I have been working on Lemvotes, a tool to check who voted on a Lemmy post. In this blog post, I will describe how it works and the ethics of such a tool.
  • Dessalines@lemmy.ml
    31·
    22 hours ago

    I want to remind everyone that since users overwhelmingly don’t want their votes snooped on (for good reason), we will never add anything like this inside lemmy, lemmy-ui, or jerboa.

    While there’s nothing we can do to snoopers making tools like this, it requires a lemmy server admin login.

    If you know of servers which are giving admin access to this tool, let us know, so we can add it to our blocklist.

    • catloaf@lemm.eeEnglish
      6·
      21 hours ago

      Maybe federation should be based on allowlisting, instead of allowing instances by default.

  • drspod@lemmy.ml
    48·
    1 day ago

    I will describe how it works and the ethics of such a tool.

    Where in this post do you describe the ethics of such a tool?

    non-technical users believe that their votes are private, which is far from the truth. This attitude could potentially lead to harassment of Lemmings (yes, that’s what we Lemmy users call ourselves) for upvoting a particular post. Lemvotes makes it clear that votes are not private, which could help bring a more accurate picture of the way votes work on Lemmy to its users.

    This is what needs discussion. It is this tool which will lead to harassment due to the way someone votes. And the threat or spectre of harassment will lead to the Chilling Effect, ie. self-censorship (of voting) to avoid harassment.

    The chilling effect this causes will make communities even more like echo-chambers, as dissent will be pre-emptively squashed.

    Without a tool like this existing, people have to go out of their way to find out this information (setting up their own instance, or finding someone who already does this surreptitiously). By making such a tool available to the lemmy community at large, you make it extremely easy for anyone to do this, and so the chance of harassment occurring is much higher.

    You might think you’re being clever, or on some kind of crusade to educate the uneducated. But actually your actions are making this (community-built) platform worse. Compare your actions to releasing a 0-day exploit for a security vulnerability instead of responsibly disclosing. It doesn’t help, it just causes chaos until the people who do the actual work can figure out a solution.

    Think about how your tool existing now changes the dynamic of Lemmy as a whole. Is it better, or worse? How would you actually solve this problem in Lemmy, instead of exploiting it?

    • CaptDust@sh.itjust.works
      23·
      1 day ago

      Kbin/mbin already surfaces votes, third party apps can easily show them as well. This is an intrinsic behavior of activitypub and people should know how easy it is to expose that data.

    • ReversalHatchery@beehaw.orgEnglish
      4·
      24 hours ago

      This is what needs discussion. It is this tool which will lead to harassment due to the way someone votes.

      wrong. voting users are already visible through other services, like mbin. and the information is already there, those who are really interested are already scraping it, this just makes it more accessible and also serves as an eye opener

    • Aa!@lemmy.world
      3·
      1 day ago

      This is already a thing that happens currently. Some admins/moderators don’t like being downvoted and ban people for “vote manipulation” because they vote on things in their feed.

      It is leading to exactly that, where people are worried that using the voting system as intended will lead to exclusion from participation in some communities.

    • hansolo@lemm.eeEnglish
      2·
      1 day ago

      The easy solution is to stop engagement on Lemmy. Cool. Cool cool cool.

    • Simon 𐕣he 🪨 Johnson@lemmy.ml
      1·
      1 day ago

      The chilling effect this causes will make communities even more like echo-chambers, as dissent will be pre-emptively squashed.

      If only there was a tool that allowed you to host an instance on a federated network that allowed you to make your own community and control how the rest of the network can interact with it. Why has nobody built this???

  • Global_Liberty@lemmy.mlEnglish
    12·
    1 day ago

    Votes should be anonymous.

    This is the first step toward monetizing Lemmy for multinationals.

    • TootSweet@lemmy.worldEnglish
      12·
      24 hours ago

      Votes should be anonymous.

      I tend to agree, but the fact is that they aren’t anonymous. This tool just exposes the already-existing fact that Lemmy expressly does not guarantee anonymity for votes. The solution isn’t to not for the poster to not publish this tool. Believe me, such tools already exist in private even if none other than this one are published. Publishing this one only democratizes access to that information. (And not entirely, I don’t think. From what I’m seeing on the page, it looks like it still requires an admin account on an instance. Update: Actually, I’m not sure if it requires an admin account or not. Either way, though.) The solution is (if it’s possible) to make Lemmy itself protect voters’ anonymity.

      The reason why instances know who has up/down voted things (rather than only keeping an anonymized “total” for each post/comment) is so it can prevent double-voting.

      Maybe instead of usernames, the instances could store/trade… salted hashes of the usernames where the salt is the title or unique identifier of the post/comment being voted on? It wouldn’t be perfect, but it would allow the instance to figure out whether the currently-viewing or currently-voting user has already voted while also making it harder for anyone else to get that information. About the only way a tool could tell you exhaustively who had voted if that were how things worked that I can think of off hand is to try every username on Lemmy one-by-one until all the votes were accounted for.

