Before joining Mastodon I remember reading about how instance owners could potentially have access to their user’s chats and messages. I don’t think I ever saw this about Lemmy, or at least never looked into that much. Is that also the case here? How much info is accessible by the owners here?
That said I love the service and am happy to be here lol
You must log in or register to comment.
Every like/dislike and comment you make is visible to the owner of every instance that is federated with your home community; due to the nature of federation, nothing on any of these services is private.
Click on a profile, then click on “send message” and you will be greeted with the following warning:
Warning: Private messages in Lemmy are not secure. Please create an account on Element.io for secure messaging.
also to keep in mind, accessing private messages on any website - unless end to end encrypted and verifiable - assume is possible by whoever is running the website. Twitter DMs, Tumbler DMs, any random forum, Reddit. All can access your “private” messages. Fediverse seems to be the only place that actually warns the user of this
Basically, everything. There’s no UI but it would trivial for me to go into the db and look at sent / received private messages.
Thats why lemmy has a warning on the dm page saying it’s not secure and to use matrix.
What’s the extent of “everything”, like including logs of all user activity? I’m just trying to understand how the system works and how much of an investment of trust users require.
EDIT: An example that comes to mind is the ongoing copyright infringement news that the IP addresses of Reddit users discussing piracy should be given up to film studios. Do Lemmy users have any kind of protection when lawyers come knocking?
Lemmy is pretty light on activity logging, I’m not aware of anywhere that records user IPs. They also made some changes in a recent patch that moved user IDs from a get to a post variable, so I don’t think there’s a way to correlate hits in the access log with a particular user ID. (I haven’t looked into this in a few months, so my info might be slightly wrong)
Basically what we can see is any content you post, even if it’s a private DM (or one you received). We can also see all your voting data.
