Hi again mateys!
As most of you are probably aware, since the development of Lemvotes Lemmy votes are no longer private for users.
The way lemvotes works right now afaik, is it uses an admin level account to collect voting data from all federated instances, thus enabling the identification of every voter. This method effectively bypasses the guardrails the developers put in place to keep this info more restricted.
However, the developer of lemvotes has recently developed an “opt out” for instances that don’t want their user data collected in this way. So now we have a choice of whether or not to continue. For total transparency, I asked the developer to create an opt out because I wanted to give our users the option to choose that path without defederating from the lemvotes instance.
I think there are (at least) two schools of thought on this topic, which I will attempt to succinctly summarize below:
-
Votes should be kept private to users as they were only ever meant to be viewable by instance admins. Making votes public to everyone via lemvotes, when users have a reasonable expectation of privacy when it comes to voting, is a betrayal of user trust. It also leads to arguments and a lot of unnecessary drama, caused by users trawling though each others’ vote histories.
-
It’s good that voting is transparent and that users have the same tools available as admins to conduct their own investigations into other users. This creates a level playing field and helps hold everyone accountable for their voting patterns.
So now you have some of the context, I’d like to ask our community what are your thoughts on lemvotes… is it a social good or a bad idea?
Personally, I quite like it from an admin perspective - it’s a handy tool, and a pretty cool project. But I also have an expectation (mainly from other forms of social media) that users’ votes should be kept private from other users, so I still think it’s problematic from that perspective.
Proposal: To opt out of lemvotes, so that our users’ voting data is kept (at least somewhat) private.
- To vote FOR the proposal to succeed, upvote the post.
- To vote AGAINST the proposal, downvote the post.
This will be a simple majority vote. Similar to the last governance topic, I have no clue what the instance sentiment is towards lemvotes, so let’s find out! Feel free to add your comments below.
Acknowledged governance topic opened by https://lemmy.dbzer0.com/u/flatworm7591
This is a simple majority vote. The current tally is as follows:
- For:
- Against:
- Local Community: +0.5
- Outsider sentiment: Very Positive
- Total: +0.5
- Percentage: 51.00%
This vote will complete in 3 days
Reminder that this is a pilot process and results of voting are not set in stone.
deleted by creator
deleted by creator
- For:
Against.
Not that I would use it anyway, but I bet it helps in finding bots that manipulate certain posts. R****t has ton of these and they end up undetected, especially with new private profile settings. I’d rather show everyone what I voted for and let them know I am real rather than have bunch of people in threads promoting corpo things as if they are real people.
Not sure how I feel about this. Anyone have a TL/DR on the situation or can point to a good discussion on this?
Against: you depend on the lemvotes instance implementing the opt-out feature, you can just as easily fork it and remove it
I’m in favor of opting out of this, but not because of privacy concerns. Being able to identify how users vote would take away from conversation, as well as discourage users who would rather avoid being dragged into the conversation from voting at all. Sure, the data is already available to those willing to spin up an instance, but the overwhelming majority of people wouldn’t bother. This really should be opt in instead of opt out.
I haven’t looked into it in the slightest, but I was just thinking that it probably wouldn’t even take all that much work to just create a userscript that just pulls that information from kbin or mbin (since it doesn’t even require being logged into to view) and have it easily accessible on every post, no matter which instance you are apart of. Once made public, anyone can install it with a couple clicks.
Wouldn’t it be better for people to assume it is easily accessible information and treat it as such instead of giving themselves a false sense of privacy or thinking that it might protect them from being dragged into a conversation?
Even less work, if I understood correctly, it pulls the info directly from the API. See the comments of Lena here.
I’m against opting out. Whether Lemvotes, vote federation, or the voting system as a whole are good or bad isn’t the matter at hand. This vote is either for or against plugging our collective noses and pretending everything eternally smells like lilacs.
in FAVOR: even if it’s a bit of a facade, it gives off the signal to future devs that privacy is still very much a desired thing, even here, and not an after thought.
Against.
- Does not stop voting being public
- Does nothing for privacy, it doesn’t stop how federation sends the info required to vote
- Useful for moderators in communities where they have haters despite being self contained.
- Useful for users to know when they have a dedicated hater/fan.
Against.
To block it would just further a false sense of privacy. The votes are already public, this just makes that data very slightly more accessible. To pretend otherwise is simply burying our heads in the sand.
Is the div0 bot broken right now?
Yes the voting thread encountered a bug and had crashed, fixed and restarted now.
I don’t know if it’s related, but this user got incorrectly assigned the landlubber tag…
landlubber is just a user who doesn’t have any other flair assignment
Ah, sorry for bothering then, I thougt it’s only for users from other instances :/
Thanks db
I don’t think so, votes are public by nature, and it is useful to be able to find where and how users vote to make judgements based on vote manipulation. I say this as someone who has dealt with huge amounts of vote manipulation in my own communities.
Although the fact they are offering opt outs from instance admins instead of making it censorship/defederation hardened does make me lose faith in the integrity of lemvotes as a service since it no longer will show a majority of votes due to admins opting out.
You can always run your own instance of lemvotes
Its open source.
Against.
