This document is a must for anyone who has access to managing and helping run the discord server. In this document will be a number of extremely common scenarios and what steps you should do immediately upon finding the vulnerability. Keep in mind, these are the base line steps, if you have good reason to do a further step, do whatever you can do keep the server safe.

Pre-requisite knowledge:

All members of the Actually People project MUST do some learning around discord security in order to be prepared for a worst case scenario at all times. If only a handful of us have the knowledge to stop an attack, then the outcome can be catastrophic if those people are not available.

Video learning

Video 1: (9:43 minutes)

Why links are bad? Why Direct Messaging is bad? Why storing your "secret phrase" offline is good? How to remove connected decentralized apps from your Metamask account?

https://www.youtube.com/watch?v=xxqGXDw7S6A

Video 2: (8:19 minutes)

Why Direct Messaging is bad? How scammers make fake posts / announcements? How fake verification bots steal your assets? (@Francois Le Nguyen got scammed by this!) How scammers impersonate team members? How to identify imposters? Server ban scams? Why links are bad? Tips to protect yourself

https://www.youtube.com/watch?v=SxOEsVP6_Ek

VERY common hack: compromising moderator accounts.

Video: (6:43 minutes)

Hackers compromise a mod account.

Hackers gain access to the discord. Post fake scam links, send users direct messages, etc.