Lemmy votes ARE public, should they be anonymous?

Wait a minute, so any admin can see which posts do I upvote/downvote?

I always thought anonymous voting was preferable, or at least non-public. I don't want "why did you downvote me bro!?"-arguments to occur, and I don't want to know who approves of my comments or not. I think thinking of votes as an amorphous blob representing general public opinion on Lemmy is preferable to getting into the weeds of who exactly likes your posts and comments.

We could also have "karma" on Lemmy, but while technically tracked the environment is better off without it being public in my opinion. I view voting records similarly.

If botting becomes enough of an issue that regular users need to report vote manipulation bots I'll be fine with conceding my stance.

Should the Lemmy devs create a way to make the votes anonymous?

I'm not sure if there is a good way to have the content federate anonymously. Even if there was, it would be a vector for spam.

Vote manipulation is a growing problem on Reddit. It's only getting worse with all the AI spam bots and they don't have an incentive to stop it. Why trust a review on Reddit if bots are upvoting/downvoting on behalf of a company, or worse what happens in news communities when a well funded group wants to change perspectives.

Admins need to know if the votes/likes coming in are legitimate, else they should block them. It's too easy to abuse anonymous votes to affect how content is ranked.

I left a long comment in the other thread which I will link in a moment, but I think either

1. We keep the current setup, but we put in more effort to make new users aware that vote records are visible to admins/mods
2. We make it public for everyone and take steps to deal with the new issues that it could cause

Other comment on the benefits/issues: https://lemmy.ca/comment/11097046

"If you have nothing to hide then you have nothing to fear."

Given the strong presence of the privacy community on Lemmy, I have to say that I'm a bit shocked to hear so many in these discussions chiming in to support voting transparency.

I'm on board with the idea of using ring signatures to validate the legitimacy of a vote and moderating spammers based on metadata.

Or, for something (potentially) easier to implement, aggregating vote tallies at the instance level (votes visible to your instance admin and mods) and federating the votes anonymously by instance, so you might see something like:

• lemmy.world: 9 up, 2 down
• discuss.tchncs.de: 3 up, 4 down
• Etc

Up/down votes are the method of community moderation that sets Reddit apart from many other platforms. If the Lemmy community is trying to capture some of that magic, which is good for both highlighting gems AND burying turds, radical transparency isn't the path to get there.

In fact, I'd argue that the secret ballot has already been thoroughly discussed and tested throughout history and there are plenty of legitimate examples of why it would be better if they were more secret than they are today.

Many people have brought up the idea of brigading, but would this truly get better if votes are public? Is it hard to imagine noticing that an account you generally trust has voted and matching their vote, even subconsciously?

For those who feel that they aren't able to post on Lemmy because downvotes make you feel sad, my feeling is that if you make posts in a community and they consistently get down voted to oblivion, you're in the wrong place. The people in that community don't value your contributions, and you should find another place to share them. This is the system working as intended and the mods should be thankful that such a system has been implemented.

The last point I'll make is about the potential for a chilling effect - making users less likely to interact with a post in any way due to a fear of retaliation. Look - if you're looking for a platform where all of your activity is public, those are out there. Why should we make Lemmy look just like every other platform?

Always in favor of taking power from mods that they can abuse and simply do not need.

The 1 "You think you can come into MY instance, and downvote ME?" post I read was 1 too many.

I would rather vote identities being blocked from scraping. I don't care about other users or admins. I would rather that level of information be unavailable to outside commercial sources, especially any timings based metadata that could be used to derive dwell time and other psychological metrics.

For anyone interested, there are a few papers on cryptographically secure voting, where both voter anonymity and election integrity are preserved.

Most designs consider three separate entities, where if you accumulate the information between those entities you would be able to identify a voter and his vote, but each entity on itself does not hold enough information.

They should just stay mostly hidden as they are now. I was harassed 3 times while using kbin for my voting habits. When I brought it up to ernest, him and mostly everyone else defended it, even though at the time I was actively being annoyed by someone.

It'll make less people vote in the long run and will scare people off.

