Live data from Hacker News

Mystery tracks being 'forced' on your Spotify

bbc.co.uk

11–20 of 65 posts

Re: Mystery tracks being 'forced' on your Spotify

#11
It's quite clear to me that this s a fraud to make money. Those tracks are produced by algorithms and played via access tokens gathered from sites like the playlist converters floating around. Be wary of your account data and check the access of 3rd party apps regularly.

https://support.spotify.com/uk/account_payment_help/privacy/... for information how to do that for Spotify.

Re: Mystery tracks being 'forced' on your Spotify

#13
This happened to me - apparently I spent 34 hours last year listening to a song called "Bear Claws" by an artist called Andrew Brady. I did some digging and all I could find was an Irish guy on Twitter with 2 tweets to his name. The song and the artist no longer existed on Spotify last time I checked. The odd thing is that these songs never seem to show up in my play history.

I did link Spotify to Facebook at one point, although I disabled all of my external apps on the Facebook side a long time ago and have used my username / password to log in ever since. I've never used a "playlist converter" or linked anything else to Spotify, as far as I know. My password has always been unique.

It should go without saying that if these access tokens have been breached they really should be revoked. I imagine Spotify will finally do something about it now that this has hit the mainstream press.

Re: Mystery tracks being 'forced' on your Spotify

#14

This happened to me - apparently I spent 34 hours last year listening to a song called "Bear Claws" by an artist called Andrew Brady. I did some digging and all I could find was an Irish guy on Twitter with 2 tweets to his name. The song and the artist no longer existed on Spotify last time I checked. The odd thing is that these songs never seem to show up in my play history. I did link Spotify to Facebook at one poi…

Did you disable your external apps or check them on the Spotify side as well?

https://support.spotify.com/uk/account_payment_help/privacy/... for instructions.

Re: Mystery tracks being 'forced' on your Spotify

#15
post #6

Reused passwords that appears in breaches maybe?

One guy quoted in the article claims he changed his password a bunch of times and since he's a 'cybersecurity graduate' I'd expect him not to have reused passwords.

I wouldn't put much faith in anything that involves the word "cybersecurity".

Re: Mystery tracks being 'forced' on your Spotify

#17
post #6

Reused passwords that appears in breaches maybe?

Doesn't seem to be the case, as people have already tried changing their password. From the article: >On Reddit, Callum Dixon wrote: "The same Bergenulo Five keeps being played on my account and I've tried everything - changed my password, logged out of everywhere. I can't stop it!"

Sounds like he enabled a shady 3rd party app on Spotify. Access tokens do not change when the password is changed.

Re: Mystery tracks being 'forced' on your Spotify

#19
This is why I refuse to play the Discover Weekly playlist. I strongly believe that Spotify is getting money out of made up artists, with songs put up by algorithms in some way, and that's the best way to get them to you.

Regarding the 'hacking', it never happened to me, but it's easy to see how troublesome that may be. But that's what we get for trusting an application that promises to get us free music forever. It had to have drawbacks, eventually.

Re: Mystery tracks being 'forced' on your Spotify

#20
Very interesting! I had something that sounds similar to this a couple of years ago.

My Spotify had a new music "Device" listed with a weird name. Frequently the device would be selected and a song I'd never heard of would start playing, with no sound as it went to the rogue music device.

On my Spotify account I could see a new linked application that I hadn't ever setup. I deleted it, kicked out any logins that Spotify allowed me to do and the problem went away for a day or so. Then it magically reappeared!

When I set up my account I did so with my Facebook account. At one point, IIRC, you could have an account created via Facebook but that meant you always had to log in using Facebook. They later changed this to allow you to set a password and use either.

Assuming the worst I secured my Facebook account (password change/revoking access/etc). No luck. What did work was setting up a proper Spotify password. I'd always logged in with Facebook and never bothered changing the password when they added that feature. Once I changed it I could delete the application, kick out any applications, and then it never came back.

Complete speculation: When Spotify allowed Facebook linked accounts to have a separate password, they generated me a password that was "guessable" and someone used it to access my account?

Post reply on HN