Developer builds MCP tool to check email spoofability via Claude or ChatGPT

·1 views

A developer found that seven of eight automation agencies he scanned had email security misconfigurations that left their domains open to spoofing. The check involves just two DNS lookups and takes about 30 seconds, yet most organizations never run it because there is no visible symptom when it fails. To lower the barrier, the developer packaged the checks into an MCP server that can be connected to Claude or ChatGPT, letting users query any domain's SPF, DMARC, and DKIM status in plain language. The tool reads public DNS records, stores no data, and requires no sign-up or API key. Common issues uncovered include missing SPF records, duplicate SPF entries that invalidate protection under RFC 7208, and DMARC policies set to monitoring mode that take no action on spoofed mail.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer distills 200+ BC quality files into 26 vetted AL static analysis rules

A developer has released AL Griller, an open-source static analyzer for Dynamics 365 Business Central AL code, built by systematically reviewing Microsoft's BCQuality repository of over 200 knowledge files across 14 domains. Rather than converting every file into a rule, the author applied a strict filter requiring each candidate rule to be deterministic, detectable from source code alone, explainable, testable, and not already covered by Microsoft's own analyzers. Only 26 rules made the final cut, classified into 12 purely syntactic P0 rules and 14 context-aware P1 rules, while several patterns were explicitly rejected rather than deferred due to fundamental detectability problems. Domains such as Privacy, Telemetry, and Testing were flagged for future research rather than dismissed entirely. The project's guiding principle, described as 'trust over rule count,' prioritized accuracy over volume to avoid eroding user confidence with frequent false positives.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Browsers Detect and Recalculate Styles for CSS Container Queries

CSS container queries allow developers to apply styles based on a container element's size rather than the viewport, solving layout challenges that previously required JavaScript hacks. Browsers identify container elements using the container-type property and measure their dimensions during layout to evaluate matching @container rules. To avoid performance issues, browsers cache container sizes and only trigger style recalculations when a size change crosses a query threshold. When a container is resized, the browser schedules a targeted style recalculation for all descendant elements relying on that container, followed by layout and paint updates if needed. Understanding this internal flow helps developers build more reliable responsive components and debug tricky reflow issues.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Land Your First Front-End Dev Job in a Tougher Hiring Market

Breaking into front-end development has become significantly harder, as employers now expect junior candidates to demonstrate real problem-solving ability and team-ready workflows, not just course completions. Foundational skills in HTML, CSS, and JavaScript remain essential, but candidates are also expected to know a framework like React, version control with Git, and basic backend concepts such as REST APIs and HTTP. Cold applications through job boards are increasingly ineffective, making referrals and direct networking far more valuable for getting noticed. Building a portfolio of self-directed projects — rather than tutorial exercises — is now considered a key differentiator for entry-level candidates. Job seekers are advised to set realistic timelines, as landing a first role can take many months of iterative skill-building and outreach.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Independent Audits Expose Security Gaps in Top Password Managers

Independent security audits by firms like Cure53 and Trail of Bits have become the most reliable way to evaluate password managers, testing encryption, memory handling, and server-side architecture. Bitwarden's 2023 Cure53 audit praised its open-source encryption but flagged moderate risks in account recovery and two-factor authentication, which the company addressed publicly. A 2023 audit of 1Password found a medium-risk flaw in its password strength estimation feature, though it posed no direct security threat. LastPass, which suffered a major breach in 2022, was found post-incident to have stored customer data in ways that enabled attacker decryption, revealing serious architectural weaknesses. Experts note that audit transparency and how companies respond to findings are as important as the results themselves when choosing a password manager.

0 comments Read more at DEV Community