menga
home - books - search - contact
Read my book: Don't Run A Web Site

incredibly stupid customer survey email

Thu 2026 May 7

Remember how I said that Google and banks do dumb stuff with email?

Other companies do this crap too, and oh wow, did I receive a doozy of one.

I go to an office to do a thing, and get the thing done. No problems.

Three days later, an email comes in that went straight to spam, but the subject line suggested it might not be, so I took a look at it...

...and oh, yikes, no wonder this thing went straight to spam.

This is what the email had going on:

  1. Used a From: address that was the company name even though the company obviously wasn't the one that sent it.
  2. Sent using amazonses.com mail servers instead of the company's mail servers.
  3. Mail headers reveal an X-Envelope-From that absolutely and totally does not match the company name at all.
  4. Mail headers reveal the email was sent using a very sketchy sounding Perl script.
  5. Email contains insecure http:// links to a .co domain FOUR TIMES.
  6. Email contains two insecure http:// image embeds that are mail beacons using a separate mystery .com domain.

So then.

This email has got spoofing, insecure links all over the place, mixed content, and insecure image calls to mail beacons.

Oh, and this at the end:

(Company name I've never heard of) is committed to protecting your privacy.

Yeah, I doubt that.

That office I went to obviously sold my personal data, which all companies do these days even if they say they don't. That data gets in the hands of some other company who flew out one of the worst emails I've seen in a while.

I looked up that other company. It's an outfit not even based in the US, but rather in the UK. And on their home page is this crap:

Navigate disruption with AI-enabled insights and expert advisory

DANGER, WILL ROBINSON! DANGER! DANGER, WILL ROBINSON, DANGER, WE GOT SOME AI SLOP GOING ON.

So then.

A US company sells off personal data to a UK company whose "tools" are nothing but vibe coded AI slop, who then in turn sends out ridiculously insecure customer survey emails that are guaranteed to land in spam folders.

For a company that is "committed" to protecting my privacy, they sure have a funny way of showing it.

If that doesn't say 2026, I don't know what does.

permalink

4-figure rolling car payments

Wed 2026 May 6

Lately, I've been watching a bunch of videos showing people who have ridiculous car payments due to negative equity, a.k.a. being "upside down". Buyer finances a car. Later on the car breaks and/or buyer can't afford the payments anymore (usually the latter). Buyer goes to dealership to get a less expensive car to lower car payments. The remainder of the auto loan for the existing car is higher than what the car is worth. All that crap is factored into the new loan for the replacement car.

Ultimately, what happens is that the payment is actually lowered, but the loan term is some ridiculous 72-month thing where a) the replacement car will be something very used with probably over 100K miles on it already, b) the loan will absolutely outlast the life of the car, and c) the buyer will never be able to pay it off. This process repeats for years until the buyer ends up in financial ruin.

Then there's me, a middle aged guy driving a car with over 170K miles on it.

I'll get back to that in a minute.

The other day I made a quick run to a convenience store, and observed the other cars I saw on the road.

I know that any car I see under 10 years old is financed, and the monthly payment for it is ridiculous. Doesn't matter if it's leased or bought.

When I think about it, I should probably stretch that to every car I see under 15 years old probably has a car payment attached to it.

There are only two types of cars I see that I know are paid in full.

First, beat up work vans, which includes minivans. I include the minivan because I do see guys that can and do take those mom-mobiles, yank out all the rear seats, drill on a roof rack to carry around ladders and such, and that's the work vehicle. What used to be owned by a mom to carry kids to school is now owned by a man, who proceeded to stuff it with electrical, plumbing or gardening equipment and uses it for work. A van is a van, after all.

Second, cars just like mine, which are older low-optioned subcompacts. These are little hatchback or sedan gas cars that get 35-40 highway MPG. They all have over 125K miles on them, all have chipped paint, dents, scratches, faded plastics, and so on.

The vans are actually worth something because guys are willing to pay for one as long as it works. A van is just a big metal box so a guy can carry his stuff to job sites to do work and get paid. And since they were designed to be serviced, they can be repaired as long as the frame is still good.

Old subcompacts however are worth next to nothing. The purpose of a low-optioned subcompact is to get from A to B. A subcompact has little storage, little power, isn't as comfortable as a larger car, and doesn't tow. Yes, they get good fuel efficiency, but that doesn't increase the on-paper value at all.