      (Of course, malicious instances could still keep track of usernames or unique user ids who up/downvoted, but only on the instance on which the vote was cast. Also, one downside of this approach would be increased CPU usage. How much? Not sure. It might be trivial. Or maybe not. Dunno.)

      And there may be much better ways to do this. I haven’t really thought about it much. I also haven’t checked whether there is an open ticket asking for improved anonymity for votes already.

      (Also, full disclosure, all of the above was written after only an extremely brief skim of the linked page.)

      (One more edit. Something IHawkMike said led me to realize that the scheme I described above would allow instances to manipulate votes by just inventing hashes. Like, grabbing 512 bits of data from /dev/urandom and giving it to other instances as if it was a hash of a username or user id when, in fact, it’s not a hash of anything. Other instances wouldn’t be able to easily tell that it wasn’t the hash of a valid user id. I haven’t thought how to go about solving that yet. Maybe if it occurs to me, I’ll update this post.)

      • IHawkMike@lemmy.world
        8·
        24 hours ago

        Yep this is exactly right. Too many people are unaware that their votes are not anonymous on Lemmy and blocking the public tool only helps the bad guys who already know this. I’ve always thought this was a major weakness in Lemmy but I don’t have a solution myself without some other major drawback.

        I think probably votes should be anonymized or batched between servers so that only your instance’s admins can see individual votes and you just have to trust the instances you federate with that they aren’t pulling any shenanigans or otherwise defederate. That’s not an easy problem to solve, but it’s not like it’s not currently possible to manipulate votes with a federated server, it would just be harder to detect. Regardless I think the need for privacy wins here.

      • Redkey@programming.dev
        2·
        23 hours ago

        Maybe instead of usernames, the instances could store/trade… salted hashes of the usernames where the salt is the title or unique identifier of the post/comment being voted on?

        I didn’t have time to reply earlier, but I was thinking the same thing, except with the extra step of replacing the username with a unique user identifier randomly generated at signup by the user’s instance and kept secret.

        I wonder if there’s a way to prevent people from even knowing that two different votes came from the same user.

        • TootSweet@lemmy.worldEnglish
          1·
          22 hours ago

          I wonder if there’s a way to prevent people from even knowing that two different votes came from the same user.

          What I outlined above should prevent anyone from knowing two different votes came from the same user… without specifically trying that user’s id on each. That’s what the salt (the comment/post id) is for.

  • humanspiral@lemmy.ca
    9·
    1 day ago

    Having access to information about who voted on a post would allow people to locate brigading1 efforts and detect bots spamming down/upvotes on posts. Currently, only admins can access this information, which makes it harder for users to report such behaviour to them.

    Or provide the empire controlling most of the bots, extra ammunition to have AI determine a social credit score for everyone. Winner gets a free trip to El Salvador.

    • ReversalHatchery@beehaw.orgEnglish
      4·
      24 hours ago

      I find this whole thing weird because some federating platforms (like mbin I think) already show voting users publicly

        • Bogus007@lemm.ee
          1·
          17 hours ago

          IMHO the entire voting thing is useless. If you don’t like a post, don’t read it. If the post is aggressive and very harmful (racist, fascist), inform the admin to remove it. If the post is interesting, read it and mark as done. So, why voting? In Reddit and even here on Lemmy, I saw critical comments - which I myself sometimes do not like, but did not downvote - that were heavily downvoted by others (though it was just a critical view). What does this mean? That a user has to play according to the rules of the masses? That he/she cannot express his/her different views? If you don’t like or think a comment is weirded, ask why. Engage the person in a discussion (which may be promoted by the lack of a voting system). Perhaps you can convince him/her, or perhaps the other user can show you a different perspective, which may turn out to be a bit extreme, but not that wrong either. Right?

  • simple@lemm.eeEnglish
    7·
    1 day ago

    FYI it fails to fetch votes if you don’t include https:// at the start.

      • UndercoverUlrikHD@programming.dev
        3·
        21 hours ago

        Huh, I missed that when skimming through the post and source code

        I am considering implementing my own ActivityPub server to remove the dependency on a Lemmy server to get votes,

        I saw that part and misunderstood it as if he didn’t run an instance.
        Thanks for pointing it out!

  • nocturne@sopuli.xyz
    2·
    1 day ago

    I have been working on Lemvotes, a tool to check who voted on a Lemmy post. In this blog post, I will describe how it works and the ethics of such a tool.

  • dumnezero@piefed.socialEnglish
    1·
    1 day ago

    Worked for me, but this needs a lot of development to be a useful tool for analysis, and maybe a browser extension.

    • Lena@gregtech.euOPEnglish
      1·
      1 day ago

      Which features would you like to see in Lemvotes?

      I have no idea at all how to make a browser extension, I can try I guess but that’s of lower priority, as I will try to have it use activitypub directly.