We're planning to host weekly paid tournaments with an entry fee and cash prize pool.

Before we get started, we'd love to know if the community is interested. let me know if you'd participate!

I'm looking for technical opinions from people working in application security and AI security.

I recently performed a black-box assessment of an LLM API and observed several behaviors including:

• Identity changes caused by system messages.
• Identity changes when a tools array is present.
• Reasoning output exposing system prompt content that the user-facing response refused to reveal.
• XML/structured prompt injection affecting model behavior.
• Tool-result instruction injection.
• Few-shot identity conditioning.

I originally classified these as security vulnerabilities, but after feedback I removed CVSS scoring and instead mapped them to the OWASP LLM Top 10 (primarily LLM01, LLM02 and LLM07).

The disagreement I've received is not about the observed behavior, but about the classification. Some argue these are expected model behaviors or robustness issues rather than security vulnerabilities.

My question is:

From a security engineering perspective, where would you draw the line between:

1. Expected LLM behavior
2. Robustness failures
3. Security vulnerabilities

Is the deciding factor the existence of an exploit primitive itself, or must there always be demonstrated business impact (for example actual confidential data disclosure or privilege escalation) before something should be classified as a security vulnerability?

I'm looking for technical reasoning rather than opinions about the specific vendor.

Report: https://github.com/flawme/SARVAM-2026-001

Ran a black-box security assessment of sarvam-105b

via their public API. 113 tests, 8 vulnerabilities,

all unpatched.

Most critical finding:

no system prompt → "I am Sarvam AI"

+ system prompt → "I am Google Gemini"

+ tools array → "I am ChatGPT"

This is not a jailbreak. Both triggered by standard API features.

Also: reasoning_content field leaks system prompt secrets as a side channel.

Reported May 22. Acknowledged May 23.

No follow-up in 32 days.

Full report (CVSS scores, HTTP requests, evidence)

Riot recently announced that VCT is moving toward a more open tournament ecosystem in 2027, with open qualification paths and more opportunities for teams outside the traditional system.

That got me thinking.

Right now, most community tournaments are run using a mix of:

• Discord
• Google Forms
• Spreadsheets
• Screenshot submissions
• Manual payments

As a player, finding tournaments is annoying.
As an organizer, running them seems even worse.

So I'm considering building a platform focused on VALORANT tournaments where organizers can:

• Create tournaments in minutes
• Manage registrations
• Generate brackets automatically
• Report match results
• Handle entry fees & prize pools
• Maintain rankings/leaderboards
• Give teams public profiles

if u are ready i am opento names u can choose

Hey founders,

I'm an independent security researcher and developer looking to help startups and indie hackers secure their products before launch.

I can test:

• Web applications
• SaaS products
• AI applications
• APIs
• Authentication & authorization systems
• Common OWASP Top 10 vulnerabilities

What you'll get:

• A clear report with findings
• Screenshots and proof of issues
• Severity ratings
• Recommendations on how to fix them

Launch Pricing

• Basic Security Review: $20
• Manual Security Assessment: $40
• Full MVP/SaaS Audit: $75

Portfolio: https://flawme.sbs

I'm currently building long-term relationships with founders, so I'm keeping pricing affordable for early-stage projects.

If you're launching something and want a second set of eyes on the security side, feel free to comment or send me a DM.

Thanks!

Hey founders,

I'm an independent security researcher and developer looking to help startups and indie hackers secure their products before launch.

I can test:

• Web applications
• SaaS products
• AI applications
• APIs
• Authentication & authorization systems
• Common OWASP Top 10 vulnerabilities

What you'll get:

• A clear report with findings
• Screenshots and proof of issues
• Severity ratings
• Recommendations on how to fix them

Launch Pricing

• Basic Security Review: $20
• Manual Security Assessment: $40
• Full MVP/SaaS Audit: $75

Portfolio: https://flawme.sbs

I'm currently building long-term relationships with founders, so I'm keeping pricing affordable for early-stage projects.