The real value of an old low-optioned subcompact comes from long term ownership. The less options there are, the less there is to break. As long as the suspension holds up (or at least can be repaired) and the drivetrain doesn't grenade itself, this is a car that can run 250K to 300K miles in the cheapest way possible.

What that basically means is if the subcompact has a known good engine and the transmission is an automatic or manual, it can last the very long haul. If it's CVT, it's junk no matter who made it.

The problem...

...is that almost nobody makes a car like this anymore new. The only one left right now is the new Nissan Versa S FWD with manual transmission.

I only have one knock against that car. No option for remote keyless entry. You have to use the key to lock/unlock the door. But it has everything else. AC, power windows, power locks, 35 MPG highway on regular unleaded, cruise control, USB ports, it's all there.

That Versa is the kind of car you could run to 200K miles and beyond. While I'm not in the market for a car since the one I have works, if I did get that Versa, I'd take it to a shop to have keyless entry installed.

Do keyless entry kits exist? Yes, they do, and they're cheap. If the car already has power locks, keyless via fob can be added in. So if I wanted to be super cheap (and I most likely would be), I could install the keyless myself.

The only thing that doesn't make that Versa manual a god-tier level bargain is that it's not a hatchback with manual hatch release. If it were, that would be perfection, because cargo space is increased, and now it's a good hauler. Not a big hauler, but still, really good. And no electronic popper to break since it would just be a manual latch.

Even though it's a sedan, I would tell anyone that knows how to drive a manual that if you want a new car right now, go get that Versa manual and add in the keyless yourself. And buy the car with the intent of driving it until the wheels fall off. Don't even think about resale value.

permalink

casio w738h, the awful repackaged w736h

Fri 2026 May 1

I just mentioned the W221H, which again I may get, but in all honesty is probably something I'll give a miss to. But then there's the new W738H, which is supposedly going to be released in the US this month May 2026. Casio Singapore already has a product page up for it.

This is another one of those models where Casio gets it but at the same time they don't.

I own the W735H. The W736H has an identical case with identical features to the W735H, except the LCD panel is arranged slightly differently.

Both the W735H and W736H are what I call I-don't-care watches, as both are seriously fugly. More on that in a moment.

The W738H is functionally identical to the W736H with exactly the same LCD appearance, save for that the case and strap are different. The W738H is smaller, thinner and 7g lighter in weight. It also comes in three colorways. 1AV, a black case people will like but with a silver bezel everybody will hate. 1BV, an all-black case that everybody will love but with negative display everybody will hate. 3AV, an ugly olive color case with black bezel and olive strap that only those who couldn't get the black/silver one will buy. And on all of them, the strap is the same garbage on the W221H.

Oh, and for the 1AV black w/silver bezel version, the one most likely to sell best, it has a purple button at bottom right for no good reason. Yes, purple. It's just there, proud as can be.

The only way to get one of these that isn't an embarrassment to wear would be to buy the black/silver positive display and the all-black negative display, swap the positive LCD module into the all-black case (which thankfully does not have a purple button on it), ditch the strap for something better, and then you've finally got something respectable.

At least with the W735H/W736H, the ugly there is on full display. The W738H however is trying to look better, but Casio just could not resist with the ugly crap. This is why I say Casio gets it but at the same time they don't.

The biggest insult of the W738H, just like with the W221H, is that strap.

With the W738H, even if you could deal with its ugly points, that strap has to be junked. And that means buying that model is not a one-and-done. You have to factor in cost of watch and strap at bare minimum.

Heck, even the W218H-1AV, a super basic model (I have two), has a better strap.

When I first saw the W738H, I actually really wanted it. But that was before I saw the Casio W738H product page with better photos. When I saw that bad strap and purple case button, my decision of whether to buy or not once available was made right there and then.

Nope.

permalink

casio w221h... i'll wait

Wed 2026 Apr 29

Been a while since I've talked about watches, and the hot one right now is the Casio W221H. This is something I passed on, because the more I researched it, the more I realized there are annoyances about it that would irritate me.

I am willing to get one in the future even with its annoyances, but not for the price it's selling for right now.

And what is the W221H selling for right now?

