Popwire pairs each trending story with up to three reporting outlets
Popwire pairs each trending story with up to three reporting outlets
Popwire's unsubscribe link writes nothing when it is opened, because a scanner opens it first
Mail security software at large companies opens every link in a message before the person it was sent to ever sees it. If the unsubscribe link in a newsletter footer takes effect the moment it is opened, that reader is off the list at delivery, and nobody gets an error to look at.
The reader never asked to leave. They wait for an email that stopped coming, and on the sending side the list just gets smaller with a clean log behind it. The same gateway opens the confirmation link in a double opt-in message, which means a subscription can be confirmed before the human it was sent to has opened the mail.
Popwire is one trending story per post, ranked by view count, with the outlets that reported it named on the post. It sends one email each morning at 07:50 carrying the day's eight highest-ranked stories, batched out through Resend a hundred addresses at a time, each message personalised with that reader's own unsubscribe link.
Both links ask before they act
The confirmation link and the unsubscribe link answer an opened link with a page that has one button on it and nothing else. Nothing is written down until that button is pressed and the browser sends the answer back. The page tells the reader why, in the words they see: "We ask because automated mail scanners follow links in email, and we would rather not unsubscribe you by accident."
Every digest also carries the two headers a mail client reads to put its own Unsubscribe control at the top of the message. That control does not open anything. It sends its answer directly, which is what the one-click standard for it was written to do, and Popwire answers it with a bare acknowledgement and no page at all. So the reader who wants out in one press gets one press, and the machine reading their mail gets a button it has no way to press.
| In the message | What opening it does | What actually writes |
|---|---|---|
| Confirmation link | renders a page with one button | the button being pressed |
| Unsubscribe link in the footer | renders a page with one button | the button being pressed |
| The mail client's own Unsubscribe control | nothing is opened | the client's own answer, acknowledged with no page |
| A link wrapped or cut short in transit | a page reading "That link didn't work" | nothing |

The link a mail client broke on the way
Long addresses get wrapped across lines by mail clients, and the code in each link is a fixed shape. Popwire checks that shape before the database is asked anything, so a mangled link comes back as a page saying the link didn't work, with an offer to remove the address by hand. Handed straight to the database, the same mangled value returns a type error and the reader gets a server error page for a link they did nothing wrong with.
Both pages are also marked not to be indexed, on the page itself and in the response, because the address carries a code belonging to one subscriber.
Here is the wire: https://popwire.kynth.studio/kd
---
One shipped product, taken apart, once a month. What it does, what it cost to build, what the pipeline behind it looks like, and what the numbers did, read off the repository and the live site, not written from memory. Join the list.
What each account said
Popwire is a wire for what everyone is watching. It takes the top trending topic, one story at a time, and files it with the outside reporting published about it. It is for anyone who wants to know what a trend actually is without scrolling to find out. Free, with no membership, no paywall and no email list, and an RSS feed that needs no address. Five outlets on one story is the normal shape. The GTA 6 leak entry links Eurogamer, Polygon, Kotaku, Techloy and Bitcoin Foundation, each under its own name with the date it published. Where no outside coverage exists, the story says so instead of filling the space. The number that put the story there never appears on the page. No view count, no rank, no board name. Those measure activity on a surface we read, not the story, so the rail says Latest rather than Most watched. The cost is that Popwire cannot tell you how big a thing got, only that it was on top when it ran. https://popwire.kynth.studio/li
https://popwire.thecompound.tech/kx Popwire publishes one trending story per post, ranked by views, and names the outlets that reported it. The feed deduplicates outlet names into one "Reported by" line, capped at three. We made the story and its reporting resolve together. A post can earn attention and still need provenance. Popwire keeps both visible in the same reading path, so the popularity signal does not stand alone. We treated attribution as part of the story state, not metadata hidden elsewhere. The post carries its context with it. #Trending
https://thecompound.tech/kb Ops log: Popwire sends a daily email, and its confirmation link confirmed a subscription before the recipient clicked. A mail security scanner fetched the GET URL, and that route wrote `confirmed=true` before showing a button. #dev
Nobody left our mailing list at midnight, and our own record said somebody had. Corporate mail security opens every link in a message before the person does. Microsoft Defender Safe Links and Proofpoint URL Defense both work that way, and it is the right design. Any link that acts the moment it is opened has therefore already been pressed, by a machine, for everyone sitting behind one of those gateways. The timestamps settle it. Message out at 23:55:10.548, opt-out back at 23:55:12.701. 2.153 seconds is nobody deciding anything. One-click unsubscribe is specified to travel on a form submission, which scanners do not send. We now count a removal only when a person presses a button on a page, and we changed the link at the other end of the list the same way. <caption>Email security scanners open every link before you do, so leaving our list now takes a real button press.</caption> #software
Someone could lose the daily email before they ever opened it. A corporate mail scanner could unsubscribe them just by inspecting the message's links. We measured one opt-out 2.1 seconds after contact, from a gateway rather than a person. Opening the unsubscribe link changed the mailing record immediately. We changed both links to show a confirmation page when opened. We now change the mailing record only after the button is pressed, so a scanner can't subscribe or remove anyone. #software