this post was submitted on 20 Aug 2023
89 points (96.8% liked)
Fediverse
28195 readers
316 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
On all instances. Each instance has copy of what happened and every action is relayed by community instance (in this case, Beta) to all subscriber of the community.
So if I make an instance, I can scrape all the content and gather data on every user and sell it to Cambridge analytica?
Technically, yes. But if you are caught red handed, be ready for the mass ban to your account/instance.
But if it's just sat there silently data gathering, nobody would know?
Yup, that is what professional/corporate scrapper do from the very beginning. Fediverse has poor privacy, and it is designet that way. It is better to share only safe content to fediverse for our safety, and share more private things on messaging/chatting apps like matrix or email only to person we trust.
What info do you think they will get? The only info is what you put in the public info on the user profile on your instance. So they can get your username (well user@instance), avatar, about info. That's about it. Anything else like email address and password hashes are only stored on the instance you signed up to.
your votes are visible to all instances. it's easier to think about when you think of voting like favoriting in mastodon except lemmy doesn't send a notification
Yes, I discussed this in another thread. There could be ways to protect this info. But, it would mean totally changing (and agreeing with all other threadiverse apps) the way this is handled. Even then, I'm not sure you could prevent exploitation if the full info isn't sent. On kbin this info is visible anyway. You don't need any fake instance to do it.
Every single comment and post anyone ever names and anything they are subscribed to. Run everyone's content through some sentiment analysis, and now you have a great set of users, emails and their commonly used IP, grouped into interests, general mood, and political leanings, perfect for advertising.
Where are you getting email and ip from?
What's my name?