Nothing worse than hopping on something I do for leisure to realize that thread I voted on a week ago has now come back to bite me in the ass because the OP decided to go on a crusade and harass everyone that downvoted them.

There is enough drama as it is. This will just open the door to shadowbanning and stalking and other horrors we have escaped by leaving reddit. It's enough that it's party available on kbin.

With the current way that ActivityPub works, this isn’t really possible. Every vote needs to be signed by some real user; if that changed such that anonymous votes were accepted then there’s nothing to stop any random person from adding 5 or 5,000 anonymous votes.

When I first signed up for reddit, the upvotes and downvotes were not only separately tallied, but also showed the usernames of the most recent people who did them if you hovered over the button. Then very shortly after that they changed it so that it made votes private by default, and you could override it in the settings, but almost nobody went to check that box back on. Eventually, they completely removed that feature around the time upvotes and downvotes were combined into one. which along with vote fuzzing was one of the worst changes to reddit comments, imo.

Lemmy feels like old reddit right now, which is a great spot to be in. I don't think you necessarily need public vote info, but maybe it could be enabled on a per-community basis? I can see some communities like politics not wanting to add additional drama to the equation while other more content driven communities might enjoy knowing who was giving the feedback.

1 I had assumed votes were private 2 If I don’t hear soon that votes are private, I’ll simply stop participating and return to lurking. I’ll eventually just wander off to the next thing that doesn’t expose my votes to potential bots and/or abusive actors.

On Kbin the votes are 100% public for anyone. I've migrated to Lemmy after the frequent server issues with Kbin and I miss that part dearly. It was very easy to gauge whether someone was engaging in a good or bad faith discussion by checking the votes within a discussion. That being said, personally I'm very light on my downvotes, and I can see how someone more trigger-happy would see it as worrying. Personally I see the vote transparency as healthy though.

Wouldn’t it be easier to leave it as an option for each user on Lemmy?

If users want anonymity, let them have it. If they want to share their vote, let them do that. Forcing one option on others without the voice of the usually silent majority isn’t going to fix anything, it’s just going to scare some people away or start posts requesting it private again; or optional.

Not to mention, using this method you will quickly see how many users really wanted this option based on how many leave privacy enabled or disabled, instead of listening to a current vocal minority.

Keep the Fediverse bot- and troll-free.

The whole idea of being able to behave like a shithead without accountability needs to go.

I'm at the completely opposite end of the spectrum of most people, they should be public to all. It makes it clear whether the guy downvoting you is doing so maliciously or as a non-participant. Same for upvotes. Otherwise, just get rid of it and find some better mechanism. The people saying "NO!" or that they should be anonymous don't really have a reason, your comment history is already giving you away and no one has a problem with that.

The worst thing public upvotes/downvotes might lead to are the same things your comments are already profiled for by the same people that would and perhaps a random getting mad at your downvote or upvote and voting back, which doesn't matter that much with the current karma system. The benefits, however, are a clear vision of where those upvotes and downvotes are coming from, without it you are a blind person in a social networks but with it you can tell who is interacting with you and you can investigate why and even make judgement calls because you can see whether they interact like a jerk.

No drama witch hunts, accountability for the way you are interacting online, the the benefits outweighs the drawbacks, but people don't want it because they feel insecure about it. I specially favor it because it could be a first step for a form of crowdsourced moderation (speculated on it here), where you can choose the people you think are voting comments to your taste to eventually have a select group large enough to determine which should show up first and which shouldn't show at all, and it could be completely complementary to existing systems. Don't want to see "yes, I agree" comments sorting as the most relevant? You might choose people who do not upvote but have engaged with the rest of the thread for comments you consider more informative.

No one from kbin/mbin instances can check out the downvotes you make, since this attitude has been so widespread many don't report it to those instances. They can see people who upvote, and the sky hasn't fallen because of it. Anonymity largely only helps the minority making the drama remain hidden.

