The best part of the fediverse is that anyone can run their own server. The downside of this is that anyone can easily create hordes of fake accounts, as I will now demonstrate.

Fighting fake accounts is hard and most implementations do not currently have an effective way of filtering out fake accounts. I’m sure that the developers will step in if this becomes a bigger problem. Until then, remember that votes are just a number.

  • shagie@programming.devEnglish
    2·
    1 year ago

    The single layer web of trust on the server wouldn’t be terribly difficult.

    A single layer web of trust on a client would mean that the client is getting sufficient information about all the votes to be able to weight them. This means that instead of “+4 -1” for the information that the client gets instead it would get that “shagie liked the object, JohnDoe liked the object, BadGuy liked the object, SomeoneElse liked it, and YetAnotherPerson disliked it.” That implies a lot more information being revealed to a client than many would be comfortable with.

    Granted all of that is available if you federate with a system and poke in the database. It’s there. But this makes it really easy to get that information.

    A transitive web of trust implies not only are you getting those votes and considering that “shagie liked the object” but also that you trust me and so that I trust JohnDoe is available to whatever is making that vote weighting calculation.

    And while that single layer on the server isn’t too eyebrow raising, getting the transitive listing gets into the Facebook level of social graph building - but for all to see. I’m not sure that people would be comfortable with that degree of nakedness of personal information.

    Consider also the data payload sizes. This post (rather mundane and not viral) has 243 comments. Some of them have over a hundred votes. How big of a payload do you want to get to send to the vote weigher (and back)?

    Consider the load for… say… https://lemm.ee/post/843533

    And for bad actors, all they have to do is cast a couple hundred votes on each comment (until they’re defederated and the database cleaned up by the admin) to DDOS the vote weigher.

    • sugar_in_your_tea@sh.itjust.worksEnglish
      2·
      1 year ago

      My point is you can have a mixed system. For example:

      • server stores list of “special interest” users (followed users, WoT, mods, etc)
      • server stores who voted for what (already does)
      • client updates the server’s list of “special interest” users with WoT data
      • when retrieving metadata about a post, you’d get:
        • total votes
        • votes from “special interest” users
        • total votes from your instance

      That’s not a ton of data, and the “special interest” users wouldn’t need to be synchronized to any other instance. The client would store the WoT data and update the server as needed (this way the server doesn’t need any transitive logic, the client handles it).