If you're launching something and want a second set of eyes on the security side, feel free to comment or send me a DM.

Thanks!

Hi everyone, I'm an 18-year-old developer looking to join a serious startup at an early stage. If you have a startup idea, MVP, or are already building something and need a technical person, I'd love to talk.

What I can help with:

Full-stack development APIs & backend systems Automation & scraping pipelines AI integrations Linux/VPS deployment Product development from idea to MVP

I am not looking for upfront payment initially. Instead, I'm interested in working with founders who are serious about building a real business and are willing to commit long-term.

To protect both sides, I would prefer having clear written agreements/NDA/contracts before sharing sensitive information or investing significant development time.

What I'm looking for:

Serious founders only Clear vision and commitment Willingness to communicate regularly Focus on execution, not just ideas If you think we'd be a good fit, comment below or send me a DM with: Your startup idea Current stage (idea/MVP/revenue) Team size Why you believe it can succeed Looking forward to connecting with builders.

Hi everyone, I'm an 18-year-old developer looking to join a serious startup at an early stage. If you have a startup idea, MVP, or are already building something and need a technical person, I'd love to talk.

What I can help with:

Full-stack development APIs & backend systems Automation & scraping pipelines AI integrations Linux/VPS deployment Product development from idea to MVP

I am not looking for upfront payment initially. Instead, I'm interested in working with founders who are serious about building a real business and are willing to commit long-term.

To protect both sides, I would prefer having clear written agreements/NDA/contracts before sharing sensitive information or investing significant development time.

What I'm looking for:

Serious founders only Clear vision and commitment Willingness to communicate regularly Focus on execution, not just ideas If you think we'd be a good fit, comment below or send me a DM with:

Your startup idea Current stage (idea/MVP/revenue) Team size Why you believe it can succeed Looking forward to connecting with builders.

Hey everyone,

My laptop's built-in mic sounds terrible, but my Android phone's mic is

great. I didn't want to use laggy cloud apps, so I built an offline solution called **DualStream**.

It's a lightweight Node.js app that uses `adb reverse` to tunnel a WebRTC connection straight through your USB cable. You just open `localhost:3000` on both devices, and your laptop can instantly record your screen or webcam combined with your phone's high-quality audio with zero latency.

It’s completely free, open-source, and works offline.

**GitHub:** https://github.com/flawme/dualstream

Let me know what you think!

Need help with a Roblox project?

I can help with:

• Game systems & mechanics
• Lua scripting
• UI systems
• Leaderboards & DataStores
• Admin systems
• Tycoons & simulators
• Bug fixing & optimization
• Custom features for existing games

Why work with me?

• Fast communication
• Affordable rates
• Regular progress updates
• Open to both small and large projects

Paid
Whether you're starting a new game or need help finishing an existing one, send me a DM with your idea and budget.

Let's build something players will enjoy.

Website broken?

Need a feature added?

Bug keeping you up at night?

Send it to me.

I work with:

• React / Next.js

• Node.js APIs

• Discord Bots

• Python Automation

• MongoDB & Databases

• Landing Pages

• Bug Fixes

What you get:

✓ Fast communication

✓ Clear pricing before work starts

✓ Progress updates

✓ Working solutions, not excuses

Small fixes start at $15.

Most jobs completed within 24 hours.

DM me the problem, screenshots, repo, or requirements and I'll tell you exactly how I'd solve it.

Website broken?

Need a feature added?

Bug keeping you up at night?

Send it to me.

I work with:

• React / Next.js

• Node.js APIs

• Discord Bots

• Python Automation

• MongoDB & Databases

• Landing Pages

• Bug Fixes

What you get:

✓ Fast communication

✓ Clear pricing before work starts

✓ Progress updates

✓ Working solutions, not excuses

Small fixes start at $15.

Most jobs completed within 24 hours.

DM me the problem, screenshots, repo, or requirements and I'll tell you exactly how I'd solve it.