No, there is no real need. An account is already pseudo-anonymous. Full anonymity adds no real value beyond making it easier to manipulate vote tallies with bot accounts undetected.

edit: As a side note, this is one of the more transparent social media communities. It's not terribly privacy-oriented in general. The enhanced transparency is part of its appeal.

One situation I've repeatedly faced that could be solved by fully public voting is having those debates when someone puts a single downvote on my opponent's comments.

Silly, yes, but it may look like I am downvoting a person to aggravate. I am not, it's not me! :D

Sounds like opinions are pretty mixed. Maybe we should put it to a vote.

But then how do we decide if that vote should be public or not...

Its best if the rules are the same for anyone, but public votes is something power hungry mods will eventually abuse. If you dare upvote the wrong post you will get banned.

Votes should be transparent for everyone. Right now the system assumes that mods/admins are somehow inherently more responsible than the average user, but well, just look at the garbage clusterfuck admin/mod teams of certain instances. You're telling me you're gonna trust these people with this information and not everyone else? Get the fuck outta here.

Yes they should, unfortunately I don't think that's technically possible with the fediverse model as the servers have to communicate that info over Activity pub, at least that's my understanding of it.

To me the anonymity of voting is the problem, so the solution is to make them public for all, not to find ways of making them more private.

I just got insulted & falsely accused of downvoting someone yesterday. I had chose to give them a second downvote to prove that the first one didn't come from my account. I admit, I have always been curious about the specific sources of votes but If I'm being completely honest, I don't think actually knowing would leave me better off. I think people already read too much into these votes in the first place and it gives the ego-maniacs too much to obsess over.

I am the admin of a website where we have a place where our users can post custom content and rate the content of others.

We have discussed how it works and should work many times and came to the conclusion that we'd never want it to be public. Any report of abuse will be checked by the website owner directly in the database and even admins don't have full access. Everybody tries to stay as far away from the personal ratings as possible.

We also noticed that it would be a lot more fragile when there are not many voters. A whole group that is negative about something wouldn't get as much harassment as a single person having a unique opinion.

On our website we have a comment section that isn't anonymous, and we even noticed that people often don't post something negative when it would be obvious that they are the only one who has voted/rated something. ("Negative" is almost always constructive in our case)

These are just a few things that I think add to this discussion.

How about pseudonymous as a compromise? Votes could be publicly federated but tied to some uuid instead of the username. That way you still have the same anti spam ability (can see that a user upvoted these things from this instance at this time) but can't tie it directly to comments or actual user accounts without some extra osint.

It might be theoretically possible to correlate the uuids with an account's activity and dox the user in some cases, especially with some instances having a single user, but it would be very difficult or impossible to do on larger instances and would add an extra layer. Single user instances would be kind of impossible to make totally private anyway because they can be identified by instance.

I've been thinking about this for several hours since I first became aware of the debate.

I don't care that much in theory if anyone sees my votes. They aren't anything I'm particularly private about. I care about conversation way more than up/down votes.

However, some people get a little upset about being downvoted. I think it will result in retaliatory downvotes. You already see that when two folks are arguing. I don't normally waste my time downvoting a post I'm writing a rebuttal to, but when they are downvoting me I tend to do it back. I think if everyone had easy access, they would hunt down their down voters posts and retaliate regardless of the quality of the comments.

Lastly, I wonder if this will give rise to a client that lets you use one account to post/comment and a different one to vote. And if it does, will that be better all around? Then no one will be able to associate votes with a user. But it seems unnecessarily wasteful to create a whole account that does nothing but vote. It seems like it would deny mods (and everyone) a useful tool for identifying bad actors.

Technically, anyone could get access to the voters identity if they try hard enough but 99% of the users won't put in that much effort. And technically someone could already use different accounts for different activities, but without reason to create a client to support that it's too much of a pain to be worth the effort.

So I really think I'm on team status quo here.

One benefit to vote transparency for admins is mod monitoring options.

Reddit is infested with vote manipulation via bots. At least on the Fediverse it seems like both admins and mods might have more options.

Yes, and this would be fairly easy to make them at least pseudonymous without even needing to modify activitypub itself.

