What does open source itself mean?

Does it mean anybody can access information about lemmy like upvotes?

Can any person access lemmy data to know what I upvote?

  • lime!@feddit.nu
    link
    fedilink
    arrow-up
    12
    ·
    12 days ago

    others have answered the important parts so i’ll just do an addendum: your DMs on lemmy are also available to everyone.

      • lime!@feddit.nu
        link
        fedilink
        arrow-up
        6
        ·
        12 days ago

        they’re stored in plaintext, so anyone with access to the server can read them. i’m assuming you can’t fetch someone else’s DMs but i haven’t read the source.

        • Pamasich@kbin.earth
          link
          fedilink
          arrow-up
          4
          ·
          12 days ago

          If they’re federated, then you should be able to fetch them if you’ve got the URL. IDs in ActivityPub have to be dereferenceable iirc.

          But like, even if they were only dereferenceable for a short time, the very act of federating the message would hand over the PM to outside the garden controlled by your instance. There’s no stopping the recipient from doing whatever they want with it.

        • Hishiryo@scribe.disroot.org
          link
          fedilink
          arrow-up
          2
          ·
          12 days ago

          Actually, that’s a problem on ActivityPub; DMs are hard to cipher within AP because of the AS and JSON-LD particularities. Though there’s some good software that done it, like Bonfire.

    • alecsargent@lemmy.zip
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      12 days ago

      Damn, now this is good to know. By any chance do you know is that include DM’s with bots (mod bots and other tools of the like)?