(VTuber) Sepphoris 🏴☠️ | Space Pirate Vtuber · @Sepphoris_VT
22nd Nov 2022 from TwitLonger
Soyjak, and how you can protect yourself again them.
If you wish to skip the insight/details on what Syjak is, you can skip to the part below the "=====" division.
So for those in the dark, a group of anonymous individuals on the website "soyjak . party" - AND DO NOT GO TO THIS SITE, as it almost certainly has IP trackers, and potentially other trackers as well - have been performing raids on many individuals and groups, with the intention to disrupt, flame, and ban/penalize the target(s) if applicable. In our community this most notably has happened to several VTubers over the last week - DesyncZX, AspenFrostEN, MarteenieVT - but this has also included streams that are not within the VTuber community, and even private or business calls on services such as Zoom. Any public/semi-public meetup or collab is fair game.
The Soyjak group(s) are mainly targeting people where they can make a widely seen impact, normally publicly. They organize entry via the site (channel names, invite links, etc.), direct each other on what to say/do, then mass report as soon as they can. This makes them a threat against anyone wanting to host events that the public can access, with OpenVCs and Jackbox being the prime (though not the only) examples. Harassing people that are within the trans and/or furry community are massive "wins" for them as well.
====================
I have compiled a list of steps you can take to prevent this from happening, and how to respond if it does happen. I will spread more awareness and tips as I can, and as they come. And yes, I am 100% aware that this PSA, and can result in retaliation against me in any way. But people need to know how to diffuse the threat before it happens.
1: make sure you have a "buffer" between people joining your channel, and your VCs. Make sure people have to meet some sort of criteria that takes effort, or manual steps are required by a moderator to get someone within the VC. Soyjak's #1 targets are people who have no security measures on their servers.
2: Make sure your Discord server has proper permissions set for everyone. One thing that these people point out in their threads is when a server allows the @/everyone ping (ort some other spammable ping). Slow mode, and restrictions on image posting is recommended to be considered as well.
3: Set sensitive streams to "follower-only" chat requirements, with at least 5 minutes of wait time. That way, if you suddenly see a ton of people/followers pop up, you will know ahead of time.
3: If you have hotkeys (a Streamdeck, or a numpad used in the same way), assign a quick key to a muted BRB screen that you can use the SECOND you think you are being raided. These groups live for the reaction and the banning. Not only will this protect your viewers, it will also protect your stream.
4: In the case of Jackbox or other games with a visual aspect: if you have random or shady people playing, check the Jackbox results BEFORE they are shown on stream. This can be done by putting up a scene that is absent of the Jackbox window, or adding in a black box above the window that is toggled on and off. It will get rid of the "surprise" element a bit, but it makes sure everyone is safe.
5: Keep your guard up. As toxic as these people might be, they are not dumb. These people know internet, social, and channel security, and if there are ways around it, they WILL look for it. Be aware of social engineering, or some playing the waiting game. ALWAYS have contingencies, and unless you 100% know the person wouldn't be up to anything, don't trust people you just met.
6: Be aware that if you successfully stop a raid, or have called them out, they will look for ways to get back at you, regardless of how petty it is. If you have sensitive info anywhere - whether on Twitter, YouTube, or some other social site - make sure it's protected or private. Even your full name, or a business email, is enough for them to dig up EVERYTHING about you, from other accounts all the way to your current address. They are known to dox, pull up private images, order fake pizza deliveries, etc. Don't give them the chance.
7: Do NOT try to retaliate beyond spreading awareness. They want the attention, and they want a reason to dig deeper into your personal info. Not only will it not work, but you don't need to stoop to their level.
It is likely that most VTubers out there will not be targeted, especially if you're not within any of their "prerequisites", but it's always possible, and always better safe than sorry. Everyone be careful!