![]() As such, it is their responsibility that no one with malicious intent would be given the WiFi password or direct access of a device. Ultimately, if someone was able to get physically close to the device to modify it locally or was given access to the local network, this must've happened with the consent of the network administrator or device owner. We however, cannot control how third party hardware developers add such "forget" features and don't have access to neither our own user settings or the devices involved to force the options to be used. So we did our best to provide the best of both worlds, for both types of user behavior. There's also an automatic forget period for devices that don't get re-connected within a given timeframe. Remote control of devices is a feature that we receive a lot of positive feedback about and based on the opposite end of the feedback spectrum - for users who want only the local functionality we added options within the app to show only local devices and also to forget a device once it's added. HOW CAN I DISABLE ACCESS TO SPOTIFY CONNECT ON THIS EQUIPMENT UNTIL THIS MAJOR SECURITY PROBLEM IS CORRECTED?!! HOW CAN I FIND OUT WHICH SPECIFIC SPOTIFY USERS HAVE THE ABILITY TO HIJACK MY EQUIPMENT AND HOW CAN I SELECTIVELY REVOKE ACCESS, PREVENTING UNWANTED USERS FROM ACCESSING MY EQUIPMENT BEHIND MY FIREWALL ON MY PRIVATE NETWORK VIA SPOTIFY’S UNSECURED NETWORK SERVICES?!! ![]() My equipment allows me to disable remote access when the unit is in Standby / Off mode, but that doesn’t stop it from being hijacked when it is on and being used (most of the time). I can completely disconnect my equipment from the network but then I lose all functionality. THIS IS A HUGE SECURITY HOLE IN SPOTIFY CONNECT THAT NEEDS TO BE CORRECTED IMMEDIATELY. They can play objectionable content to children, they can wake me and my neighbors in the middle of the night, they can play at excessive volumes and blow out my equipment. They can even interrupt what I am currently listening to, take over my equipment, and blast anything they want into my space. That is BAD.įurthermore, even after they leave my Wi-Fi network, from anywhere in the world, they can turn my equipment on and play any content they want at any time, at any volume. I can’t limit speaker remote control access only to my phone or computer, or specific ones that I choose. There appears to be no way to revoke remote control of a Spotify Connect playback device / speaker / stereo / etc without being able to access the app / account on the phone / computer / etc that has previously accessed the equipment and played content through it.Īny Spotify user who joins my Wi-Fi network can discover and connect to my equipment and play music through it, whether I want them to or not. THIS ISN’T JUST THOUGHTLESS DESIGN, THIS IS IRRESPONSIBLE. Operating System: Embedded in speaker/processor Any computer/device running Spotify appĪNY SPOTIFY USER WHO HAS EVER ACCESSED MY SPOTIFY CONNECT CAPABLE SPEAKER / EQUIPMENT / PLAYBACK DEVICE CAN HIJACK IT AT ANY TIME FROM ANYWHERE. Can’t revoke remote control of Spotify Connect spe.
0 Comments
Leave a Reply. |