there is a security issue with MIT’s SMTP setup which lets anyone send an email from an mit dot edu address. 

don’t know if they have fixed it yet

PSA i can spoof any https://t.co/T5X6nJY7Wp email and it will pass all DKIM/SPF/etc. checks. here's an email i sent to myself pretending to be a famous MIT-affiliated podcaster - thanks gmail for auto-inserting the profile pic :) 

MIT may fix this someday but in the meantime… https://t.co/nciRWeZovL

there is a security issue with MIT’s SMTP setup which lets anyone send an email from an mit dot edu address. 

don’t know if they have fixed it yet

https://x.com/bcrypt/status/1847100504830365805?s=46