[verdict][curated prompt][source: cinesend.com]
Can I vibecode CineSend?
// the value is the network, the data or the infrastructure
The file delivery is not the product. The product is that A24, HBO, and Sundance accept it. A screener page with an expiring link is an afternoon, and it buys you nothing, because the two things CineSend actually sells cannot be written by an agent at any price: forensic watermarking, which is a licensed product from Nagra that survives a camcorder pointed at a monitor and traces the leak back to one named viewer, and studio-grade DRM, which needs license keys Google and Apple issue to companies, not to your VPS. Underneath both sits the part no code touches · a rights holder's legal team signing off on where their unreleased master is allowed to sit. You can build a private video page. You cannot build permission to receive the film.
confidence: high
what it is: Secure screener and media delivery with DRM, forensic watermarking, geo-blocking, and view limits
Buildability index · an editorial game
- Price 797 $/month weight: plus 3
- Time not realistically solo weight: minus 3
- Category audio and video no weight
- Moat brand and trust · compliance and regulation · infrastructure scale weight: minus 5
- Confidence high weight: plus 1
- What you lose 6 items weight: minus 3
- Site cinesend.com (si apre in una nuova scheda) no weight
It is not close. The prompt below rebuilds a piece, not the product.
Gioco editoriale: il verdetto dice se un agente può, l’indice se conviene.
What you build
The honest floor: expiring private screener links with a visible per-viewer burn-in, view limits, and an access log. Deterrence, not security.
what you need
- ffmpeg
- object storage plus a CDN
- a VPS for the screener pages
- an email sender for invites
- an accurate understanding of what a visible watermark does and does not stop
The purest no on the list · the deliverable is not software, it is a rights holder's permission.
The prompt
The verdict is NOT REALLY, and the prompt stays anyway: it does not replace the app, it rebuilds the part that really is code. The rest is the moat.
Build me a watermarked private screener site for footage I own: my own film,
a rough cut for producers, a festival submission I control. This is the
deliberately low-stakes floor of CineSend, never a substitute for it when
someone else's unreleased master is involved. Requirements:
- Node + Express + better-sqlite3 on a VPS, media in Cloudflare R2, hls.js for
playback. Server-rendered pages, no frontend framework.
- I invite viewers by name and email. Each gets a single-use /s/<random-id> link tied
to that address, with an expiry date and a max view count I set per invite.
- ffmpeg burns the viewer's name, email, and the date into the picture as a semi
transparent overlay, one encode per viewer, cached in R2 and deleted on expiry. It
is visible and it is meant to be, deterrence is the entire mechanism.
- Every play logs timestamp, IP, user agent, and how far they watched, shown on an
/admin page behind basic auth. I can revoke any link instantly.
- Downloads are off, right click is off, and the manifest URL is signed and short
lived. State plainly in the UI that none of this stops a screen recording.
- SQLite holds invites and the access log, R2 keys and the SMTP credentials come from
.env. No accounts for viewers, no telemetry, no third party analytics.
- Out of scope: DRM, forensic watermarking, and TV apps. Do not claim to implement
any of them and do not build a fake watermark that only sounds forensic.
- README: R2 and signed URL setup, per-viewer encode cost and time, and one blunt
paragraph saying this is deterrence only and must never be used for a title under
someone else's security requirements.Curated prompt: written and reviewed by hand for this app. In English on purpose — it is the language coding agents work best in.
What you lose
- NexGuard forensic watermarking that survives re-encoding and a phone pointed at the screen
- Widevine, FairPlay, and PlayReady DRM, which require licensed keys issued to companies
- the studio and festival trust that makes anyone send you a master in the first place
- Aspera acceleration for moving finished masters across continents
- branded Apple TV, Roku, Fire TV, and smart TV apps for the screening room
- the audit trail and chain of custody a distribution contract asks for
Why people still pay
They pay to be allowed to hold the file. A distributor's security requirements are a contract term, not a preference, and the accepted vendor list is short on purpose. When a screener leaks, forensic watermarking turns a catastrophe into a phone call to one person, and that single capability justifies the whole line item. Nobody is paying 797 dollars a month for a download page.
moat: Brand and trust Compliance and regulation Infrastructure scale what a moat is
licensed DRM/forensic watermarking/rights holder trust
Who has already built it
Starting from here is still vibecoding: the prompt is for when you want it exactly your way.
- Nextcloud (opens in a new tab) — Self-hosted file sharing with password-protected, expiring share links and access logs. Genuinely solves the delivery half, and stops exactly where the licensed half starts. (alive)
- Shaka Packager (opens in a new tab) — Open-source packaging with Common Encryption for Widevine and other DRM systems. Shows the wall clearly: you can encrypt the stream, but the license server and the device keys are not yours to issue. (alive)
Do you agree?
The vote balance
Ancora nessun voto: il tuo è il primo.
Nessun voto ancora — il primo pesa.