That said, I still don't support anything which lowers the friction of vote stalking like exposing votes in even more places. Technically people can look up my address from my license plate number if they really care to, but that doesn't mean I want to list it in bold letters on my windshield.

Overall my opinion is irrelevant, however, I think there is a huge difference in knowing a person votes vs how a person votes. The how should not be public, imo.

I think votes shouldn't be anonymous. Transparency is important to weed out trolls and bots. And public votes should be made easier accessible to every user not only admins/mods.

Yes, they should ideally. But it's hard to properly implement them in a way that will guarantee anonymity and be sybil-resistant at the same time.

Permanently Deleted

How do mods see them? As far as I am aware, you have to be an instance admin. But it's not difficult or time consuming to spin one up and I doubt the average user of Lemmy is technically incapable; most of the Fediverse users in general seem to be IT people and developers.

Other posts have already posted it better than I could, but my tl;dr is: one of the good things about Lemmy compared to the "competition" is that votes are public -- or at least the fact that someone voted is.

I wouldn't mind restricting access to how a user voted, in particular if in the future something like multi-choice upvotes becomes a thing, or even something I'd love to see as is dual-voting ("I downvoted because I don't like it but I upvoted it because you are absolutely right about it", this is absolutely different than not voting at all if the who is voting is being tracked).

But on a fundamental level, in the least instance admins have to be able to know who votes for our version of the system to even work compared to the competition.

I typically operate under the assumption that basically anything I decide to post on a public forum is not private.

Call me crazy, but I care less about the instance admins being able to see my vote history than regular users. For me the latter will produce a chilling effect on how I operate with the site moreso than the former, even if admins have more power that can be abused. I was already aware of the votes not actually being public and the idea admins could see that info seemed to be a given, but I still think there's a difference between having a motivated malicious user go out of their way to look (making an instance, looking on a different platform, etc) vs making it simple for lay users to see that info within the platform itself (which I what I think is under discussion, currently).

And honestly, if a solution could be determined to help make votes anonymous but still allow admins/mods to deal with bots/trolls, then I'd be all for it.

If votes became truly public, what would stop a malicious user from automating crawling the fediverse to get a list of every up and down vote a targeted user has ever made? Admins can currently do this, I assume given enough time and intent? Yuck.

I really hope a solution is found and if Lemmy goes the way of truly public votes, it would probably turn this into a nonparticipatory medium for me, I'd still read posts but not vote or comment.

Edit: also, most casual Lemmy users aren't aware of public votes and would be upset that it already works this way, and only particularly invested or curious users are even reading this thread.

The only fair way to handle this is for all admins to immediately turn over all passwords to the Crumbgrabber, who will act as an interface between the government and private sector interests in determining the value of each Lemmy user, and whether they are a fit candidate for the mobile infantry. Remember- only service guarantees citizenship.

If I vote something I'm expressing my opinion just like I would with comment, and those are not anonymous.
I get that people are worried about griefers and psychos, but anonymity is just a (poor) cure for the symptoms, not for the disease; users who don't behave should be banned, and if their instance turns out to be a detriment to the community, they should be defederated.

The anonymity we should ensure is the one of the person behind the username, to avoid doxxing and cyber-bullying.

I’d rather keep the status quo. While I realize that the vote visibility can play into the hands of mod/admin/instance owners with nefarious or petty vengeful purposes, we also can see who bad actors are in the vote system - iow a bot or person perpetually downvoting subjects they disagree with yet not participating.

But people need to be aware that the votes are not private.

We could split the difference and users could get auto-notified if their vote was viewed and by whom. That way it’s a two-way street. The mod/admin can see your votes, the users know that their vote was accessed by that mod.

Second choice would be that all users are anonymized by a hash so that bad vote actors can be removed via their hash being associated with malicious or other bad acting, but to discover who individuals are the admin would have to do the legwork of follonf multiple posts/ comments to associate the hash.

No perfect solution.

Don’t know how that would be implemented, but someone needs to watch the watchers.

