Live data from Hacker News

Botnet Controls “Twitch Installs Arch Linux”

twitter.com

11–20 of 32 posts

Re: Botnet Controls “Twitch Installs Arch Linux”

#11
post #9

So, is there any way to stop this botnet? Seems to be that the only way to stop bots from abusing the twich IRC api is to ban each of them. I have programmed twitch spam bots before (repeats what people say, once on each account with eight accounts), it's surprisingly easy to do. Twitch does have some sort of system to detect if you are abusing the API I think, because I noticed that I get timed out pretty quickly.

A few ideas were thrown around with a third-party server and captcha necessary to validate your twitch account to send commands.

People working on it say it's being handled, but it definitely isn't a bad idea to brainstorm.

Re: Botnet Controls “Twitch Installs Arch Linux”

#14

I'd just like to interject for a moment. What you’re referring to as Linux, is in fact, GNU/Linux, or as I’ve recently taken to calling it, GNU plus Linux. Linux is not an operating system unto itself, but rather another free component of a fully functioning GNU system.

Oh shi, they are already here.

Re: Botnet Controls “Twitch Installs Arch Linux”

#16
post #7

I was in the stream and while at least some of the feats accomplished (partitioning the disk, installing the right things, changing the password) seemed to have some authenticity to it, the chat started to try to install nmap, then it tried investigate networking capabilities, tried to ping 8.8.8.8, to start dhcpcd, then tried to ping 8.8.8.8 again...all in rapid succession before anyone really discussed it at all. I…

Creator JRWR confirmed botnet in irc channel: https://i.imgur.com/qaWFUEH.jpg

JRWR is not a creator, he is one of the irc members who are looking into rebooting the project for us.

Re: Botnet Controls “Twitch Installs Arch Linux”

#17
post #11
post #9

So, is there any way to stop this botnet? Seems to be that the only way to stop bots from abusing the twich IRC api is to ban each of them. I have programmed twitch spam bots before (repeats what people say, once on each account with eight accounts), it's surprisingly easy to do. Twitch does have some sort of system to detect if you are abusing the API I think, because I noticed that I get timed out pretty quickly.

A few ideas were thrown around with a third-party server and captcha necessary to validate your twitch account to send commands. People working on it say it's being handled, but it definitely isn't a bad idea to brainstorm.

What about setting up a second site with a form: enter twitch name and answer a turing test question. also ask for person to create a new turing question with answer. Person has ability to request a few new questions before deny.

Submitted questions are approved by admins via rapid fire Y/N buttons, with ability to fix typos, etc.

This authenticates that user for something like 5-15 minutes or however long to participate in voting.

Post reply on HN