there are no protections against creating multiple accounts to upvote your own posts
They don't even have to be real accounts. Lemmy uses the ActivityPub protocol, and nothing's stopping someone from creating an ActivityPub server that federates with a Lemmy instance and spams upvotes from randomly-generated usernames. The server could just pretend that every username is a valid one.
Of course, I think something like that would be defederated pretty quickly.
Yes, there's fediseer that can help with that sort of thing. However, I think if it wasn't spam, it may not get noticed as quick as you'd think. Create a lemmy.world account, post a meme, and use your special server to throw 50 or 100 upvotes at it, and probably no one would realise.
They don't even have to be real accounts. Lemmy uses the ActivityPub protocol, and nothing's stopping someone from creating an ActivityPub server that federates with a Lemmy instance and spams upvotes from randomly-generated usernames. The server could just pretend that every username is a valid one.
Of course, I think something like that would be defederated pretty quickly.
Yes, there's fediseer that can help with that sort of thing. However, I think if it wasn't spam, it may not get noticed as quick as you'd think. Create a lemmy.world account, post a meme, and use your special server to throw 50 or 100 upvotes at it, and probably no one would realise.