At the time I write this, about double what it should be priced for. Worth it? Absolutely not unless you really, really like the design.

I'm going to describe the watch's annoyances from the Gen X point of view, as I am one. Here we go.

The #1 reason any Gen X would buy this is legibility. W221H is a compact digital with giant digits. And I'm not kidding when I say compact, as it's 43.7mm lug-to-lug with 38.4mm diameter, however... this thing has a very blocky shape.

Square type watches always look and wear larger than circular, even when the square is small, which is exactly what the W221H is. What this means is on wrist, the watch will always appear much bigger than it actually is, and this will mess with your head.

The W221H's strap is total garbage for two reasons. First, it's completely smooth for both front and back. Second, it has nothing that will hold the strap keeper in place. The keeper is that thing you tuck the strap tail through when putting it on the wrist. With a completely smooth resin strap, it's guaranteed the strap tail will work its way loose from the keeper during normal wear and leave the strap dangling.

I have already seen people swapping out the strap on the W221H for something else because they know it's junk.

There is a pause when going mode-to-mode that cannot be shut off, and I know exactly why. The W221H as a "flash alert" feature. When on, the word SYNC appears first momentarily when changing modes. When off, the screen blanks when changing modes before showing you the next mode. This means you're forced to wait every time you want to go to another mode (like going to set an alarm). Very annoying.

The thickness of the W221H case works against it due to its blocky shape. It's 12.5mm thick, which on paper doesn't sound bad. But on wrist, it's a different story as that case has absolutely nothing form-fitting about it. It doesn't matter what your wrist size is because it's just a block on your wrist and there is no changing that.

Will I get one?

When the price goes down appropriately, probably. But I'm going to be damned certain to buy from a seller that has a good return policy, because I am very well aware of the watch's annoyances.

High legibility Casio compact digital alternatives

All of these have big digits, are stupidly easy to read and have great night lights for night reading.

Casio F108. Basic F-91W type features. Square shape but "squat" for better fit.

Casio W217H. Basic F-91W type features. Blocky but with decent downturn at the lugs (which the W221H does not do) for good fit.

Casio W218H. Basic F-91W type features. Similar to the F108 with square-but-squat case shape, but for most people, this is the perfect basic watch. I own two of them. Top tier legibility with easy-press buttons. This thing is amazing. The only reason I don't wear it more is because I need a watch with a timer.

Casio W218HD. Same as the W218H but with silver case and metal bracelet instead of resin.

Casio W219H. This is the W218H in a semi-round case shape, some with cloth strap that has Velcro, meaning no strap tail hanging out ever.

Casio W219HD. The W219H with a folded link metal bracelet. The case is still resin but in silver color to match the bracelet.

Casio WS1600H. This is what I'm currently wearing. Has advanced features and is complicated to set up, but I like it a lot. It's the same case size as the AE1200.

Casio WS1000H. Big ol' digits on this one, and like the WS1600H, complicated to set up. I formerly owned two of these, and parted with both because I couldn't get used to the front-facing buttons. But the legibility was absolutely there, no question. And the strap was quite good.

Casio B650WD. Another F-91W type for features. This is the W217H with a metal bracelet and silver case. The metal bracelet fortunately has a movable clasp, so no futzing with links required. This is the classiest looking high-legibility digital in existence, and I'm not kidding. Yes, I do own one.

Not-exactly compact but still good alternatives

These are a few other models that technically aren't compact but aren't goofy-big either.

Casio SGW100. I owned one of these before, fabric strap version. Didn't care for the strap. I might get another at some point, next time in a resin strap version. Very good for legibility, so-so for its night light. Has advanced features that I also like.

G-SHOCK GBD200-1A1. There's a negative MIP display version, but the positive MIP display is the one to get here. Screen is configurable to make the time and date huge. It is also a crazy-good-looking watch. Strap is also incredibly good. Yeah, it has tons of features, but whatever, the display is the star of the show here. This one is on my to-get list. Even the all white one looks awesome.

I don't do analog, but...

Where legibility is concerned, especially for aging eyes, the best watch type is time-only analog where the dial is dark and hands are light or dial is light and hands are dark.

