frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

24 Hour Fitness won't let you unsubscribe from marketing spam, so I fixed it

https://ahmedkaddoura.com/projects/24hf-unsubscribe
56•daem•3h ago

Comments

mattlondon•2h ago
Sounds like they have not got CORS set up on their servers either? Surely it should not allow mutating requests from random origins not on an allowlist?
bigDinosaur•1h ago
CORS has nothing to do with (dis)allowing 'mutating requests from random origins' on the server unless I'm misunderstanding what you mean. The origin is a browser concept.
onion2k•36m ago
Not sure why you're being downvoted. CORS is only a browser concept. If you fire off requests from something that isn't a browser (e.g. curl or a python script or whatever) CORS won't do anything. Servers need to validate the origin of requests properly if that's a problem.
imiric•2h ago
How can you know that it "works"? Any company scummy enough to send spam to begin with, is capable of selling their customer data to a network of scummy companies that will do the same thing. I think most of the "unsubscribe" links are there to fulfill some legal obligation. They don't do what they're supposed to do, and might in fact be making things worse for the person who clicks them.

The only solution I've found to work, beyond the usual spam filtering, is to setup email on your own domain, and give every company a unique address. The moment you want to stop receiving email from them, you simply block their address. This deals both with the original company, and with anyone they've sold your contact information to.

daem•1h ago
from 2025-10-26 to 2026-01-29 (the day I wrote this article), no_reply@24hourfitness.com sent me 40 spam emails.

In the 33 days since I wrote this article, no_reply@24hourfitness.com sent me zero.

fer•1h ago
Assuming their mails follow a Poisson distribution, the 95% confidence interval for their new spam rate is 0-0.091 emails per day.
daem•1h ago
My solution to spam emails is this: https://ahmedkaddoura.com/writing/hide-my-email

I create a unique iCloud Hide My Email anytime I need to give out an email. The issue here was I signed up for my 24 Hour Fitness membership in person at the gym where the cell service was bad and I couldn't get the WiFI to work, so I begrudgingly gave the guy my real email.

While I could have easily blocked their domain, I took it as a challenge to get the emails to stop.

iamacyborg•1h ago
Don’t they have a list unsubscribe header in the emails themselves? That’s effectively a requirement for senders of their size since Feb 2024.
daem•1h ago
I see this in the headers. But there was no option in the MacOS Mail client to unsubscribe. Only the Unsubscribe link in the body of the email.

Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=member.24hourfitness.com; s=twentyfourhour; t=1762443065; bh=KDZeTqKlOBd6YUTrR6K4RMz9MA2BueBl6/LnKG57yqY=; h=From:Date:Subject:To:MIME-Version:Message-ID:List-Unsubscribe: Content-Type; b=Bq6qnq65i1EN6Df9A5TpcCn3AnNzE8yjkNdDYkapehQV727Jrma15ZU4e88I8Ckdk iH5CZrtJPlNqPscm3JWbuP4IavLVKDNf3Prlm4q75tTXE0IyaTPexyOoGTu+4PoAeG wEa8WaN6zfLl5AkPO0U+zjFHicSx3ooyNomFTI2AtSVoVHVPcubtZV8wRPUy4EV9mV pRBroHp1Uj/LCFRyZRScbs5plfxEpmd3wO9vnMsXW6jqOi19kqfOkhTUKpaRVxxJA+ /cMIq+Wh4TSpt6+22gcm4hLsCVNW0mAImjTZZ/yPFwoGpLaoPOia8aYde1mlROOoZi yx81OFO+90kRQ==

iamacyborg•1h ago
MacOS should have list unsub support from what I can see: https://support.apple.com/en-gb/guide/mail/mlhld3405766/mac
iamacyborg•1h ago
> How can you know that it "works"? Any company scummy enough to send spam to begin with, is capable of selling their customer data to a network of scummy companies that will do the same thing.

That’s quite a stretch for a company sending marketing email with a broken unsub mechanism.

bob1029•1h ago
> If you know someone on the 24 Hour Fitness engineering team, please share this with them. It's a one-line fix.

One man's bug is another man's feature.

troupo•1h ago
> OneTrust is literally a consent management platform focused on regulatory compliance, and 24 Hour Fitness is using it to violate consent regulations.

I mean, OneTrust's entire raison d'etre is to violate consent regulations with flimsy deniability.

