Great read, can recommend!
reply
You are doing great work, fiatjaf. And Hampus is preparing something like you described with his Lightning Box. Exciting times!
reply
I was wondering what would happen if people start using stacker.news as a wallet. It would probably have to implement limits for users on how many sats they can stack on an account in order to reduce liquidity issues on the lightning network and maybe this concept can help then
reply
What about doing some LN signmessage to get the information in the first place, instead of just calling a particular URL which anyone can do? If the attacker gets to the URL and gets a new randomly-generated balanceCheck URL for next time, the original owner needs to do extra steps to reset things and re-gain access. Of course no sats are stolen, but human time is.