You Can Download any Spotify Song as an MP3 With This Chrome Extension (Update: Patched)

By Mario Aguilar on at

At long last, Spotify has launched the web-based interface it introduced last year. Unfortunately, it left a gaping security vulnerability that leaves the songs wide-open to download MP3s from Spotify with a simple Chrome extension.

I just downloaded a brand new record by a very popular recording artist in less than 10 seconds using this extension. This definitely illegal. Do with this knowledge what you will. YOU HAVE BEEN WARNED.

According to the developer of Downloadify, Spotify neglected to encrypt the MP3s coming across the web to your browser to your ears. They even suggest a potential fix for the problem. Until the problem is fixed, Downloadify will let you pull down an MP3 of any track just by double-clicking it. We've just now emailed Spotify for comment, and we wouldn't expect the vulnerability to last too much longer. Ouchie for Spotify. [Tweakers via The Verge]

Update: It appears Downloadify has been pulled from the the Chrome store. If it's already installed on your computer (or you can find another way to get it) it still works.

In fact, here's a very special message from the man supposedly behind Downloadify:

Update: After only about 12 hours, Spotify's managed to patch the vulnerability, preventing the download from working: