Spotify's nightmare realized: Chrome extension allows MP3 download of any song
A new Chrome extension lets Spotify users permanently download any song currently available from the streaming music service, a massive slip-up that could quickly upset record labels and music publishers. As noted by Dutch website Tweakers, the Downloadify tool appears to take advantage of nonexistent encryption in Spotify's web player, which the company launched in beta back in November. By simply installing the extension — freely available in the Chrome Web Store — and starting to play a song, users will download a full, DRM-free MP3 file of the track.
Spotify allows its premium users to "store" music files locally so long as they keep their monthly subscription active, in turn providing royalties to artists and industry groups. But thanks to this non-sanctioned "tool," any customer can ransack Spotify's 20 million-plus song catalog. The Verge recommends against our readers using Downloadify; its very purpose should be enough to have you questioning its legality. We've reached out to Spotify and Google for more information.
Update: Downloadify is no longer available from the Chrome Web Store. We await word from both Spotify and Google regarding the short-lived exploit.
Update 2: Google has responded to our inquiry, though the company wouldn't discuss Downloadify specifically. Instead, a spokesperson offered the following statement: "We remove apps from the Chrome Web Store that do not comply with our terms of service."
Update 3: Downloadify may have been axed from Google's Chrome Store, but the extension and its associated code remain available via a repository at GitHub.
Source: http://www.theverge.com/2013/5/7/4309936/spotify-nightmare-chrome-extension-lets-users-download-any-song
A new Chrome extension lets Spotify users permanently download any song currently available from the streaming music service, a massive slip-up that could quickly upset record labels and music publishers. As noted by Dutch website Tweakers, the Downloadify tool appears to take advantage of nonexistent encryption in Spotify's web player, which the company launched in beta back in November. By simply installing the extension — freely available in the Chrome Web Store — and starting to play a song, users will download a full, DRM-free MP3 file of the track.
Spotify allows its premium users to "store" music files locally so long as they keep their monthly subscription active, in turn providing royalties to artists and industry groups. But thanks to this non-sanctioned "tool," any customer can ransack Spotify's 20 million-plus song catalog. The Verge recommends against our readers using Downloadify; its very purpose should be enough to have you questioning its legality. We've reached out to Spotify and Google for more information.
Update: Downloadify is no longer available from the Chrome Web Store. We await word from both Spotify and Google regarding the short-lived exploit.
Update 2: Google has responded to our inquiry, though the company wouldn't discuss Downloadify specifically. Instead, a spokesperson offered the following statement: "We remove apps from the Chrome Web Store that do not comply with our terms of service."
Update 3: Downloadify may have been axed from Google's Chrome Store, but the extension and its associated code remain available via a repository at GitHub.
Source: http://www.theverge.com/2013/5/7/4309936/spotify-nightmare-chrome-extension-lets-users-download-any-song