Facade of privacy is worse. Opting out won’t do anything, and it might give people false sense of privacy. Let everyone know their votes are public. In my head, voting on lemmy is equivalent of saying “aye” in real life, that is, you are assenting to something publicly.
I in fact consider this to be a feature, it’s helpful in detecting votes manipulation.
Personally I vote against because security through obscurity, isn’t. People who want to get this data for malicious purposes can easily get it. It will only affect people trying to do it causally (i.e. To check if someone is a chud).
I personally find the whole voting system in lemmy flawed but that’s another story.
Yeah I’ve had a change of heart about lemvotes. After reading through all the comments, and realising people only need a kbin or mbin account to see all the votes anyway because of how activitypub works, there is basically no point imo. As many commenters mentioned, opting out of lemvotes will only give the illusion of privacy, and doesn’t address the underlying problem. And given our genAI mods rely on that tool to assess troll accounts, I’m kinda hoping it won’t pass now.
But really if we were to go along with the public voting paradigm that is part of activitypub, then I think Lemmy should really embrace it. Like create a toggle that allows instances to enable public voting, so any user can see who voted on what in the default UI. Might also help reduce vote manipulation once everyone knows its fully public.
Unfortunately displaying the fact that they’re transparent was closed as an issue: https://github.com/LemmyNet/lemmy/issues/4967
If you look through the thread it’s the same as here. Divided between “public is public” and “public should only be public to a technocratic elite” and “I am an ostrich”
🙃
Why flawed? Please elaborate, genuinely curious.
Because up and down don’t provide anywhere enough for signal. I would prefer them be specific positive/negative emojis which would help with filtering and sorting, lead use properly and avoid misunderstandings
Like slashdot?
Ye
alternative: by making it less convenient we provide a signal that the entire voting structure should be canned. wonder if we can patch our instance to always send 0 during federation of data.
Against.
Hi, Lemvotes dev here. As you can imagine, I believe votes on the Fediverse should be public, because that’s just how ActivityPub works. Votes are sent out to every subscribed instance, which can then do whatever it wants with them.
We need to stop pretending votes on Lemmy are private, they’re not. By letting anyone view votes (well, they can do that without Lemvotes by setting up their own instance, Lemvotes just lowers the entry barrier), users can see, for example, who’s serially downvoting their posts or a community’s posts.
Also, I don’t think votes being public ruins Lemmy. They’re public on bluesky and (virtually) no one is complaining. Additionally, platforms like kbin and mbin, which are part of the Fediverse, already make votes public. So even without Lemvotes, people can view the votes on posts. Lemvotes just makes it a bit more convenient.
The only way to fully prevent anyone other than dbzer0 admins from viewing votes is to disable federation.
The way lemvotes works right now afaik, is it uses an admin level account to collect voting data from all federated instances, thus enabling the identification of every voter. This method effectively bypasses the guardrails the developers put in place to keep this info more restricted.
Just a technical nitpick, this is inaccurate. Lemvotes queries the Lemmy database directly, so instance admins can plug it into the db and Lemvotes is running. I was considering making Lemvotes its own Fediverse actor, so that (1) setting up an instance of Lemvotes would be easier, and (2) opting out would be simpler by simply defederating lemvotes.org (or wherever the instance is running), but after working on it for a bit (the results of my work are on this git branch), I realized I don’t know enough about ActivityPub, and that I don’t care enough about Lemvotes or Lemmy to spend my time on this, as I have other projects to work on. In case anyone wants to develop that themselves, they’re free to do so! Lemvotes is open source.
Thanks for adding your voice here Lena, and for clarifying the technical details.
Also, I don’t think votes being public ruins Lemmy. They’re public on bluesky and (virtually) no one is complaining. Additionally, platforms like kbin and mbin, which are part of the Fediverse, already make votes public. So even without Lemvotes, people can view the votes on posts. Lemvotes just makes it a bit more convenient.
Having read through all the comments (thanks everyone), I’m voting against the proposal. But of course we will respect the voting outcome, whichever way it lands.
Thanks for this insight, it swayed me to vote against the proposal. If votes are already semi-public through federation I’d rather it be transparently public than giving the illusion of privacy.
what we need to do is to stop federating the data. not make it more accessible.
I’m not exactly sure what you want here.
-
If you’d like votes to not be federated at all, that would mean instances would only have the local count of votes (i.e. only votes cast by users from that instance), which brings little benefit, and would make small instances unusable.
-
If you’d like only vote counts to be federated, but not who cast the votes, that would allow people to make accounts spamming votes, with admins from other instances being unable to figure out where the spurious votes are coming from. As in the previous example, it would bring little benefit (votes would be private, sure), but it would cripple moderation tools and make post and comment ranking untrustworthy because of potential (virtually) undetectable bots.
you dont need to federate vote specifics for moderation. that can all be handled locally. as such only federating counts is sufficient.
-
what is this supposed to be
/0 bot replies to all participants in a dbzer0 vote, this one is a landlubber (non-dbzer0 user) each user has flairs that weigh the strength of their vote/their opinion.
A drunken sailor? I think anyways
Why did it decide to reply to me lol
It replies to all top-level comments