28creation Desk
Pieces published by 28creation. Every fact links to its source, and corrections are noted at the top of the piece they affect.
- Guide Work software
Excel CSV imports that mangle zeros and dates: 12 traps tested
A CSV has no column types, so spreadsheets guess. Our test file lost half its cells to guessing; typed text columns kept all 24.
- Analysis Automation
Power Automate vs Zapier for Microsoft 365: 35 apps checked
Microsoft 365 already pays for flows between Outlook, Excel, SharePoint and Teams. We checked 35 apps on both tools and priced three flows.
- News Work software
Nextcloud Collabora flaw joins CISA list; 29 and older get no fix
Attackers use a flaw in Nextcloud's built-in Collabora server to plant web shells. Nextcloud 29 and older have no patched build: upgrade or remove the app.
- Guide Automation
Bank statement PDFs to Excel: 3 free tools tested on 5 layouts
On five sample statements we made, Camelot read all 154 transactions. The running balance catches lost rows and wrong amounts, not wrong dates.
- News Developer tools
Brotli flaw spreads past Node.js to Python, Envoy, Istio and Bun
CVE-2026-111497 sits in Google's Brotli decoder, so any service that unpacks Brotli data needs a patched build, not only Node.js apps.
- Guide Automation
PDF invoices to Excel: free tools tested, paid APIs priced
On 10 sample invoices we made, two free table readers got 55 of 58 line items right. Paid APIs cost 1 to 10 cents a one-page invoice.
- News AI
OpenAI Decisions API leaves beta with no charge for output
Classifiers and routers can get typed answers from gpt-6-luna for $0.10 per million input tokens. The saving is the output fee; the bigger change is speed.
- Analysis Automation
Self-hosted n8n is free while only staff build the workflows
The license lets you run n8n and charge clients for workflows, not hand them the editor. SSO, Git and environments need a paid key; a 2 GiB server is about $12.
- News Work software
Arc browser stops working December 22; export keeps only links
Arc data deletion starts after December 22. Dia imports passwords and history; Arc's own export saves only a list of tab links.
- Analysis Automation
Office Scripts vs VBA: what each can still do in 2026
VBA reaches the whole PC but not the browser. Office Scripts can run on a schedule but sees only the workbook. A table from Microsoft's docs, and what to move.
- News Developer tools
eMudhra quits TLS after key flaw; old trust stores still at risk
Browsers already block eMudhra's eight broken CAs. Servers, scripts, containers and macOS command-line tools may still trust them until you update.
- Guide Automation
Mail merge from Google Sheets to Gmail, with a PDF for each row
Gmail's mail merge works on seven Workspace plans and sends one file to all. Our script makes a PDF per row; we tested it on stand-ins, not Google.
- News Developer tools
GitLab CVSS 10 flaw hits every release since 7.0; patch again
A login-free code execution flaw hits self-managed GitLab servers on every release since 7.0. Older 19.x and 18.11 lines got fixes too.
- Analysis Automation
Google Apps Script vs Power Automate: limits and prices compared
Both are free with the suite. Apps Script needs code and stops each run at 6 minutes; Microsoft 365 flows get 6,000 actions a day and standard connectors only.
- News Developer tools
PHP fixes are out: 8.5.12, 8.4.27, 8.3.36 and 8.2.35
PHP's two critical flaws hit every PHP web server, and only the update closes them. Ubuntu packages carry the fix under different version numbers.
- Analysis Automation
Employee monitoring and GDPR: why consent fails and what works
Recording staff to find work worth automating usually needs a legitimate interest test and an impact assessment, not consent. Regulators' texts, compared.
- News Developer tools
PHP patches two critical bugs today; 8.1 and older get no fix
PHP ships fixes for two remote code execution flaws at 14:00 UTC. Sites on PHP 8.2 or newer can patch; older ones need a host's backport or an upgrade.
- News AI
Gemini small-business hub: which account keeps receipts private
Google's new Gemini tools read receipts and Xero books. On a personal account, people may review chats; on Workspace, they stay in house.
- News Developer tools
Google Cloud London outage: one-zone power event hit 38 products
A power event in one London zone disrupted Revolut for hours, and Google reported errors beyond that zone. What that means for multi-zone setups.
- Analysis Automation
xkcd's automation table, recomputed with upkeep counted
At an assumed hour a month of upkeep, 5 of 7 common tasks in our recomputed xkcd table never pay back. The script is below, so change the inputs.
- Analysis Automation
Zapier, Make and n8n priced for one workflow at 10,000 runs
One lead workflow at 10,000 runs a month, billed yearly: $289 on Zapier, $50 on n8n Cloud, about $29 on Make (unconfirmed on make.com). We also ran n8n.
- Analysis Automation
Task mining vs process mining: logs are cheap, screens are risky
Process mining reads logs your systems already keep; task mining records desktops. We mined sample logs of both kinds and read the prices and GDPR texts.
- Guide Automation
Gmail to Google Sheets automatically, with and without code
A free 96-line Apps Script, Zapier or Workspace Studio can fill a sheet from Gmail. We tested the script on 13 sample emails in a stand-in, not live Gmail.
- Guide Automation
Automation payback: a formula that counts the time to fix it
Much of upkeep does not shrink with a task's size, so it sinks small automations first. A tested template, priced with US wage data.
- Guide Automation
Email data into Excel automatically: three methods tested
The label-split recipe most tutorials teach got 8 of our 20 test emails right when we emulated it. A script and an AI prompt read all 100 fields.
- News AI
Cloudflare's Clairic reads invoices for $0.10 per million tokens
A preview model returns invoice fields with confidence scores, not generated text. The free tier covers about 1,680 small requests a day; PDFs need converting.
- Guide Automation
Outlook attachments saved automatically: three ways, no VBA
Outlook rules can't save attachments, and new Outlook has no VBA. Two free Microsoft tools and a 56-line script can, once you guard against three traps.
- Analysis AI
Anthropic's AI agents wait on people 80% of the time
Anthropic's study of its own staff finds human attention, not the model, now limits what agents deliver. Plan review time before you add more agents.
- News Developer tools
Cloudflare sends new projects to Workers; static sites stay free
Pages stays supported while feature work goes to Workers; static hosting stays free after a move, but only domains on Cloudflare's nameservers can follow.
- Analysis Work software
Boring tools win: five tests before a small team buys automation
Knight Capital, the Post Office and CrowdStrike show the cost of automation nobody can read or stop, and five tests can expose it before a contract is signed.
- Guide AI
Choosing an AI assistant: 6 vendor questions and a 2-week trial
Most people who use AI at work bring their own tools; the six questions to ask a vendor, the answers to expect and a two-week trial that settles the choice.
- Guide Automation
Weekly reports can send themselves: 9 steps, little or no code
Google, Microsoft and Zapier each include a scheduler that can send the report on time; how to set one up, and the documented limits that break it later.
- Analysis Automation
Office tasks worth automating hide in habits; a tally finds them
People misjudge the tasks they repeat most, so asking a team what to automate tends to miss the best candidates; counting for one week does not.
- Analysis Developer tools
Scheduled scripts fail silently; seven checks make them speak up
In a 34-line invoice script, two lines find the late invoices; the rest of the work is making sure a failure reaches a person, as GitLab learned in 2017.
