I was unsure where to cross-post this. But maybe we should discuss this to make sure Lemmygrad users are staying safe? Similar to the unspoken rule that we strongly discourage people using their real names or giving away too many personal details.
cross-posted from: https://mylemmy.win/post/89871
Edit: obligatory explanation (thanks mods for squaring me away)...
What you see via the UI isn't "all that exists". Unlike Reddit, where everything is a black box, there are a lot more eyeballs who can see "under the hood". Any instance admin, proper or rogue, gets a ton of information that users won't normally see. The attached example demonstrates that while users will only see upvote/downvote tallies, admins can see who actually performed those actions.
Edit: To clarify, not just YOUR instance admin gets this info. This is ANY instance admin across the Fediverse.
I see the irony. I suppose two differences are that, one, the survey was optional, and two, although participants might not necessarily know who was reading the answers, the answers weren't (I don't think) generally accessible.
Voting data is not generally accessible, either, but it appears to be accessible to admins of other instances. If this is the case, it wouldn't be difficult to set up an instance, make a post through any account about a specific topic, and observing the data to see who up/downvotes it. This could narrow down the list of people that a bad actor might want to target for further data harvesting.
Considering how many billions are put into surveillance, data collection, and controlling (social) media, I don't think we should discount this fear as farfetched. Even if, on its own, it's fairly benign data.
I've also noticed that some of the new instances/users are a lot happier with 'local' communities. If this grows into, say, a list of 'things to do in my area' communities, it wouldn't take much for a fascist to identify local targets by a series of what I'm going to call 'voting traps'.
Maybe I'm paranoid.