Developer Test Shows Email Validation APIs Miss Breach Risk Despite SMTP Checks

·1 views

A developer attempted to validate 1,000 email addresses against Have I Been Pwned via the Email Validator API on RapidAPI on August 23, 2026, but the endpoint failed to complete the run, returning only a single cached sample response. That sample, for test@gmail.com, revealed the address had been involved in three separate data breaches between 2014 and 2023, yet still passed all standard deliverability checks. The result highlights a critical gap in conventional email validation: an address can be SMTP-verified and non-disposable while simultaneously being flagged as breached and untrustworthy. The developer argues that email validation is not merely a hygiene task but an identity signal pipeline, where repeated queries generate data events that can themselves become security liabilities if logged or exposed. The findings underscore that deliverability alone cannot be equated with trust in modern identity verification workflows.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Four-Stage Pipeline Turns AI Agent Traces Into Fine-Tuning Datasets

Every AI agent running in production continuously generates traces — logs of prompts, tool calls, reasoning steps, and outcomes — that can serve as raw training data, though most teams never use them. A four-stage pipeline converts this telemetry into a curated fine-tuning dataset by first capturing all runs using standardized schemas like OpenTelemetry's GenAI semantic conventions. The second stage involves selective sampling, pulling roughly 500 runs from 50,000 weekly executions by combining random, stratified, and failure-weighted strategies rather than reviewing everything. Labelling and scoring against a defined spec follow, steps the article notes are most commonly skipped by engineering teams. Running this pipeline on a regular weekly cadence, rather than as a one-off export, is recommended to keep the dataset current and production-representative.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How One Developer Manages Six Parallel Claude Code Sessions Without Losing Control

A contractor running LLM system development at Cognisant LLC regularly operates six or more simultaneous Claude Code sessions across client projects on a single workday. He found that parallel sessions sharing a working tree caused recurring git errors, including commits landing on wrong branches and uncommitted work being absorbed by other sessions. To address this, he adopted practices such as naming each session with a readable convention, using git worktrees to isolate each session's working directory, and issuing authentication switches and actions as a single combined command to prevent shared machine-state conflicts. A separate tool was also built to track output files like markdown, PDFs, and spreadsheets, since no amount of discipline alone solved the problem of locating deliverables across sessions. The workflow described is the author's personal operating procedure and carries no official endorsement from Anthropic, the maker of Claude Code.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How 'Shift Left' Quietly Offloaded Ops Work onto Developers and Fueled Burnout

The 'Shift Left' movement, marketed as empowering developers, largely resulted in operations teams being downsized while their responsibilities were transferred to product engineers. A January 2026 SoftwareSeni report found that 74% of developers now spend more time on operational tasks than on actual product development, with 83% experiencing burnout specifically tied to those operational duties. Developers are also navigating an average of 8 to 12 CI/CD tools per organisation, adding significant cognitive overhead. Industry voices, including Kubernetes expert Kelsey Hightower, have publicly warned that expecting developers to simultaneously master security, infrastructure, and deployment is unsustainable. Critics argue the philosophy ignored hard limits of human cognition, turning development environments into high-alert dashboards and replacing feature delivery with infrastructure firefighting.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Migrate Azure Synapse to Databricks Without Derailing Production

A field guide aimed at senior data engineers outlines a structured approach to migrating from Azure Synapse to Databricks, warning that the process is far more complex than vendors typically suggest. Synapse environments often bundle Dedicated SQL Pools, ADF pipelines, serverless SQL, Spark pools, and Power BI datasets into a single intertwined estate built up over years. The playbook recommends beginning with a thorough discovery and inventory phase using tools like Lakebridge Profiler and Analyzer before attempting any code conversion or workload migration. Migration work is divided into parallel workstreams covering data movement, code conversion, governance, and BI cutover, with simpler, well-owned workloads tackled first. The guide defines migration success not as moving all notebooks to Databricks, but as delivering trusted, decision-ready data on a platform the team can reliably operate.

0 comments Read more at DEV Community