Keep Android Open

https://f-droid.org/2026/02/20/twif.html
1578•LorenDB•17h ago•579 comments

Andrej Karpathy talks about "Claws"

https://simonwillison.net/2026/Feb/21/claws/
87•helloplanets•2h ago•108 comments

I Verified My LinkedIn Identity. Here's What I Handed Over

https://thelocalstack.eu/posts/linkedin-identity-verification-privacy/
96•ColinWright•4h ago•22 comments

Turn Dependabot off

https://words.filippo.io/dependabot/
484•todsacerdoti•14h ago•139 comments

I found a Vulnerability. They found a Lawyer

https://dixken.de/blog/i-found-a-vulnerability-they-found-a-lawyer
633•toomuchtodo•16h ago•288 comments

Facebook is cooked

https://pilk.website/3/facebook-is-absolutely-cooked
1141•npilk•17h ago•628 comments

Ggml.ai joins Hugging Face to ensure the long-term progress of Local AI

https://github.com/ggml-org/llama.cpp/discussions/19759
747•lairv•22h ago•185 comments

Wikipedia deprecates Archive.today, starts removing archive links

https://arstechnica.com/tech-policy/2026/02/wikipedia-bans-archive-today-after-site-executed-ddos...
463•nobody9999•17h ago•277 comments

EU mandates replaceable batteries by 2027 (2023)

https://environment.ec.europa.eu/news/new-law-more-sustainable-circular-and-safe-batteries-enters...
140•cyrusmg•3h ago•79 comments

Understanding Std:Shared_mutex from C++17

https://www.cppstories.com/2026/shared_mutex/
15•ibobev•3d ago•0 comments

CERN rebuilt the original browser from 1989 (2019)

https://worldwideweb.cern.ch
186•tylerdane•12h ago•66 comments

Acme Weather

https://acmeweather.com/blog/introducing-acme-weather
68•cryptoz•4h ago•45 comments

Lean 4: How the theorem prover works and why it's the new competitive edge in AI

https://venturebeat.com/ai/lean4-how-the-theorem-prover-works-and-why-its-the-new-competitive-edg...
44•tesserato•3d ago•21 comments

Coccinelle: The Linux kernel's source-to-source transformation tool

https://github.com/coccinelle/coccinelle
19•anon111332142•3h ago•2 comments

LibreOffice blasts OnlyOffice for working with Microsoft to lock users in

https://www.neowin.net/news/libreoffice-blasts-fake-open-source-onlyoffice-for-working-with-micro...
62•XzetaU8•3h ago•36 comments

What Is OAuth?

https://leaflet.pub/p/did:plc:3vdrgzr2zybocs45yfhcr6ur/3mfd2oxx5v22b
130•cratermoon•10h ago•40 comments

Gitas – A tool for Git account switching

https://github.com/letmutex/gitas
18•letmutex•4d ago•8 comments

Every company building your AI assistant is now an ad company

https://juno-labs.com/blogs/every-company-building-your-ai-assistant-is-an-ad-company
201•ajuhasz•17h ago•103 comments

Cord: Coordinating Trees of AI Agents

https://www.june.kim/cord
103•gfortaine•10h ago•46 comments

When etcd crashes, check your disks first

https://nubificus.co.uk/blog/etcd/
12•_ananos_•4h ago•4 comments

The bare minimum for syncing Git repos

https://alexwlchan.net/2026/bare-git/
6•speckx•3d ago•2 comments

Index, Count, Offset, Size

https://tigerbeetle.com/blog/2026-02-16-index-count-offset-size/
93•ingve•3d ago•28 comments

Large Language Model Reasoning Failures

https://arxiv.org/abs/2602.06176
12•T-A•3h ago•3 comments

Blue light filters don't work – controlling total luminance is a better bet

https://www.neuroai.science/p/blue-light-filters-dont-work
174•pminimax•17h ago•186 comments

The path to ubiquitous AI (17k tokens/sec)

https://taalas.com/the-path-to-ubiquitous-ai/
750•sidnarsipur•1d ago•415 comments

Show HN: Mines.fyi – all the mines in the US in a leaflet visualization

https://mines.fyi/
84•irasigman•14h ago•42 comments

OpenScan

https://openscan.eu/pages/scan-gallery
166•joebig•15h ago•13 comments

24 Hour Fitness won't let you unsubscribe from marketing spam, so I fixed it

https://ahmedkaddoura.com/projects/24hf-unsubscribe
56•daem•3h ago•13 comments

Trump's global tariffs struck down by US Supreme Court

https://www.bbc.com/news/live/c0l9r67drg7t
1417•blackguardx•20h ago•1157 comments

Across the US, people are dismantling and destroying Flock surveillance cameras

https://www.bloodinthemachine.com/p/across-the-us-people-are-dismantling
355•latexr•13h ago•175 comments