Digital music streaming service Spotify has fixed the security flaw that allowed users free song downloads from its song library via Google’s Chrome browser without any digital-rights protection.
Google’s Chrome browser extension known as Downloadify enabled downloading MP3 files by making use of vulnerability in Spotify’s web player.
Originally, Spotify’s subscription model allows subscribed users to download songs to their devices and listen to them only if they have an updated membership and the feature gets disabled if they depart Spotify or miss a payment.
According to Robin Aldenhoven, the developer of Downloadify, the extension was created to get Spotify to fix the flaw that has been unaddressed for a long.
Additionally, reports reveal that the web player did not deploy any encryption technique, which further enabled users to start playing a song and the extension started to download a full DRM-free copy of the song in MP3 format.
Currently, Spotify has about 24 million active users, including six million, who pay a monthly fee for newly added features.
In February, the digital music streaming service revealed plans to launch free music streaming to mobile devices in the UK, as part of its efforts to promote on-the-go streaming of music tracks.