Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SoundCloud Data Breach Now on HaveIBeenPwned

haveibeenpwned.com

Post reply on HN
Print view View original

71–80 of 113 posts

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#71

Post by thenthenthen »

crazybonkersai wrote: post #5
throwaway431234 wrote: post #3

SoundCloud is the worst company, so hostile to former paying users! I am a hobbyist songwriter and have posted my rough mixes (Apple's Music Memo app which adds drum and bass automagically with two clicks & then mix it in Garage Band) on my SoundCloud for more then ten years. I signed up for their Artist Pro account and was a member for of such consistently for a few years at $17 a month. Once you cancel they then ho…

You can export your entire profile using yt-dlp. Of course you have to do it, when you are still a paying customer.

Do this regularly, like youtube soundclownd ‘silent’ deletes favorites and also blocks songs based on your vpn/geo location. I lost so much music… so i need to resort to scraping. Simple solution: make the song unavailable but please just keep the entry (name-title) in your fav. list.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#73

Post by tern »

gmueckl wrote: post #7
throwaway431234 wrote: post #3

SoundCloud is the worst company, so hostile to former paying users! I am a hobbyist songwriter and have posted my rough mixes (Apple's Music Memo app which adds drum and bass automagically with two clicks & then mix it in Garage Band) on my SoundCloud for more then ten years. I signed up for their Artist Pro account and was a member for of such consistently for a few years at $17 a month. Once you cancel they then ho…

Are there any alternatives?

A lot of people use apps like this lately: https://untitled.stream/, https://gatefolded.com/, https://samply.app/

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#74

Post by LoganDark »

fragmede wrote: post #63
pluralmonad wrote: post #31

Earlier quoted context omitted.

Also, never give out a direct email address, always an alias.

and include a nonce. user+SoundCloud@gmail.com is obviously guessable. user+SoundCloudheuerue64@gmail.com ain't getting guessed.

Gmail plus addressing is like the most widely known thing ever and also like the first thing checked by every scammer and hacker. It's so useless I've been using it for practically ever and spam related to brand new data breaches still has it stripped out. There have only ever been like two occasions where a spam email in my inbox didn't strip out the plus address.

Use something like Firefox Relay where it's impossible to strip out anything.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#75

Post by idiotsecant »

gnabgib wrote: post #37
djee wrote: post #20

"The data involved consisted only of email addresses and information already visible on public SoundCloud profiles". So they've scraped public data. Why care?

Hackers stole information of 29.8M accounts (~20% of users). SoundCloud is downplaying the data beyond email address as "publicly available", but the data wasn't scraped. "Profile statistics" aren't public either. Their main response[0], seems to focus on passwords and payment details being the only risky data. They even imply email addresses are public. > no sensitive data was taken in the incident.The data involved…

If the email addresses were visible on public profile pages in what sense are they not public?

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#76

Post by LoganDark »

storystarling wrote: post #66
goblin89 wrote: post #6

Earlier quoted context omitted.

SoundCloud used to be good prior to the redesign. Recently I decided to evaluate it for serious use and start posting there again, only until their new uploader told me I need to switch to a paid plan, even though I triple-checked I was well within free limits and under my old now unused username I uploaded a lot more (mostly of experimental things I am not that proud of anymore). It looks like their microservices ar…

This sounds like a classic consistency vs latency trade-off. Enforcing strict quotas across distributed services usually requires coordination that kills performance. They likely rely on asynchronous counters that drift, meaning the frontend check passes but the backend reconciliation fails later. It is surprisingly hard to solve this without making the uploader feel sluggish.

That would explain why the front-end would allow you to attempt something that goes over your limits, but not why the back-end would reject something that doesn't go over your limits.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#77

Post by hamdingers »

idiotsecant wrote: post #75
gnabgib wrote: post #37

Earlier quoted context omitted.

Hackers stole information of 29.8M accounts (~20% of users). SoundCloud is downplaying the data beyond email address as "publicly available", but the data wasn't scraped. "Profile statistics" aren't public either. Their main response[0], seems to focus on passwords and payment details being the only risky data. They even imply email addresses are public. > no sensitive data was taken in the incident.The data involved…

If the email addresses were visible on public profile pages in what sense are they not public?

Email addresses are not visible on public soundcloud profiles. You can test this yourself.

I read the statement to be "emails plus public information"

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#79

Post by al_borland »

Razengan wrote: post #68
al_borland wrote: post #49

I went through and deleted a bunch of accounts a while ago, SoundCloud being one of them. It looks like I don't show up in the breach. It's nice to know SoundCloud actually deleted my data, I'm never totally sure what happens on the backend.

For some services, like Anthropic/Claude's stubborn refusal to let you remove your payment method, deleting isn't even an option.

I ran into this with Sony. The website said to call, so I did. After 45 minutes on hold the guy just hung up on me saying he couldn’t help, without even really listening to me.

For a company that’s been hacked as many times as Sony, I find this to be pretty pathetic.

Re: SoundCloud Data Breach Now on HaveIBeenPwned

#80

Post by parable »

al_borland wrote: post #49

I went through and deleted a bunch of accounts a while ago, SoundCloud being one of them. It looks like I don't show up in the breach. It's nice to know SoundCloud actually deleted my data, I'm never totally sure what happens on the backend.

They still seem to use past email addresses for marketing communications, despite the email address on file having been changed months ago. They definitely still keep old data around and fail to sync data between vendors. Whether that's indicative of their data deletion policies remains to be seen, but to me the lack of care for using past data for active accounts doesn't paint them in a very good light.
Post reply on HN