Curious if anyone has an answer to this?

  • willya@lemmyf.ukEnglish
    18·
    8 months ago

    Whoever has access to the server of your instance can query the database for whatever they want, but no… just an admin can’t see this info.

  • stepanzak@iusearchlinux.fyi
    91·
    8 months ago

    Sice your saved post are synced across different clients, it has to be stored on the server and thus it can probably be view by admins of the instance you’re on. Please correct me if I’m wrong.

    • brewbellyblueberry@sopuli.xyz
      3·
      8 months ago

      Sorry for the dumb question, I’m thick in the head - since federated content is, well federated, does this mean potentially anyone who makes an instance can see practically everything?

      • 𝙣𝙪𝙠𝙚@yah.lolEnglish
        14·
        8 months ago

        Not an expert, but I am a self hoster.

        Not everything is but yes, some things can be seen. Your saved posts are only visible to your local instance admins not every admin. Your subscriptions are visible to your local admin as well the admin of the community can see you are subscribed. Your DMs are visible to your local admins as well as the recipient’s admins. Your votes and comments will be visible to all federated admins. If you report a post, that report is visible to your local admins, the community’s mods and admins, and the reported person’s instance admins.

        • brewbellyblueberry@sopuli.xyz
          5·
          8 months ago

          Thanks for the thorough reply. I’m just wondering, in general, about privacy and shit. Like it’s a big talking point here, how lemmy is so much safer and privacy focused, but then there are these huge oversights regarding some things. Sure it’s great my shit isn’t being monetized for bullshit reasons and ends and ads, but, if all this kind of decentralized thing doesn’t come without it’s own problems. It’s fairly new territory for most people and people easily lull into a comfort you know?

          I’m paranoid rambling, but thanks for the reply.

          • 𝙣𝙪𝙠𝙚@yah.lolEnglish
            6·
            8 months ago

            In my honest and probably very controversial opinion, Lemmy is not more private than say using Reddit.

            • brewbellyblueberry@sopuli.xyz
              4·
              8 months ago

              I mean that’s my point. I’d trust Reddit more than some completely random dude to handle my data you know? Why wouldn’t I? At least with a centralized datamining piece of shit I know a part of what the data is used for and they’re not just stalking me waiting to murder me or something. Blindly sharing whatever with some rando who just comes up to you like “hey you want some privacy” is just fucking weird. Some random dude could be any weird fucked up person you know? Maybe I’m over/underthinking this, but sometimes all of this just seems weird.

          • ramble81@lemm.ee
            5·
            8 months ago

            That’s why self hosting constantly gets brought up. If someone has direct access to the database (I.e the instance owner) they can see all of it for that instance. But a general admin on that instance can not see it.

            Likewise, the ActivityPub format that is used to connect instances, only really sends things like posts, comments, votes, etc. this is why you can’t log in to another instance and retrieve things like your saved posts.

            So if you want the best privacy, and no one to see you’ve been closetly saving furry porn, host your own instance so you have control of access to the database.

      • Crul@lemm.ee
        5·
        8 months ago

        Non-expert answer (those who know more, please correct): only public content is (needs to be) federated. That’s (one of the reasons) why you cannot log in with the same account on different servers. Only the server you are registered in stores your private account data (AFAIK).