• Natanael@infosec.pub
    link
    fedilink
    English
    arrow-up
    10
    ·
    4 days ago

    Private posts is planned, but it’s not trivial. Mastodon can’t exactly brag about their nonintuitive technically just not broadcasted posts, where multiple implementations keep making private messages publicly discoverable due to bugs.

    • JoJo@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      What kind of implementations do you mean? The last time I heard of such a thing (a few years ago), it was fixed within a few hours, and was on a dev instance

      • Natanael@infosec.pub
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 days ago

        Currently Lemmy is leaking likes via the API even if they only should be available to the user’s host and community host server

        • General_Effort@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 day ago

          Federation requires openness and that goes badly with secrecy. You can argue that one has to trust instance owners anyway, but knowing the users and not just the tallies makes uncovering manipulation easier.

          • Natanael@infosec.pub
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 day ago

            It’s doable with E2E encryption, but lots of social stuff in large groups requires coordination which is incredibly hard to with a server that has no knowledge of what the data is because it can’t index anything, etc.

                  • Natanael@infosec.pub
                    link
                    fedilink
                    English
                    arrow-up
                    1
                    ·
                    13 hours ago

                    They’re implementing E2E encrypted social stuff. Voting privacy and encryption is linked.

                    Especially when you have users across multiple servers and both want voting privacy AND being able to deal with vote manipulation. You need stuff like pseudonymous commitments per account attested to by the hosting instance, etc. The only thing that’s simpler but still private is having instances just digitally sign a total vote tally, which also means you can’t detect vote manipulation on other servers at all.