Feature request: Short urls that you can write by hand.

[oren-z0]

Hi,
I love the idea of tip-cards, but instead of pre-printing th QR codes, I want to print blank cards saying:

  Hey, you got a tip of ~$_____ 🎉
  Redeem at https://tipcards.io/______

Then, when I sit in a restaurant and want to leave tip, take one of the blank cards, go to tipcards.io on my phone, generate a new card number (i.e. "12345678"), fund it (i.e. with ~$2), fill the missing details in the card ("... a tip of ~$2 ... Redeem at https://tipcards.io/12345678") and leave it on the table.

I can pre-print many of these blank cards and teach other Bitcoiners how to use them (without them suspecting that I copied the QR cords), or even design new cards myself with no special integration.

I know that these short-url can be brute-forced, so I recommend adding some Captcha service to prevent bots from trying all the numbers.

Second, for beginners that want to get their first lightning payment, I always recommend https://ln.tips if they have Telegram. Yes, it's a custodial service and linked to your Telegram account, but for small amounts like tips they don't even need to bother downloading a new app.

Thanks!

P.S. It wasn't trivial to find this github page because it's not published in your homepage.

[dr-erych]

I really like the idea, because the problem actually applies to myself (as I don't have a printer at home).

We would need to be quite careful about where to put these features in the UI in order to keep it straight and simple. I already gave this a lot of thoughts but will still need some more time.

Also, there are a few other features planned that we would like to implement first, especially a login functionality via LNURL-auth to allow storing sets on the server (making it possible to access them across devices) and some other features. Currently the issues for those are still in our private Gitlab.

I know that these short-url can be brute-forced, so I recommend adding some Captcha service to prevent bots from trying all the numbers.

I would really like to avoid using an external service. If you have (or if anyone has) alternative elegant ideas on how to prevent brute-force attempts, let's hear them.

Second, for beginners that want to get their first lightning payment, I always recommend https://ln.tips/ if they have Telegram. Yes, it's a custodial service and linked to your Telegram account, but for small amounts like tips they don't even need to bother downloading a new app.

Yep, will look into adding it to the recommended wallets.

P.S. It wasn't trivial to find this github page because it's not published in your homepage.

Now it is, on the "About" page :)

[KodonFrost]

I would really like to avoid using an external service. If you have (or if anyone has) alternative elegant ideas on how to prevent brute-force attempts, let's hear them.

Run the instance yourself. "Nobody" knows you're hosting tipcards on your domain and bruteforcing someones private instance is most likely a net loss. Not really security, but the incentive to attack is extremely small this way.