1. Don’t expect privacy. Everything you post is public.
2. Goto 1

Any joe shmoe can spin up an instance, post your personal details (or personal details they made up), and bada bing bada boom, your identity is compromised forever.

Replace “instance” with “website” and that’s how the internet works. There are avenues in the legal system to combat this, but generally people can post speech (illegal or not) very easily with the internet, having rapid, free, open communication is a net positive for society even if occasionally there are downsides.

Lemmy can’t solve doxxing or other forms of abuse any better than a centralized service can, which they don’t do particularly well as it is. What Lemmy does do it put control over what content is promoted into the hands of users and instance admins, as opposed to a few execs at Meta. If an instance has poor moderation, it will be ‘de-federated’ by other lemmy instances, which means content from their instance won’t travel across the fediverse. So in general, I think you can expect good moderation. Unlike centralized services, instance admins are not incentivized to shove polarizing content and misinformation into your feed. That pipeline of increasingly polarizing content is the root cause of many situations which involve doxxing in the first place.

Even on Reddit there are mirror websites designed to preserve deleted content, and there’s also the internet archive and Google cache, screenshots, etc.

Once information is posted online it’s available. It can be obfuscated or loosely scrubbed, but you can never know it’s clean.

A personal instance generally doesn’t have a big reach, unless people actively follow the person who’s posting the doxxing information.* The fediverse may not be a good way to spread personal information of others, throwing up an instance like that is not much different than throwing up a website or forum.

There’s two things I can think of you can do: Contact the company that hosts the website to take it down – I’m unsure about how you go about this, but I’m sure you can find out more about that. And to report the instance to other instance admins to get it blacklisted, perhaps get it on a block list, limiting its reach and thus effectiveness. Get in contact with big instance admins, they likely have chatrooms you could join, and they might be able to help with the other step as well.

*edit: In the case of Lemmy, I suppose it would be people following a community, rather than a user directly. If moderators or admins act on the posted informated and delete it, the deletion will federate as well and any legitimate instance will automatically delete the content on their servers as well. This would also be true for Mastodon and such. If not, the above applies.

I don’t have a habit of sharing identifiable information on the internet, but that goes doubly true here.

While using another instance, the one with the bee theme, I deleted a comment that I made sometime sooner. Out of curiosity I checked that same thread from the other instances, and there was one where my comment was still showing up.

Now, that comment wasn’t anything special. I said something wrong and found out later, so I deleted it.

But what this means is that, if I share something I shouldn’t, I don’t trust that every instance will delete my comment.

• Don’t post personal information
• use throwaways
• don’t take the strangers you communicate with, as trustworthy friends

The problem with the fediverse in that regard is that it’s basically multicasted. On one hand that’s a negative for the reasons you’ve said, but on the other hand it means you can easily dig up information that moderators and admins acting in bad faith can hide and then claim whatever bullshit they want.

Ultimately, you really shouldn’t be seeking privacy in lemmy and should try to refrain from using information that can personally identify you if you are really afraid or really incapable of having a public presence. If someone tries to dox you, they could dox you from any website. If they do, the way to proceed with that is usually filling out a police complaint form and/or any other specialized agency in your country block that can deal with it, or if you have the money, to get in contact with a lawyer which usually makes it about who has the biggest bank.

However, we also have to understand what is being called doxing. In your case, I understand its someone pointing out an alt that had apparently posted content word for word. Doxing generally involves things like the SWAT showing up and assaulting your home or people messing up your personal life by making personal data public for misuse. I’m not sure how noting similarities to try to imply that you should also be banned applies here.

And trust me, I’m in a very similar situation, except it involves an admin committing libel just because I complained about them where people who complain about them also have, ergo I must be whatever the worst shit that he can throw at me and get to stick is, which apparently has been that I’m an alt of an account who is a pedophile on another server. Not only that, they didn’t even mind including and leaving several links to an external server spread out through several comments that they claim hosts the pedophilia with the implication that people go there and check it out for themselves to confirm an association to the person they were accusing. Implied because, well, they are just leaving the link there without any real explanation, which might mean a user on a “No porn” instance could also randomly click on it if they are careless.

Going after libel is pretty shit, you can’t really do anything about it, but I have reported the links to what is by their own words pedophilia to the appropriate organizations because that’s far more serious and I’m sure not going to sort through that shit. But would I call it doxing? Well, besides the fact that the claim is false, no, sometimes libel is just libel, and sometimes linking to CSAM for any reason is still linking to CSAM. Looking at this, some lawyers do claim it is when it is tracking multiple usernames, although I imagine it might involve associating accounts with personal identifying information.

Doing it isn’t necessarily wrong but should be limited to gathering information to report to law enforcement agencies to help with their investigations, if it’s something more than casual speculation. In communities where the community itself can be considered an extension of the authority, the issue limited to it, where transparency is valued, and where the information itself isn’t really that personally identifying, well, the circumstances seem different. Frankly, I think an abuse of authority is worse than doxing in such an environment, specially in a social network where you control the flow of communication. If that’s your case, you should probably be calling that out instead.