True, you only get the time and nothing else, but for ease of reading, there is nothing better. The reason for this is because instead of reading numbers left-to-right, you're seeing a symbol of the time. Think of it in the same way as reading a circular progress bar for a file download. Basically the same thing. Even if your vision is fuzzy, you'll still be able to read the time on a simple analog.

Casio does make a good cheap time-only analog, the MW240. Light or dark dial, your choice, some with resin strap, some with cloth.

If you absolutely need a night light, see MWA100H. Not exactly small, but it's time-only with a night light. And the night light fades when it goes out, which is kinda cool to see. The same version of this watch with steel bracelet is the MWA100HD.

Another time-only with night light is the MW620H.

Again, I don't do analog, but if I did, I would run with a time-only analog Casio. Why no date complication? Time display is big, but date display is tiny and something I just wouldn't want to futz around with. With time-only, you just strap it on, adjust time if necessary, then go. I like that. Easy and good.

permalink

the insecure thing google, banks and government do with emails

Fri 2026 Apr 24

email crap

There are many things verboten from emails these days, and one of them is that you are never, for any reason, to link anything using http:// ever. You're supposed to use https:// because "secure". Right? Right.

Well, there's a problem.

Some companies use email templates that are old, haven't been updated in a very long time and still use http://, which is bad.

I'm going to show the problem, then describe the solution.

Google

I periodically receive emails from Google that brazenly have links to their pages using http:// while at the same time linking other things with https:// in the same message.

An example of such an email I received from Google earlier this year:

email

Banks

Banks, which includes credit card issuers, are absolutely notorious for sending out emails with image embeds called using http://, which is mixed content, and that's a giant no-no.

Government

This is where the one at top comes from. Yeah, sure, let's just link to something 27 years old that's not even part of the message at all, and do it insecurely because FUGGIT, nobody ever checks that stuff, right?

Wrong.

I noticed.

Government is far from the only one who does that w3.org http:// thing. Banks do this one too, as does Amazon, Spotify, Steampowered.com, and many others.

"It doesn't hurt anything", you may say. Doesn't matter. Everybody has been told that if you use http:// for anything in an email, you're a ding dang dirty sinner and are going straight to hell.

The solution

Well, this is obvious. Add the S so http:// is the proper https:// for everything.

However, I understand the reason http:// is still sprawled out all over the place in email templates for major companies.

What is the reason?

Red tape.

And oh, do I have a good example of this.

Certain emails from big companies have arrived in my inbox where I'll examine the source and sometimes see HTML comments.

This is a portion of a for-real email I received from a big company very recently:

DO NOT CHANGE ANYTHING YOU GOOBER

The guy who made that released the ALL CAPS FURY and everything. And you gotta love that it's sitting directly below an insecure http:// link.

Note the explicit instruction not to change a damned thing without review first. And not just a review, a TEAM review.

Yeah, that's just a big pile of shit right there.

What that means is that anybody who spots the insecure http:// crap (which obviously nobody did) can't just edit the template and add one letter S. Nope. A report has to be made first to the "alert templates dev team".

If a report was actually filed, it would be received by an intern who, of course, will have absolutely no idea what to do with it.

The intern will guess where that report is supposed to be escalated to, then the report will be bounced around for a week to a month, then buried and forgotten.

While this is going on, insecure links from Big Ass Company are being sent to all the many, many thousands of customers every day.

Oh, joy.

Now you're probably thinking, "Why don't you email Big Ass Company and tell them about this?"

Ah, good question. And I have a good answer.

It wouldn't fix the problem.

Absolutely nobody in customer service for Big Ass Company knows anything about how email works. All that would happen is a canned response telling me thanks for the communication, it will be "assigned" to the appropriate whoever, have a nice day. The support ticket would be "closed" at that point and never escalated anywhere.

There is only one way to fix a problem like this.

If I had the email address of a C-title employee at Big Ass Company, then I could get the problem fixed. Not the CEO, because he doesn't care. But the CFO or CIO? Yes, I'd take either, because those guys would care. I'd send an email, say what's going on (politely, of course), they'd reply back, say thanks for emailing and take care of it. And they would. One email from them to the IT manager would get the problem fixed in under an hour since it would take top priority as the communication came down from "on high".

Since I don't have a C-title employee's email address, I do the next best thing, which is never click any link in an email at all, and read email in plain text only using a TUI mail client.

permalink

« older posts  newer posts »