Otherwise hide the votes if trust of anonymity is paramount.

At least NOW I can find out exactly who can call me out for saying something stupid, and thank that person for providing me with valuable information and knowledge.

Downvotes are actually kinda useful, even I benefit from them.

Yes by default, but there should be an option to make them public

The more I spend time on Lemmy, the more I think it is in a lot of trouble. There are many serious issues that need to be addressed and I don't see how most of them can be.

Federation is touted as a Good, but has many drawbacks. Privacy (as listed in this post for example) for one, instead of algorithm curated/focused content federated servers each enforce (subconsciously or overtly) a theme, rampant user generation off multiple servers rendering moderation pointless, and so on.

Then there is the rampant issue of moderation abuse. It seems that the only reason to be a moderator is to not be annoyed at other people forcing their opinions on you. This reminder that admins/mods get yet another way to subject the users to their biases is the nail in the coffin IMO. "You vote this way? Banned because my feelings matter more".

Privacy is important for a lot of people and that is impossible to get on Lemmy unless something drastically changes, but it doesn't sound like this is will ever happen. The people that can see your data is not under your control at all and I think this fact alone will never allow Lemmy to grow to a place we can be happy with.

If admins can see data without limits, everyone should be able to. All 5 of us once that realization sinks in.

;tldr I don't think even admins should see peoples data but that seems impossible so...

As I said in another comment in this post - I believe seeing who upvoted or downvoted a post aids in identifying rabid downvoters and bots, though I personally use mobile Lemmy apps and am unable to access that data.

Everyone's fleshed out a lot of the discussions so I'll just bullet point my opinion to try to better explain the discourse I'm seeing on here

• I view "Lemmy" like it's a Community Center with group discussions, Community gatherings, and/or lectures with public comments. If you're in the crowd "Booing" (downvoting) without standing up and making your position clear, you're not adding anything to the discussion.

• Downvote/Upvote is not like "Booth Voting" at all. You have ONE vote in a democracy, that's the core principle. You don't vote Yes for a candidate then vote No for another. You don't see a ticker above the booth tallying everyone's vote that was before you (voter manipulation, why hidden scores became a thing).

• I think this would go over a lot better if mods had the choice of how to present the votes. Opt in or out of showing voters, opt in or out of showing scores or eliminating downvotes or even upvotes if you want. Give the power to the community and create useful tools for mods to try out.

Eh, I don't personally care.

But it could lead to nastiness as lemmy expands. If enough people go to the trouble of looking it up, you get some of them being assholes because people are prone to being assholes. That leads to drama. Drama leads to nastiness and worse things sometimes.

If that's going to be part of how lemmy works, so be it, I'm way too old to skip using a block list for assholes. But it might bite federated services in the ass, so it probably should be on the list to get implemented.

Sure, if and when we get the ability to ignore federated votes

I see absolutely no reason why they shouldn't be

Any instances that actually show public downvotes? I've seen people talk about them but haven't seen them yet

If that were to happen, the receiving end wouldn't know who sent which vote, thus making spamming extremely easy.

I can see that in some circumstances, votes might need to be public due to protocol, otherwise public votes have their own uses, and so are private ones.

if I leave it there. It’s because it’s not foul enough to warrant a ban but I don’t want to press a little green check box explicitly endorsing its existence. I have been here the whole time :/ Yal couped me

No, it would encourage irresponsibility which already seems a major issue with lemmy.

Everyone's fleshed out a lot of the discussions so I'll just bullet point my opinion to try to better explain the discourse I'm seeing on here

• I view "Lemmy" like it's a Community Center with group discussions, Community gatherings, and/or lectures with public comments. If you're in the crowd "Booing" (downvoting) without standing up and making your position clear, you're not adding anything to the discussion.

• Downvote/Upvote is not like "Booth Voting" at all. You have ONE vote in a democracy, that's the core principle. You don't vote Yes for a candidate then vote No for another. You don't see a ticker above the booth tallying everyone's vote that was before you (voter manipulation, why hidden scores became a thing).

