I thought r/piracy was dead but I see is very active, I don’t know if mods changed or something though. Where do you guys think is best to ask questions?
Probably along the lines of federated user activity, so things like upvotes/downvotes etc and subscriptions to a community being federated to the relevant server(s)
So even if you’re lurking just voting on content, someone could setup a lemmy server, sub to a bunch of communities, and theoretically look at incoming activitypub updates from those communities for your activity I think
You up voted “how did “step” porn become so popular when we did such a good job keeping scat and insest porn out of the mainstream for so long” and “I didn’t forget your birthday either.”
And down voted “seamless seeking”
I can say you’re not subscribed to the like two communities on my instance. Subscription (follows) mostly only go to the instance hosting the community in question. Voting goes everywhere though.
Oh yes, that’s an issue with Lemmy. Edits don’t get federated, they stay on the instance. I didn’t knew but it makes sense that it’s the same with votes.
I believe the issue is that to keep every updated you’d need a far more complex system, like streaming the changes or CRDTs.
Assuming that is really an issue (depends on who you are, what you’re doing, and the motivation of the actor mounting such spying infrastructure), how is it any different on Reddit? First, being closed source and everything, we can’t rule out that easier and large scale logging isn’t already implemented. Secondly, such actor would probably just pay the API and scrape the same data if not with more details. It would also get extra metadata from brokers, etc.
Ultimately, if you want privacy, I agree that federation is undesired. That’s why there are Lemmy instances that block all other instances by default. AFAIK those were from right extremists and pesos, at least judging by the name of their URLs.
Well, on Reddit any party can pay the API prices that are needed to scrape data. So, the paywall. I guess it’s some measure… But if you are being tracked by such an actor, your threat model can’t really include reddit… It’s defeating the purpose. All this is discussion on air.
Reddit doesn’t provide nearly the same level of granular data that Lemmy does via the API or any publicly available channels. While we can’t verify whether stuff like upvote data is sent or sold to data brokers, we do know that Lemmy, by design, gives it to literally anyone who wants it.
The others in this comment thread have covered the potential threat vector fairly thoroughly. It’s not something I’m particularly worried about at the moment, but it is something that I try to keep awareness of for the future.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !piracy@lemmy.dbzer0.com
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
I’m inclined to say screw Reddit. Lemmy may be less private overall but at least we have more control over things in the Fedi.
How is it “less” private? Because the API isn’t a paywall, sure. But… I don’t know what’s your perspective, really.
Probably along the lines of federated user activity, so things like upvotes/downvotes etc and subscriptions to a community being federated to the relevant server(s)
So even if you’re lurking just voting on content, someone could setup a lemmy server, sub to a bunch of communities, and theoretically look at incoming activitypub updates from those communities for your activity I think
I don’t think it sends info about subscriptions and voter identities to other servers, or am I wrong?
You up voted “how did “step” porn become so popular when we did such a good job keeping scat and insest porn out of the mainstream for so long” and “I didn’t forget your birthday either.”
And down voted “seamless seeking”
I can say you’re not subscribed to the like two communities on my instance. Subscription (follows) mostly only go to the instance hosting the community in question. Voting goes everywhere though.
Nice
I tried to look more into this and I guess that everything goes out identifiable in some way.
I looked up what that post is, and it ain’t downvoted. Might have accidentally hit it, and then un-disliked, without that getting federated.
Oh yes, that’s an issue with Lemmy. Edits don’t get federated, they stay on the instance. I didn’t knew but it makes sense that it’s the same with votes.
I believe the issue is that to keep every updated you’d need a far more complex system, like streaming the changes or CRDTs.
Wait, edits really don’t get federated? huh til.
Assuming that is really an issue (depends on who you are, what you’re doing, and the motivation of the actor mounting such spying infrastructure), how is it any different on Reddit? First, being closed source and everything, we can’t rule out that easier and large scale logging isn’t already implemented. Secondly, such actor would probably just pay the API and scrape the same data if not with more details. It would also get extra metadata from brokers, etc.
Ultimately, if you want privacy, I agree that federation is undesired. That’s why there are Lemmy instances that block all other instances by default. AFAIK those were from right extremists and pesos, at least judging by the name of their URLs.
The difference here is that on Reddit, only 1 party has access to your info. On Lemmy, it’s any party who has an instance that federates with yours.
On one hand everyone can access it, on the other, 1 party can sell it.
Well, on Reddit any party can pay the API prices that are needed to scrape data. So, the paywall. I guess it’s some measure… But if you are being tracked by such an actor, your threat model can’t really include reddit… It’s defeating the purpose. All this is discussion on air.
Reddit doesn’t provide nearly the same level of granular data that Lemmy does via the API or any publicly available channels. While we can’t verify whether stuff like upvote data is sent or sold to data brokers, we do know that Lemmy, by design, gives it to literally anyone who wants it.
The others in this comment thread have covered the potential threat vector fairly thoroughly. It’s not something I’m particularly worried about at the moment, but it is something that I try to keep awareness of for the future.