Spotify patches web player exploit that allowed free MP3 downloads

By on May 8, 2013, 4:00 PM
spotify, exploit, mp3, web player, chrome extension, downloadify, free music

Spotify recently patched an exploit that allowed Chrome users to download any of the company’s 20 million songs free and clear. By using a browser extension called Downloadify, subscribers were able to take advantage of an exploit (or simple lack of security) in Spotify’s web player.

According to reports, the web player – which debuted in November 2012 – didn’t utilize any sort of encryption. What’s more, the browser extension was free and readily available via the Chrome Web Store. All one had to do was start playing a song on Spotify and the extension would begin to download a full DRM-free copy of the song in MP3 format.

Widespread news of the exploit first hit the web yesterday. Google quickly removed the app from the Chrome Web Store, citing they remove apps that do not comply with their terms of service. Spotify said they were aware of the matter and have already issued a patch to prevent further use of the exploit. We’re still waiting on an official release from Spotify on the matter, however.

It’s worth pointing out that premium (paying) members are allowed to “store” music locally via what Spotify calls offline mode. This allows users to enjoy their favorite tunes without an Internet connection but of course this function requires a paid subscription.

The app’s developer, Robin Aldenhoven, acknowledged the fix on Twitter earlier today. He told The Verge that he had no plans to update the extension to circumvent Spotify’s new security measures, however.




User Comments: 5

Got something to say? Post a comment
Guest said:

Haha fun while it lasted

Guest said:

Because you wouldn't want people to enjoy music DRM-free now

would you. Course not. Don't be silly. If people had freedom, who'd become

filthy rich!

Skidmarksdeluxe Skidmarksdeluxe said:

Damn. I would've loved to exploited that. (If only we had Spotify in my country)

1 person liked this | Jim$ter said:

Jeeese some people are so cheap...Why do you want MP3's or waste time and space when you already have access to 20 Million songs already for $9.99 a month. Spotify is an awesome service. No need for Mp3's anymore. Without Spotify piracy would rule the day...but I guess a great legal cheap service isn't even good enough for some people.

Skidmarksdeluxe Skidmarksdeluxe said:

Jeeese some people are so cheap...Why do you want MP3's or waste time and space when you already have access to 20 Million songs already for $9.99 a month. Spotify is an awesome service. No need for Mp3's anymore. Without Spotify piracy would rule the day...but I guess a great legal cheap service isn't even good enough for some people.

And now for my next trick... Changing human nature.

Load all comments...

Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.