• I think this would go over a lot better if mods had the choice of how to present the votes. Opt in or out of showing voters, opt in or out of showing scores or eliminating downvotes or even upvotes if you want. Give the power to the community and create useful tools for mods to try out.

Make the author of the comment/post see who voted for them.

Sill waiting for someone to show me how to see what someone up votes and down votes on Lemmy through a pre-existing Mbin or Mastodon instance. That's really been the only convincing argument to make them public that I've heard. (That convinces me, I mean.) But nobody has shown it is possible through fedia.io for example. I tried but couldn't see it, but it's possible I was looking in the wrong place.

It's on mbin's post/comment under more > activity. Not under a user's profile.

No, but they should be public to everyone, and not hidden unless you jump through hoops.

One way to anonymize voting, if desired, could be just make a mess out of who voted what in the logs. I vote something, some other random user's name is logged. Or maybe that could be used to deter scrapers and make the incorrect logging reverseable somehow that requires actual human interaction that cant be automated.

Bitte mt

Unlike commenting and posting, which offers the who, what, where, and when parts of the message passing process, voting on Lemmy (now, for non-admins) is inherently an unequal process. Imagine if someone could send you an email whenever they wanted, but you were prevented from knowing who or even from what instance it is from, or when it was sent, do you think that could open up a potential for some variety of abuse? Or texting, phone calls, showing up at your door, etc.

Knowing the identity of the voter is an important part of properly receiving the "message". It also increases freedom of choice, b/c otherwise the only way to prevent such messages (if, let's take it as a given that some people find them annoying) would be to turn off voting entirely, either by going to one of the instances that does that, or just ignoring all (down-)votes yourself.

If we want the Fediverse to grow, and in particular to include less emotionally stunted humans that actually care when someone says something about them, good or bad, this will be a necessity. (Also, I was speaking tongue-in-cheek there, but genuinely social standards do vary across this wide world, and it really would increase content if there were not only more but different types of people, especially those most likely to generate quality content.)

And as other non-Lemmy methods of access to the Fediverse provide that feature - k/mbin, piefed, sublinks - Lemmy will fall increasingly behind if it were to ignore this very basic feature.

Making the votes public also increases honesty, since they are already public now. And if you don't want to know who down-(up?-)votes you then... don't look? But for those who want to know, it will be a great feature to have.

The users right now may fall into a false sense of privacy when voting because the votes are hidden from Lemmy users.

Why would you even want anonymous votes but not anonymous comments?

The former is as good\bad as the latter.

I know they were already technically public. I think they should be shown.

Votes should absolutely be public. They were on KBin, and it made people more civil for it because you could be shamed if you were dislike trolling or liking all of your own posts/comments to make them look better (which is something you actively have to do on here, unlike Reddit).

Given this place is pseudo-anonymous anyways, and people comment far more personal and identifiable info here anyways (which tbf you should be careful about), I think public votes would do much more good than harm.

I will always downvote ai shit. Brigade 100%. I'm fact this reminds me I need to get through all the ai subs and downvote everything again.

레미에 대한 공개 투표는 커뮤니티 내에서 투명성과 책임성을 강화하여 사용자가 특정 콘텐츠를 지지하거나 반대하는 사람을 확인할 수 있게 해줍니다. 그러나 이는 또래의 압력이나 원치 않는 감시로 이어질 수도 있습니다. 온라인 상호작용에서 프라이버시와 자유를 원하는 사용자에게는 익명성이 더 바람직할 수 있습니다. 온라인 개인정보 보호 도구에 대해 자세히 알아보려면 챗GPT 를 방문하세요.

The question of whether Lemmy votes should be anonymous is an important one, balancing transparency with privacy. Public voting can encourage accountability, but anonymity might lead to more honest and unbiased voting behavior. If you're interested in exploring the pros and cons of this issue further, chatgpt 日本語 can provide a detailed discussion and help you form a well-rounded opinion on the matter.

Get rid of votes.

They’re only useful for ranking content and content is only useful in the context of ad revenue.

You don’t have to be on reddit anymore.