemvotes, so that our users’ voting data is kept (at least somewhat) private.

  • To vote FOR the proposal to succeed, upvote the post.
  • To vote AGAINST the proposal, downvote the post.

This will be a simple majority vote. Similar to the last governance topic, I have no clue what the instance sentiment is towards lemvotes, so let’s find out! Feel free to add your comments below.

  • /0 Bot@lemmy.dbzer0.com
    shield
    MB
    link
    fedilink
    arrow-up
    24
    arrow-down
    2
    ·
    edit-2
    7 minutes ago

    Acknowledged governance topic opened by https://lemmy.dbzer0.com/u/flatworm7591 Early Bird: a parrot, orangered colors Jolly Roger: an icon of pirate jolly roger skull wearing a hat, in orange-red, black and white colors A book with a loaf of bread in the cover  in orange-red, black and white colors Deck Hand: An icon of anchor crossed with two staves in orange-red, black and white colors First Mate: a pirate ship's steering wheel, orangered color

    This is a simple majority vote. The current tally is as follows:

    • For: First Mate: a pirate ship's steering wheel, orangered color Vouched: a minimalist compass icon. Orangered color Vouched: a minimalist compass icon. Orangered color Deck Hand: An icon of anchor crossed with two staves in orange-red, black and white colors Salty Dog: An icon of two crossed cutlasses with a skull in the center in orange-red, black and white colors First Mate: a pirate ship's steering wheel, orangered color Powder Monkey: An icon of powder barrel in orange-red, black and white colors Deck Hand: An icon of anchor crossed with two staves in orange-red, black and white colors Powder Monkey: An icon of powder barrel in orange-red, black and white colors Deck Hand: An icon of anchor crossed with two staves in orange-red, black and white colors
    • Against: Vouched: a minimalist compass icon. Orangered color MVP: a star icon, in orange-red, black and white colors Threadiverse Enjoyer: An icon of a doubloon with a black hole in the center in orange-red, black and white colors Vouched: a minimalist compass icon. Orangered color First Mate: a pirate ship's steering wheel, orangered color Vouched: a minimalist compass icon. Orangered color First Mate: a pirate ship's steering wheel, orangered color Threadiverse Enjoyer: An icon of a doubloon with a black hole in the center in orange-red, black and white colors Vouched: a minimalist compass icon. Orangered color Threadiverse Enjoyer: An icon of a doubloon with a black hole in the center in orange-red, black and white colors
    • Local Community: +0.5
    • Outsider sentiment: Very Positive
    • Total: +0.5
    • Percentage: 51.00%

    This vote will complete in 3 days


    Reminder that this is a pilot process and results of voting are not set in stone.

  • imetators@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    2
    ·
    8 hours ago

    Against.

    Not that I would use it anyway, but I bet it helps in finding bots that manipulate certain posts. R****t has ton of these and they end up undetected, especially with new private profile settings. I’d rather show everyone what I voted for and let them know I am real rather than have bunch of people in threads promoting corpo things as if they are real people.

  • potosi@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    3
    ·
    18 hours ago

    Against: you depend on the lemvotes instance implementing the opt-out feature, you can just as easily fork it and remove it

  • TurtleMelon@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    2
    ·
    19 hours ago

    I’m in favor of opting out of this, but not because of privacy concerns. Being able to identify how users vote would take away from conversation, as well as discourage users who would rather avoid being dragged into the conversation from voting at all. Sure, the data is already available to those willing to spin up an instance, but the overwhelming majority of people wouldn’t bother. This really should be opt in instead of opt out.

    • Izme@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      10 hours ago

      I haven’t looked into it in the slightest, but I was just thinking that it probably wouldn’t even take all that much work to just create a userscript that just pulls that information from kbin or mbin (since it doesn’t even require being logged into to view) and have it easily accessible on every post, no matter which instance you are apart of. Once made public, anyone can install it with a couple clicks.

      Wouldn’t it be better for people to assume it is easily accessible information and treat it as such instead of giving themselves a false sense of privacy or thinking that it might protect them from being dragged into a conversation?

  • lemonmelon@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    2 days ago

    I’m against opting out. Whether Lemvotes, vote federation, or the voting system as a whole are good or bad isn’t the matter at hand. This vote is either for or against plugging our collective noses and pretending everything eternally smells like lilacs.

  • dysprosium@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    10
    ·
    2 days ago

    in FAVOR: even if it’s a bit of a facade, it gives off the signal to future devs that privacy is still very much a desired thing, even here, and not an after thought.

  • Eugene V. Debs' Ghost@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    23
    ·
    2 days ago

    Against.

    • Does not stop voting being public
    • Does nothing for privacy, it doesn’t stop how federation sends the info required to vote
    • Useful for moderators in communities where they have haters despite being self contained.
    • Useful for users to know when they have a dedicated hater/fan.
  • KairuByte@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    19
    ·
    2 days ago

    Against.

    To block it would just further a false sense of privacy. The votes are already public, this just makes that data very slightly more accessible. To pretend otherwise is simply burying our heads in the sand.

  • I don’t think so, votes are public by nature, and it is useful to be able to find where and how users vote to make judgements based on vote manipulation. I say this as someone who has dealt with huge amounts of vote manipulation in my own communities.

