You Should Know

While it is important to know that voting is not private (nor truly is direct messaging), that is not in itself a danger.

Lemmy is community driven, and so it is — broadly speaking — governed by community norms and the platform is responsive to the needs of those norms. If someone is harassing or mistreating you on the basis of your voting, then you can take it up with an admin. I've seen people called out for the use of vote manipulation, but I'm not sure what it would look like to be targeted based on your votes.

By the way, there are also mechanisms for publicly addressing grievances with mods and admins.

Most importantly, recognize that it does take time to adjust to the reality that no one cares about the fake internet points here. Reddit uses dark patterns to manipulate users into equating votes with worthiness. Having a lot of karma on reddit contributes to a person's reputation and credibility there. Here, no one cares, or even sees, a person's vote totals. Like most everything else, it's technically public, but it's not visible or indicated.

Why does reddit want you to care about your karma? For engagement and metrics. If people are only incentivized to share genuine interests and human interaction, then they won't scroll mindlessly for quite as long. If every post and comment is incentivized for maximum virality, then Reddit can sell more eyeballs to advertisers. Plus, if people care enough about their fake points, they will literally pay to buy reputation. Reddit doesn't care about your well-being, just your ad impressions. Like any other social media corp.

Welcome to a better, healthier, more transparent place. We are far from perfect, but no one here will use dark patterns to mine you for content.

In combination with your IP, this is a massive privacy (maybe even physical security) risk.

Your IP would only be seen by your instance (which is inevitable, you gotta connect to it after all). But there's no way for anyone else to look up your IP.

I don’t think IP addresses federate? I think only your instance admin can see your IP address. In any case, though, you should generally always assume that your up/down votes on any service are recorded and tied to your username. If you can come back later and change your vote, that vote is tied to your username. It may not be visible to other users, but the server admins can absolutely see what you’re doing.

Reddit might not make your votes publicly visible, but they’re absolutely tracking them and using that information to select what you see, including advertising. They might not directly share those votes with advertisers, but they almost certainly are sharing your interests based on your votes. And you should assume Reddit and others will comply if the government comes asking for what users liked a post the government opposes, or who downvoted a post praising a new government initiative.

It depends on your threat model, but your threat model might change. Freedom of speech might be curtailed by politicians even when that’s supposed to be unconstitutional. What might be safe to do online now might become unsafe in a year or two.

YSK: every action you take online, even as simple as an Upvote or Like, might be recorded and may come back to haunt you

It's the nature of the beast. Federated software holds no secrets.
Related: https://sopuli.xyz/post/31369487

My votes are a massive privacy risk? How? I'm putting them out there publicly willingly. As is the nature of the internet.

I remember learning about this and not giving a fuck. I vote stuff on occasion, but generally don't vote or care about the votes on my comment.

Oh no now the lemmy.ml special mods will know I downvote them when I see them lol

It was something I had to learn, coming from Reddit.

But I made my peace with it. Let the mods* see my up/downvotes. If that becomes a problem then, well, the Lemmyverse isn't right for me.

* I was told that anyone can see this, with a little effort.
But I have not heard about this applying to IPs.
Obviously someone running an instance (an admin, not a mod) can see who visits that instance; that's just how servers work, and it's valid for reddit as well. If you can't live with that you must use Tor or VPN.

So while I agree that everyone should be aware that up/downvotes + username are visible to anyone, I'm not sure about the IP argument.

If you ever get banned for the way you vote then abandon that reddit space.

An entire thread of people missing the point 🙄