Welcome to the Cyber Pirata Volunteer Moderator Guide. This document provides essential information for those interested in contributing to our vibrant cyber community.
At Cyber Pirata, we celebrate the spirit of the cyber-pirate culture through merchandise, threat feeds, and engaging meetups. Our goal is to create an authentic experience that reflects the energy of the community.
Roles and Responsibilities
- Facilitate discussions and maintain a welcoming environment.
- Monitor community interactions to ensure adherence to guidelines.
- Assist in organizing events and meetups.
- Provide support and resources to community members.
Best Practices
- Be respectful and inclusive in all communications.
- Encourage participation and diverse perspectives.
- Address conflicts calmly and fairly.
- Stay informed about community updates and resources.
Your contributions as a volunteer moderator are invaluable in fostering a positive and engaging atmosphere at Cyber Pirata. Thank you for your commitment to our community!
Handling Tricky Situations as a Moderator
The basics of moderating are easy to list. The harder part is knowing what to do when a conversation turns messy. A security community attracts curious people, and curiosity sometimes drifts into grey areas. These notes cover the situations volunteers run into most often.
Drawing the line on technical discussion
Talking about how attacks work is part of learning defence. Helping someone break into systems they do not own is not. A useful test is to ask whether the person is describing their own lab, a published vulnerability or an authorised engagement. If a request names a real target, such as a former employer, a classmate's account or a local business, step in. Remind the member that the community only supports legal, authorised testing, and remove instructions that could cause harm. Point newcomers towards practice environments and capture-the-flag events instead.
Sensitive data in threads
Members sometimes paste logs, screenshots or indicators while asking for help. Watch for:
- Personal information about real people, including emails, home addresses and phone numbers
- Credentials, API keys or session tokens, even ones described as "expired"
- Leaked datasets or links to them
- Internal hostnames or IP ranges that identify someone's workplace
Hide or remove the material quickly. Then message the poster privately so they can rotate any exposed secrets. Do this without public embarrassment. The same care applies to indicators shared alongside our threat feed: stick to what is verified and label anything speculative.
De-escalating disagreements
Arguments about tools, vendors and disclosure ethics can get heated. Before you act:
- Move the conversation to a calmer thread if it is derailing another topic.
- Address the behaviour, not the person's opinion.
- If warnings do not work, take a short break from the discussion. Talk with fellow moderators before issuing any longer restriction.
Keep brief private notes on the actions you take. That way decisions stay consistent across the team.
Moderating in person
At meetups, the same principles apply face to face. Greet first-timers and keep demos on equipment people are authorised to use. Know who the organiser is in case an issue needs escalating. Check the events page before each gathering for format details.
If you are ever unsure, ask another moderator. Pausing a decision is always better than rushing it.
Also on this site: Kate Upton Trains with the US Marines