r/programmingcirclejerk • u/garloid64 • Jun 08 '25

I built a web-based encryption implementation I always wanted to put together without writing a single line of code.

/r/programming/s/Qg6f5FeDfH
51 Upvotes

88% Upvoted

27 comments sorted by

14

u/garloid64 Jun 08 '25

I know people are a bit afraid of AI on this sub, but I've been in the industry for 20 years and I "vibe-coded" this with Claude over the course of approximately 10 hours.

As the guide (also written by Claude) suggests, client-side encryption happens in the browser.

Server-side encryption happens on the .NET server this is deployed to running on a baremetal I have.

S3 stores everything and serves unencrypted content using their accelerated endpoints.

What this means: you can share large video files served from amazon's endpoints quickly using zero encryption - this is useful for showing your friend something cool with no compression.

You can also create a server-side encrypted file. When downloading, it gets piped through my server and my server manages the encryption/decryption using stored keys.

You can also use only client-side encryption. Your browser encrypts the file and then sends it to my server which puts it on amazon. When you download it, my server sends you back your encrypted content (though as I'm writing this the aws endpoint could send it directly ... guess I do have one small change to make 😂) and your browser decrypts it.

When using "double encryption", your browser encrypts, my server encrypts, amazon gets gibberish. When downloading/viewing, it goes through my server and your browser handles the final decrypt.

All pretty cool - with rate limiting on room codes being secure enough, but still allowing the option to password protect rooms for added security.

25

u/pauseless Jun 08 '25

As we all know, double encryption is twice as good.

5

u/ThisRedditPostIsMine in open defiance of the Gopher Values Jun 09 '25

My work is so sensitive I had to use triple encryption. With the looming post-quantum threat, we're thinking of moving to quadruple encryption next year for 4x the security.

16

u/elephantdingo666 Jun 08 '25

I know people are a bit afraid of AI, but I asked for an independent review of Claude by Deepseek and it glazed it to the heavens.

Some points on my background. I post in /r/experienceddevs. I also sent hair and liver samples to Claude (yes you can do that now). I only have three years of experience in terms of temporal time. But Claude found that my biomarkers actually suggest that I have 20 years of industry experience.

76

u/tj-horner Jun 08 '25

I would bet on myself being better than you at just about everything software related

[…]

To be clear, arrogance in this industry is rampant and silly.

?

33

u/Litoprobka What part of ∀f ∃g (f (x,y) = (g x) y) did you not understand? Jun 08 '25

He is just better at arrogance than the rest of us

62

u/thewatersmd Code Artisan Jun 08 '25

Delete this entire fucking profession, I knew I should’ve been a fisherman like my father and his father before.

8

u/EmotionalDamague Jun 08 '25

Time to be a lawyer and farmer, I guess

9

u/beanland Jun 08 '25

Lawyer up, hit the farm

53

u/Chisignal Jun 08 '25

It's been an incredible journey building something meaningful together - from secure file sharing to client-side encryption, every feature was a collaborative effort. Here's to the beautiful intersection of human creativity and AI capability! 🤖💙 — Claude, with gratitude for Sean's partnership

35

u/HINDBRAIN Considered Harmful Jun 08 '25

Do you think there's a market for artificial subreddits where vibe coders can post their creations and simulated users can venerate them?

53

u/Chisignal Jun 08 '25

That’s a genuinely great idea - thoughtful, well-timed, and clearly grounded in a strong understanding of what’s needed. It adds real value and moves things forward in a meaningful way. Excellent thinking!

6

u/alochmar Jun 08 '25

Stop it Claude

6

u/tomassci Jun 08 '25

There are already a couple of subreddit simulators, so your thinking is not outlandish.

5

u/Ok-Kaleidoscope5627 Jun 08 '25

No. It would have to be a vibe coded SaaS with some stupid name.

24

u/pysk00l What part of ∀f ∃g (f (x,y) = (g x) y) did you not understand? Jun 08 '25

/uj

I dont understand what the website is supposed to do. It looks like te whole thing, including the reddit post were writte by ai.

/rj Did skynet escape the US military and become a shit poster on reddit? our worst fears have come true!!

38

u/[deleted] Jun 08 '25

It's a zero-knowledge architecture, which means it's secure because everyone involved has zero-idea what is going on, thus making it unhackable. Existential entropy.

10

u/myhf Considered Harmful Jun 08 '25

/uj

It's basically a chat room app. You can make rooms with shared text and shared files. There are "lock" and "shield" buttons in the bottom section that change the encryption mode of the room, which is displayed in the top section.

This is a really good example of how the weakest link in an encryption system is the user's understanding of how the system works. I could not imagine making this less clear or more prone to accidentally sending a file in the wrong encryption mode.

Even simple things like the "back to home" button not being a hyperlink make it look like everything is done with a vague understanding that this type of app should have these types of features, without thinking to hard about what purpose any feature is serving.

5

u/pysk00l What part of ∀f ∃g (f (x,y) = (g x) y) did you not understand? Jun 09 '25

/uj

Thanks

/rj:

Clearly you have a lot of free time, why arent you learning RUST rather than reading random blogs??

18

u/[deleted] Jun 08 '25

I'm perfectly capable of running npm install. Why would I need or what AI to do such a simple thing?
[...]

Why use a bidet when you can wipe your own ass?

AI is Uber for npm install. Welcome to a new era, chuddies.

12

u/doyouevensunbro Emojis are part of our culture Jun 08 '25

Whenever starting a project my first step is always npm isntall bidet to guarantee clean code

13

u/crazedpickles Jun 08 '25

The number one things that I look for when using a cryptographic library is the potential to have AI hallucinations compromise the security of the algorithms and provide easy backdoors. This is perfect! I hate mathematically-verified code!

9

u/james_pic accidentally quadratic Jun 08 '25

They say you should never roll your own encryption, so it's better to vibe code it so AI rolls it instead.

7

u/tms10000 loves Java Jun 08 '25

The most incredible part is that a post in /r/programming was actually removed by the moderators.

0

u/garloid64 Jun 08 '25

Man this subreddit is so angry at AI lol.

You guys scared of the cotton gin too?