Nice. I run the community jar, which I built just as a learning experience. Looks like this may be the same type of thing. I'm going to move my faucet to it's own website one day too (and pretty it up). I found it's really hard to enforce the 100 satoshi per hour rule. It's a learning experience!
I would not fund coinpanic jar, users abuse that faucet.
I am just transparent with the coinpanic jar. This one doesn't seem to show you the transactions. I am sure it is abused as much or more :).
Hi, I am the creator of https://lightning-faucet.com/ I am open to suggestions on how to improve the service!
How are you finding the abusive users and attackers? Any luck limiting your withdraws. Anyone script it yet?
it's too early to tell about attackers at the moment. Trying to polish the outbound routing at the moment as the node is quite new!
How do you handle the rate limiting? Do you use IP/cookie/node pubkey/other? I found this was the hardest part to implement. Node pubkey doesn't work since some people use custodial wallets (although I could make a design decision to force use of own nodes). IP is easy to spoof or VPN. I use recaptcha to try and block bots, but some people still find a way around it.
Overall, it was a good security exercise for me to build that faucet. I make the list of payments public so people can see deposits/withdraws (for transparency).
Thanks! I love to see things like your work too. Is your faucet open source? I made the community jar and Zapread open source. You can find it on GitHub. It's easy to start developing and contributing if you want. I can't pay much yet but I do reward contributions with a bit of Bitcoin.
It's not open source yet, maybe in the future. I will check out your GitHub and see if there's anything I can help with.
I tried withdraw but errors, 10 and 100 nothing, from different wallets, cobo wallet, zapread and wallet of satoshi.
You need to connect better your node, I will test later again
Sorry about that, I'm opening more channels now! :)