Luke Oliff · Blog
Writing.
Original posts, published first on this site. Imported posts live in the archive.
SearchAI (50)API Design (13)APIs (23)Career (6)Community (1)Developer Experience (52)Developer Relations (2)Engineering (124)Fun (1)Git (12)Industry (29)JavaScript (6)Latency (2)Models (2)News (17)Open Source (19)Opinion (35)Pricing (1)Security (10)Speech-to-Text (9)Streaming (4)Text-to-Speech (29)TIL (110)Voice Agents (7)Voice AI (74)
260 posts
2026
Biome Replaced ESLint and Prettier in My SetupOriginalBiome 2.5 replaced ESLint and Prettier in my setup with one biome.json. A real config, the migration commands, and the honest gaps I still hit.JavaScript
Regulatory Capture Is the Real AI Safety PlayOriginalThe AI regulatory capture playbook is simple: hype the danger, ask to be licensed, and price out anyone smaller. Meanwhile open-weight labs ship faster.Opinion
What Python 3.15 Changes, and What to Test NowOriginalThe Python 3.15 changes worth testing on the release candidate now: free-threading progress, lazy imports via PEP 810, and UTF-8 as the default.Engineering
fd 10.5 Is the find Replacement Worth MemorizingOriginalfd 10.5.0 landed on 26 August 2026 with --ignore-parent, --exact and escape-sequence hardening. The fd find replacement flags actually worth committing to memory.TIL
The Tradeoffs Async/Await Hides From YouOriginalThe async await tradeoffs are real: colored functions, hidden scheduling, and error propagation that surprises you. A look at what the keyword actually hides.JavaScript
AI Safety Became a Marketing DepartmentOriginalThe frontier labs turned real AI safety language into marketing: scary demos on launch day, consciousness-adjacent research posts, and risk framed as a feature.Opinion
The Case for a Keyboard-Driven WorkflowOriginalThe CLI tools and shortcuts behind a keyboard-driven workflow that cut my mouse use to almost nothing, and the two places the mouse still wins outright.Opinion
When Python Case Folding Becomes a Security BugOriginalPython case folding with str.lower() and casefold() can quietly turn a string check into an auth bypass. A concrete Unicode footgun, and the fix.Security
Node 26.8 Put Syntax Highlighting in the REPLOriginalNode.js 26.8 added syntax highlighting to the REPL, so the interactive prompt now colours your code as you type it. A small node repl highlighting win worth having.JavaScript
The Critical Next.js Security Patch You Shouldn't SkipOriginalThe August 2026 Next.js security patch fixes two critical RCE bugs. Here is what 16.3.3 and 15.5.24 close, and how to audit your own app for the same class.Security