Skip to content
Photo of small R

Hi —

I'm small R.

small R, alaner652 online. Taught myself Roblox Studio in middle school; in 2022 people started paying me to write games. Later I built my own products, front end, back end and deployment all by myself. In 2026 I reported a vulnerability in the school's administrative system, the computing center brought me in, and now I do authorized security work and internal automation there.

— small R

  1. If the answer can be found, it can be built.
    — Opening Roblox Studio for the first time
  2. Building it doesn't mean anyone wants it.
    — Roblox freelance work
  3. "It runs" and "it holds up" are two different things.
    — After the Foodie AI backend died
  4. Seeing the problem doesn't mean you have permission to touch it.
    — The university computing center

Since the first time I opened Roblox

  1. 2019，Games

    Opened Roblox for the first time

    Playing at first. Then I found out games could be made, and that's where looking up English tutorials and YouTube began.

  2. 2020，School change

    Sports class, then a transfer

    First semester in a sports class, transferred the second. I was deep into Roblox and spent most of my time there.

  3. 2021，Games

    Started making games and writing code

    Roblox Studio and Lua: from editing maps to understanding functions, events and objects, until I finished a game of my own.

  4. 2022 — 2023，2022—2023 · Freelance

    People started paying me to write

    First paid job in 2022. Later I worked regularly with developers around the world, all in English, on skill systems, combat feel and FPS frameworks.

  5. 2023，Web

    Started on the web

    Began learning front end and the web, the first things outside games.

  6. 2024，Community

    Went out to see how others work

    Started going to meetups in different fields. That summer I went to a Flutter Meetup as a developer; I was the youngest person in the room.

  7. 2025，Security

    Slowed down, then found my first hole

    Fewer events, more time alone digging in; security grew out of this year. Found my first vulnerability in the school system, reported it through HITCON ZeroDay, and the computing center brought me in. Started applying for internships too.

  8. 2026 —，Now

    A year that hasn't started yet

    The computing center work continues. Games, part-time work, startup ideas and self-study go on in parallel.

    and this is now ↑

Skills

Languages
  • Python
  • TypeScript
  • Lua / Luau
  • SQL
Backend and data
  • FastAPI
  • Next.js API Routes
  • Drizzle ORM
  • SQLite
Frontend
  • Next.js
  • React
  • Tailwind CSS
Infrastructure
  • Docker
  • Linux
  • OpenWrt
  • Cloudflare Tunnel
  • Proxmox
  • Tailscale
Security
  • Burp Suite
  • IDOR / XSS / CSRF
  • Responsible disclosure
  • WAF / reverse proxy
Off duty

Weekends on mountain roads