We were keeping it running as long as we felt comfortable to do so, but due to our lack of preparation for an actual attack, we decided to cut it when it was obvious that the majority was voting too perfectly on actions that were turning malicious.
At this point, we are not sure how we are going to be continuing with this project. The time investment required to make this secure is much larger than we initially anticipated and our current setup is not optimal to do so. Along with this, we are both currently students and do not have the time to invest in such an undertaking. However, we are currently talking with a group that is attempting to reboot this idea immediately in a more secure environment. We will be exploring our options on how to best keep this project going.
All of our code is available on github at https://github.com/twitchinstallsarchlinux
It's kind of upsetting. It was very exciting in the beginning--the internet installing a bootable arch linux system by voting for a single character at a time in under 3 hours...seemed unimaginable. But after the dhcpcd stuff started, it felt like that victory was taken from us.
EDIT: it WAS a botnet, see the reply from pdaddyo
I doubt the `ping 8.8.8.8` was botnet though as its standard to test out your internet to see if you enabled it or not. Chat was trying to pacman -S something. People were encouraging others to type "ping 8.8.8.8"
JRWR: So, the creators of this project have left. they no longer want to be a part of this any more. they have their reasons and I will NOT be disclosing it. The creators have handed over the keys to JRWR and yamamushi
JRWR: This project WILL live on, give us 24/48 hours to make something nice, we have their code and will expand on it.
yamimushi: We are working to get everything back online asap
And yes the reasoning for shutdown was the botnet, not pings or Google complaints.
I have programmed twitch spam bots before (repeats what people say, once on each account with eight accounts), it's surprisingly easy to do. Twitch does have some sort of system to detect if you are abusing the API I think, because I noticed that I get timed out pretty quickly.
People working on it say it's being handled, but it definitely isn't a bad idea to brainstorm.
Submitted questions are approved by admins via rapid fire Y/N buttons, with ability to fix typos, etc.
This authenticates that user for something like 5-15 minutes or however long to participate in voting.
And then cross my fingers that there are no KVM bugs.