    Although the fact they are offering opt outs from instance admins instead of making it censorship/defederation hardened does make me lose faith in the integrity of lemvotes as a service since it no longer will show a majority of votes due to admins opting out.

  • anar@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    20
    ·
    3 days ago

    Against.

    Facade of privacy is worse. Opting out won’t do anything, and it might give people false sense of privacy. Let everyone know their votes are public. In my head, voting on lemmy is equivalent of saying “aye” in real life, that is, you are assenting to something publicly.

    I in fact consider this to be a feature, it’s helpful in detecting votes manipulation.

  • db0@lemmy.dbzer0.comM
    link
    fedilink
    arrow-up
    47
    arrow-down
    1
    ·
    3 days ago

    Personally I vote against because security through obscurity, isn’t. People who want to get this data for malicious purposes can easily get it. It will only affect people trying to do it causally (i.e. To check if someone is a chud).

    I personally find the whole voting system in lemmy flawed but that’s another story.

    • Unruffled [they/them]@lemmy.dbzer0.comOP
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 days ago

      Yeah I’ve had a change of heart about lemvotes. After reading through all the comments, and realising people only need a kbin or mbin account to see all the votes anyway because of how activitypub works, there is basically no point imo. As many commenters mentioned, opting out of lemvotes will only give the illusion of privacy, and doesn’t address the underlying problem. And given our genAI mods rely on that tool to assess troll accounts, I’m kinda hoping it won’t pass now.

      But really if we were to go along with the public voting paradigm that is part of activitypub, then I think Lemmy should really embrace it. Like create a toggle that allows instances to enable public voting, so any user can see who voted on what in the default UI. Might also help reduce vote manipulation once everyone knows its fully public.

    • jatone@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      alternative: by making it less convenient we provide a signal that the entire voting structure should be canned. wonder if we can patch our instance to always send 0 during federation of data.

  • Lena@gregtech.eu
    link
    fedilink
    English
    arrow-up
    61
    arrow-down
    3
    ·
    edit-2
    3 days ago

    Hi, Lemvotes dev here. As you can imagine, I believe votes on the Fediverse should be public, because that’s just how ActivityPub works. Votes are sent out to every subscribed instance, which can then do whatever it wants with them.

    We need to stop pretending votes on Lemmy are private, they’re not. By letting anyone view votes (well, they can do that without Lemvotes by setting up their own instance, Lemvotes just lowers the entry barrier), users can see, for example, who’s serially downvoting their posts or a community’s posts.

    Also, I don’t think votes being public ruins Lemmy. They’re public on bluesky and (virtually) no one is complaining. Additionally, platforms like kbin and mbin, which are part of the Fediverse, already make votes public. So even without Lemvotes, people can view the votes on posts. Lemvotes just makes it a bit more convenient.

    The only way to fully prevent anyone other than dbzer0 admins from viewing votes is to disable federation.

    The way lemvotes works right now afaik, is it uses an admin level account to collect voting data from all federated instances, thus enabling the identification of every voter. This method effectively bypasses the guardrails the developers put in place to keep this info more restricted.

    Just a technical nitpick, this is inaccurate. Lemvotes queries the Lemmy database directly, so instance admins can plug it into the db and Lemvotes is running. I was considering making Lemvotes its own Fediverse actor, so that (1) setting up an instance of Lemvotes would be easier, and (2) opting out would be simpler by simply defederating lemvotes.org (or wherever the instance is running), but after working on it for a bit (the results of my work are on this git branch), I realized I don’t know enough about ActivityPub, and that I don’t care enough about Lemvotes or Lemmy to spend my time on this, as I have other projects to work on. In case anyone wants to develop that themselves, they’re free to do so! Lemvotes is open source.

    • Unruffled [they/them]@lemmy.dbzer0.comOP
      link
      fedilink
      arrow-up
      12
      ·
      3 days ago

      Thanks for adding your voice here Lena, and for clarifying the technical details.

      Also, I don’t think votes being public ruins Lemmy. They’re public on bluesky and (virtually) no one is complaining. Additionally, platforms like kbin and mbin, which are part of the Fediverse, already make votes public. So even without Lemvotes, people can view the votes on posts. Lemvotes just makes it a bit more convenient.

      Having read through all the comments (thanks everyone), I’m voting against the proposal. But of course we will respect the voting outcome, whichever way it lands.

    • disobey2623@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      32
      arrow-down
      1
      ·
      edit-2
      3 days ago

      Thanks for this insight, it swayed me to vote against the proposal. If votes are already semi-public through federation I’d rather it be transparently public than giving the illusion of privacy.

      • Lena@gregtech.eu
        link
        fedilink
        English
        arrow-up
        6
        ·
        2 days ago

        I’m not exactly sure what you want here.

        1. If you’d like votes to not be federated at all, that would mean instances would only have the local count of votes (i.e. only votes cast by users from that instance), which brings little benefit, and would make small instances unusable.

        2. If you’d like only vote counts to be federated, but not who cast the votes, that would allow people to make accounts spamming votes, with admins from other instances being unable to figure out where the spurious votes are coming from. As in the previous example, it would bring little benefit (votes would be private, sure), but it would cripple moderation tools and make post and comment ranking untrustworthy because of potential (virtually) undetectable bots.

        • jatone@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          3
          ·
          2 days ago

          you dont need to federate vote specifics for moderation. that can all be handled locally. as such only federating counts is sufficient.