Could just aggregate at the instance level.
The instance is going to have full visibility into your actions anyway, but federated instances already have to have some trust that other instances aren’t submitting fakes (since they could just as easily fake accounts too).
Hard disagree.
The aggregation actually simplifies much of that detection.
“Instance X dumps thousands of -1’s (or odd patterns of +1s) on comment/story Y” is much easier to look for bad behavior and run anomoly detection on, especially since bad actors will likely operate at the instance level (either creating many accounts on a low barrier instance or just making bad instances).
Yes totally open votes helps for the edge case of detecting “account X always +1’s account Y” across instances but we’re paying a very heavy privacy cost to support an expensive to detect edge case that’s trivial to defeat (have multiple puppets). And individual instance operators can still do this analysis.
If the number of puppets are small the correct fix is to rethink the scoring (tiny numbers of votes shouldn’t be allowed to distort thing so much we need to go to these extremes)
If the number of puppets is not tiny then it’ll be easier to see in the instance aggregations (user X always gets +N votes from instance Y)