this post was submitted on 15 Oct 2023
122 points (96.9% liked)

Asklemmy

43902 readers
1017 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy πŸ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago
MODERATORS
 

Does ActivityPub send those to other instances, or does ActivityPub only send the original post and the rest (upvotes, downvotes, replies) are stored only on the original server where the post was made?

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 110 points 1 year ago (1 children)

Since you've gotten enough real answers, I'll just remind you that upvotes are stored in the balls.

[–] [email protected] 20 points 1 year ago

Truth. /thread

[–] [email protected] 50 points 1 year ago

All of those are replicated to all servers.

[–] [email protected] 35 points 1 year ago* (last edited 1 year ago) (1 children)

Posts and comments are federated (synchronised). Upvotes are actually a bit of a fudge, they are actually 'Favourites' if considered from an activity pub (e.g. Mastodon) perspective, and yes favourites are also federated.
Downvotes don't exist in activity pub and, as a result, they do not federate between instances.
At least that is my understanding.

[–] [email protected] 34 points 1 year ago* (last edited 1 year ago) (1 children)

Downvotes do federate, ~~but it uses protocol extensions to do it. So the downvotes won't federate to Mastodon~~, but it does for Lemmy and I think Kbin too

[–] [email protected] 18 points 1 year ago (1 children)

Votes federate with standard Like and Dislike activities which are part of Activitypub. It's just that some platforms like Mastodon can't handle Dislikes.

[–] [email protected] 5 points 1 year ago

Can't handle by choice I'd guess. Given the format of individuals following individuals rather than topics in communities it doesn't make much sense for a person to follow someone only to downvote/dislike their comments.

[–] [email protected] 13 points 1 year ago (3 children)

Honestly votes being federated seems like a bad idea imo. Would be easy to spin up an instance with thousands of fake users and manipulate posts.

Fediverse is already big enough that it could be lucrative to do so.

[–] [email protected] 30 points 1 year ago (2 children)

So then everyone just blacklists that instance. If the problem is really severe, we move to whitelisting.

It's not hard to identify when someone is doing this.

[–] [email protected] 9 points 1 year ago

It's not hard to identify if you're looking for it, they just use one instance, they aren't subtle about it, and they are only boosting a specific company instead of a variety of products and ideas.

Vote manipulation is hard enough to detect on Reddit where they have visibility top to bottom. I think this will become a major issue in the future.

This is on top of the already significant scaling issues votes are causing.

Other instances can cache the total count for historical reasons, to preserve lost instance vote counts, but keeping the full ledger is going to be a serious barrier to entry for hosters and a security (manipulation) issue.

[–] [email protected] 8 points 1 year ago (1 children)

A whitelist defeats the decentralisation and openness of a defederated system.

I think you're mistaken in your assumption it would be easy to identify malicious instances. Bots are notoriously difficult to fight, every time you block one method another workaround will appear.

[–] [email protected] 15 points 1 year ago* (last edited 1 year ago)

I think you’re mistaken in your assumption it would be easy to identify malicious instances. Bots are notoriously difficult to fight, every time you block one method another workaround will appear.

I run a large instance and I look around in the DB occasionally when users complain, so I'm pretty familiar with what's in there.

A whitelist defeats the decentralisation and openness of a defederated system.

True, but assholes are assholes and sometimes freedom and assholery don't mix well.

[–] [email protected] 2 points 1 year ago

Would it change anything besides their technique?

They almost certainly already have vote manipulation tools for reddit that work via browser automation, because someone offered me money to build one 10 years ago.

Those tools and a handful of accounts+vpns would already be borderline undetectable without the access needed to see that 25 accounts always voted the same way.

At least on Lemmy, you have that access. Reddit not only makes zero effort to prevent it, they actively obfuscate the information needed to spot it.

[–] [email protected] 1 points 1 year ago (1 children)

I disagree. Reddit openly admitted to manipulating its upvote count to "deter bots", especially since it became apparent that the front page of reddit became a very lucrative position to be if you were promoting a product, service, or ideology. In the post API world of Reddit, it's more apparent than ever that votes are being manipulated to give users an illusion of activity that isn't actually there.

In fact, Reddit's manipulation was always as easy as paying someone to upvote a post a few hundred times within an hour of posting which in turn boosted it on the algorithm that displayed leading posts based on rate of activity instead of actual upvotes.

On the fediverse, being on the front page of an instance isn't nearly as lucrative, and being on the front of ALL of them isn't feasible. Even if one instance is manipulated, federation makes that effort null in seconds.

The fact these services aren't monetised, are volunteer-funded, and don't have the economic or advertising power as reddit does, really makes it harder for votes to be manipulated, let alone make someone want to manipulate the service.

Lemmy and Mastodon have issues with moderation but at worst the manipulation risk is nowhere near as bad as reddit. At best, it looks like corporate manipulation of social media is all but nonexistent on here. Let's celebrate that

[–] [email protected] 1 points 1 year ago

That's fair

[–] [email protected] 10 points 1 year ago* (last edited 1 year ago) (5 children)

Technically votes are public. Only UI is hiding them. Which should be resolved, one way or another.

Edit: there was a post with that here a few weeks ago. I understand that this isn't a real answer to your question. Maybe you find it with these hints.

Edit2: Found it. Here you'll find more. https://mylemmy.win/post/89871

load more comments (5 replies)
[–] [email protected] 9 points 1 year ago (1 children)

Where is my karma stored? ^/s

[–] [email protected] 5 points 1 year ago (1 children)

It's under my bed. You'll have to pay me $10,000 to get it back.

load more comments (1 replies)
[–] [email protected] 8 points 1 year ago (1 children)

What if someone sets up an instance, make a post and manipulate the upvotes? Just give it a million upvotes. That would break the whole system..

Or a bit more subtle, every upvote is multiplied by 10.

[–] [email protected] 14 points 1 year ago (4 children)

Individual votes are federated but not by number but by user, so you'd have to set up fake users and then federate a vote from each of them.

That makes it rather easy to detect and identify and get that particular instance defederated.

Votes will still go from origin instance -> community instance -> other instance, be if the other instance has defederated the origin instance then it simply gets dropped.

[–] [email protected] 8 points 1 year ago

If you use kbin you can even see who has made each upvote, so yes easy to then look for patterns of voting together and also at the profiles to see if the accounts looks like real people etc.

load more comments (3 replies)
[–] [email protected] 4 points 1 year ago

The first one.

[–] [email protected] 2 points 1 year ago

The mod log at the bottom of any Lemmy webpage, I think.

load more comments
view more: next β€Ί