Spotify Hacked
Discussion
Looked at my phone today it was playing music on "eve's iphone" - Not me
Stopped it, they started it again. hey had deleted all my playlists and created one saying "please don't delete this playlist" and added a load of music to it!
I signed in and logged out of all devices and changed the password. Contacted Spotify and they seem to think it was another website that got hacked and they just tried the same password. I don't have that password anywhere else.
They tried my email account too.
I've just renewed my subscription in the past week. It can't be a coincidence.
I managed to get the IP address and trace it to a town but that aint really any use!
This happened to anyone else!?
Stopped it, they started it again. hey had deleted all my playlists and created one saying "please don't delete this playlist" and added a load of music to it!
I signed in and logged out of all devices and changed the password. Contacted Spotify and they seem to think it was another website that got hacked and they just tried the same password. I don't have that password anywhere else.
They tried my email account too.
I've just renewed my subscription in the past week. It can't be a coincidence.
I managed to get the IP address and trace it to a town but that aint really any use!
This happened to anyone else!?
Same thing happened to me. It was reused credentials from another site, I now use unique passwords.
Check https://haveibeenpwned.com/
To see if you have any leaked credentials out in the wild.
Check https://haveibeenpwned.com/
To see if you have any leaked credentials out in the wild.
Slightly off topic, but we have a bluetooth speaker that is paired with my kids phone with Spotify and we have had the speaker turning on at random times playing all sorts of crap over the App, and we have proved it's not the kids as they have been in at the time and have logged out of the App.
What i also discovered that if a device using SPotify has been paired with a bluetooth speaker, it will play the App over the speaker via the internet.
Why the f
k anyone would want to play Spotify over a speaker they can't even hear is beyond me.
fking stupid idea.
What i also discovered that if a device using SPotify has been paired with a bluetooth speaker, it will play the App over the speaker via the internet.
Why the f
k anyone would want to play Spotify over a speaker they can't even hear is beyond me.f
king stupid idea.
Alucidnation said:
Slightly off topic, but we have a bluetooth speaker that is paired with my kids phone with Spotify and we have had the speaker turning on at random times playing all sorts of crap over the App, and we have proved it's not the kids as they have been in at the time and have logged out of the App.
What i also discovered that if a device using SPotify has been paired with a bluetooth speaker, it will play the App over the speaker via the internet.
Why the fk anyone would want to play Spotify over a speaker they can't even hear is beyond me.
fking stupid idea.
I use that feature all the time. I'll be listening to my music (or a podcast) in my office, Spotify on PC connected to speakers in my office via an external DAC, then I want it on in the kitchen while I make dinner, so two clicks in Spotify and its now playing in the kitchen on another system entirely, then I want the music in the dinning room, another two clicks and its playing there.What i also discovered that if a device using SPotify has been paired with a bluetooth speaker, it will play the App over the speaker via the internet.
Why the f
k anyone would want to play Spotify over a speaker they can't even hear is beyond me.f
king stupid idea.If I tried to do that with bluetooth I'd have to make sure I was in range of the next device and muck about with disconnecting and then connecting between the two different devices. It would be much more painful. Its also slightly better audio quality as well, as the device is pulling the raw stream direct from Spotify rather than your phone doing that bit, and then recoding it to go over bluetooth to the device.
On the mobile version of Spotify you can choose to only show local devices in the settings tab, so you can turn it off.
The same thing happened to me, unique password and Spotify blamed me and couldn't care any less. Pissed me off if I'm honest as it was someone in Mexico who had a completely different musical taste. With all the algorithms Spotify use, the breach should have easily flagged up being a different time zone, different IP and a music style a complete opposite of my own.
I only found out because I was travelling for work and getting a really early flight and the cheeky tt booted me off and started playing Mexican rap.
You can reset your playlists based on previous dates. But you will lose the custom daily mix. It's been over a year and my mixes aren't what they used to be. I couldn't use it for months because it thought I was into Mexican gangsta rap
I only found out because I was travelling for work and getting a really early flight and the cheeky t
t booted me off and started playing Mexican rap. You can reset your playlists based on previous dates. But you will lose the custom daily mix. It's been over a year and my mixes aren't what they used to be. I couldn't use it for months because it thought I was into Mexican gangsta rap
Yep, same with me last year. Unique username & password for Spotify, as I set the username when I was about 16 & it is truly embarrassing now.
Went on Spotify forums and there were a few threads from other people in the same situation that week, I kept an eye on them for a couple of days (as more people posted in them) until one day they were all mysteriously removed.
The bemusing thing was we were eating dinner with the music in the background when it kept stopping, I would put it on again, would stop etc.. I looked into it and it was ''ADMIN'' playing via browser. I stopped it again... only for some Gangsta trippin' swear word infested delight was played over our Echo's at full volume.
I was actually quite impressed, a pretty bemusing act of revenge by said ''Hacker''. Looking back - i am more relieved they didn't remove 15 years worth of playlists!!
Went on Spotify forums and there were a few threads from other people in the same situation that week, I kept an eye on them for a couple of days (as more people posted in them) until one day they were all mysteriously removed.
The bemusing thing was we were eating dinner with the music in the background when it kept stopping, I would put it on again, would stop etc.. I looked into it and it was ''ADMIN'' playing via browser. I stopped it again... only for some Gangsta trippin' swear word infested delight was played over our Echo's at full volume.
I was actually quite impressed, a pretty bemusing act of revenge by said ''Hacker''. Looking back - i am more relieved they didn't remove 15 years worth of playlists!!
I actually managed to find the pastebin that had my log in details on it (plus hundreds of others) - the type of accounts were also listed along side, so no chance this was compiled from anything other than Spotify's own records. I reported this to Spotify at the time of trying to get access back to my account.
A week or so later, they sent out an email advising to change passwords - don't know if they did this to everyone or just the people in the paste bin, but certainly took them a while.
I did notice however that Spotify uses a single sign on to also access the Spotify forums. Wouldn't be surprised if that was the weak point, so I've since dropped the SSO to their forums.
A week or so later, they sent out an email advising to change passwords - don't know if they did this to everyone or just the people in the paste bin, but certainly took them a while.
I did notice however that Spotify uses a single sign on to also access the Spotify forums. Wouldn't be surprised if that was the weak point, so I've since dropped the SSO to their forums.
Spotify seem to be in full denial that they were breached, in reality you will struggle to find a tech company that is 10+ years old that hasn't had multiple people with the means and plenty of opportunity to walk off with substantial amounts of sensitive production data like password hashes and email databases if they chose to do so.
Had this last year, not sure how long it had been going on, but all of a sudden my recently played was full of gangsta rap st.
Reset my password and deleted all the crap, a few months later and the daily mix has got the hang of my tastes again.
According to the "have i been pwned?" site my details from Last.fm were hacked back in 2012, can't remember if they linked up with Spotify or if I just used the same passwords...
t.Reset my password and deleted all the crap, a few months later and the daily mix has got the hang of my tastes again.
According to the "have i been pwned?" site my details from Last.fm were hacked back in 2012, can't remember if they linked up with Spotify or if I just used the same passwords...
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff