Field notes

Apple's Impersonation Risk Detection isn't one generic scam filter — it's built on a specific API, IsLikelyBeingCoachedInsight, designed to catch the exact moment someone is being talked through a fraudulent transfer. What Apple's own documentation says it does, and how it maps to the real bank-impersonation scam pattern costing Australians their savings.

"Sync site timesheets to MYOB payroll" sounds like a live, two-way connection. For most MYOB products it's actually a file export and import step with real failure modes — unsupported pay rates, excluded salaried staff, and duplicate entries on re-import. What each MYOB product actually does, and how to set it up without the surprises.

Most "subcontractor management software" comparisons test scheduling and messaging features. For an Australian residential builder, the real risk is compliance — an unlicensed trade on site, a lapsed insurance certificate, a missed retention payment. What the software actually needs to track, and where the current tools fall short.

WordPress 7.1.2 patched a critical, unauthenticated path-traversal flaw — but the chain that turns it into full remote code execution depends on a forgotten PHP setting most hosting accounts still have switched on. What CVE-2026-87902 actually needs, and the two changes that close it off.

"Free invoice generator" searches usually turn up US tools that either aren't available here or won't produce a document the ATO recognises as a tax invoice. What Australian GST rules actually require, which free tools work, and why Wave — a name that still shows up in most roundups — no longer does.

iOS 27 shipped with a real anti-scam feature called Impersonation Risk Detection — and it's switched off by default, buried in a settings menu most people will never open. What it actually does, what it doesn't, and how to turn it on.

"MYOB" isn't one product — Business, AccountRight, and Advanced each sit on a different API, which is why a connector that works for one often doesn't exist for another. What actually connects Shopify, WooCommerce, and marketplaces to each MYOB tier, and where you're looking at a custom build instead.

Mailchimp does what it's told — the gap is usually which connections are actually wired up. Six integrations worth the setup time, what each one replaces, and the one thing that breaks if the sync only runs one way.

Three real estate CRMs, three different ways to connect an email tool to them — and the part that actually matters isn't the listing feed, it's whether consent and unsubscribes travel with the contact. What VaultRE, Rex, and AgentBox actually expose, and the compliance gap most automated syncs quietly recreate.