Probably better to post in the github issue rather than replying here.

https://github.com/LemmyNet/lemmy/issues/4967

You are viewing a single thread.
View all comments View context
23 points

That would be great. I’m not sure how to solve the problems that arises though. If i can send an anonymous vote to an instance, what stops me from sending 100?
Maybe there’s some smart cryptographical solution here that alludes me, but it seems hard, if possible.

permalink
report
parent
reply
0 points

You could just hash your username+instance combo, right?

permalink
report
parent
reply
11 points

hmm, how would the receiving instance verify? what happens if I send 100 random hashes?

permalink
report
parent
reply
5 points

This is literally already a problem. I can easily set up an instance and write a simple bot which just spams votes with randomized user strings. There are generally a bunch of these functional vulnerabilities in the AP trust model which are only mitigated by the current lack of scale. Work needs to be put into reworking the trust model, not exposing user telemetry to even more people.

permalink
report
parent
reply
1 point
*

Each instance could store a static private key used to encrypt all usernames in that instance maybe?

permalink
report
parent
reply

Fediverse

!fediverse@lemmy.world

Create post

A community to talk about the Fediverse and all it’s related services using ActivityPub (Mastodon, Lemmy, KBin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

  • Posts must be on topic.
  • Be respectful of others.
  • Cite the sources used for graphs and other statistics.
  • Follow the general Lemmy.world rules.

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy

Community stats

  • 5K

    Monthly active users

  • 952

    Posts

  • 19K

    Comments