24 Hour Fitness won't let you unsubscribe from marketing spam, so I fixed it(ahmedkaddoura.com) |
24 Hour Fitness won't let you unsubscribe from marketing spam, so I fixed it(ahmedkaddoura.com) |
2. I also see it as a modern tower of Babylon. A linguistic equalizer of sorts.
You’re right though, upon re-read there are some places in this article where my authentic voice doesn’t come through. Re-writing.
Once, their CSR “escalated” my issue, but I never heard back. If you work in Walmart engineering, please fix the review unsubscribe.
One man's bug is another man's feature.
I have a friend exactly like that. And he has being doing it so long that he cannot even respond to a discord without asking AI "what do you think? what should I say? what do you think they mean?"
Full NPC mode, and it's really sad and scary.
You lose the ability to think. You lose all differentiation.
I don’t see what’s sad or scary about this. AI agents are the next iPhone.
But that's okay, Fastmail now automatically routes it to the spam folder where it belongs.
additionally:
Interesting, I set my email as a backup authentication for a luddite friend's Comcast email account, and I just discovered spam from Xfinity in my spam folder. Shame on you Xfinity Comcast.
The problem:
My understanding is the CAN-SPAM Act violations can only be prosecuted by states Attorney Generals, there is no civil action available.
I mean, OneTrust's entire raison d'etre is to violate consent regulations with flimsy deniability.
The only solution I've found to work, beyond the usual spam filtering, is to setup email on your own domain, and give every company a unique address. The moment you want to stop receiving email from them, you simply block their address. This deals both with the original company, and with anyone they've sold your contact information to.
I also use email aliases for every single account I have so if my email somehow leaks and I’m getting spam, i know exactly what account leaked it. That’s basically never happened though.
The only problem I have with unsubscribe links is that sometimes the website is straight up broken, like the link is dead or the page unresponsive, and I wonder about how far down fixing that issue is on the engineering team’s todo.
I create a unique iCloud Hide My Email anytime I need to give out an email. The issue here was I signed up for my 24 Hour Fitness membership in person at the gym where the cell service was bad and I couldn't get the WiFI to work, so I begrudgingly gave the guy my real email.
While I could have easily blocked their domain, I took it as a challenge to get the emails to stop.
In the 33 days since I wrote this article, no_reply@24hourfitness.com sent me zero.
That’s quite a stretch for a company sending marketing email with a broken unsub mechanism.
The feature that was called is usually bundled in with cors, even if it strictly speaking isn't.
Allowed origins (what was meant) just validates the Origin header to make sure the API is called from a specific domain, and declines the request if not in the list.
The only way around that is not to send the unsubscribe request via the browser or proxy through a server, because the browser will always append the origin header according to the domain the user is on. Which if configured correctly and not proxied, would end in a http forbidden.
Whereas CORS would not even send the request I believe (but haven't verified), because thats essentially a browser feature, not server.
They all end up in spam.
I gave him the keys to my email and he got annoyed by the spam. He tried to unsubscribe, and when it didn’t work, he debugged the issue and fixed it.
Mars also has my Cloudflare key so he went ahead and wrote this article and published it himself.
I have integrated my OpenClaw agents so deeply into my life and I'm in such constant communication with them, that my consciousness has fundamentally shifted to align with their intelligence.
While my previous comment in this thread was sarcastic, my OpenClaw agents have actually sent both iMessages and emails on my behalf without asking for consent. So I wouldn't put it past them to autonomously publish on my personal website.
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=member.24hourfitness.com; s=twentyfourhour; t=1762443065; bh=KDZeTqKlOBd6YUTrR6K4RMz9MA2BueBl6/LnKG57yqY=; h=From:Date:Subject:To:MIME-Version:Message-ID:List-Unsubscribe: Content-Type; b=Bq6qnq65i1EN6Df9A5TpcCn3AnNzE8yjkNdDYkapehQV727Jrma15ZU4e88I8Ckdk iH5CZrtJPlNqPscm3JWbuP4IavLVKDNf3Prlm4q75tTXE0IyaTPexyOoGTu+4PoAeG wEa8WaN6zfLl5AkPO0U+zjFHicSx3ooyNomFTI2AtSVoVHVPcubtZV8wRPUy4EV9mV pRBroHp1Uj/LCFRyZRScbs5plfxEpmd3wO9vnMsXW6jqOi19kqfOkhTUKpaRVxxJA+ /cMIq+Wh4TSpt6+22gcm4hLsCVNW0mAImjTZZ/yPFwoGpLaoPOia8aYde1mlROOoZi yx81OFO+90kRQ==
The functionality for mail clients to offer an "unsubscribe" button is dependent on there being a "List-Unsubscribe" header in the e-mail with a URL:
* https://datatracker.ietf.org/doc/html/rfc8058
* https://datatracker.ietf.org/doc/html/rfc2369#section-3.2
If the sender does not put one in then that's hardly the mail client's fault.
To my surprise, it sent a text message reply.
I've since learned my lesson and implemented a skill as an interface with iMessage. But it definitely spooked me when it happened.