iiinova — where your digital self keeps evolving

Samuel @samuelscheit.com · 07/06/2025

🔓 Step 4: Decrypt the file Request AES decryption key from the Accesspoint Receive the raw key Decrypt with AES-128-CTR Done. You now have a DRM-free ready to play audio file.

100

Samuel @samuelscheit.com · 07/06/2025

🎶 Step 3: Download the track Request metadata from Spotify’s internal API Receive links to multiple audio files (bitrate varies) Download the file of your choice Max 160kbps for free users, higher for premium

100

Samuel @samuelscheit.com · 07/06/2025

👤 Step 2: Authenticate Send username + password of the spotify account (premium OR free) Receive ephemeral access token valid for 1 hour Use this token to fetch metadata and download links for any track

100

Samuel @samuelscheit.com · 07/06/2025

🔐 Step 1: Connect to Spotify’s Accesspoint API Start a TCP connection Perform a Diffie-Hellman handshake Derive shared keys Setup Shannon stream cipher for communication

100

Samuel @samuelscheit.com · 07/06/2025

/3 After exhausting all responsible disclosure options, I feel obligated to make this information public in the hope that it will finally prompt Spotify to take action and implement proper security measures.

100

Samuel @samuelscheit.com · 07/06/2025

1/ Back in 2020, a researcher reported a flaw to Spotify: Their Accesspoint API lets anyone with a valid account download and decrypt song data without any DRM or device attestation. They dismissed it and didn't take any action for more than 5 years to address or fix the issue.

100

Samuel @samuelscheit.com · 07/06/2025

🧵Spotify’s DRM is Broken — How Anyone Can Download and Decrypt Songs Without Protection This is a story about how I discovered a security flaw in Spotify’s Accesspoint API that’s been ignored for over 5 years.

110

Samuel @samuelscheit.com · 07/06/2025

lol ChatGPT Deep Research is trying to bypass paywalls

010

Reposted by Samuel

Hirbod @hirbod.dev · 07/11/2024

@samuelscheit.com is cooking something incredible. I am very bullish on this new list approach. samuelscheit.github.io/react-native...

samuelscheit.github.io

React Native Skia List

The fastest react-native list renderer

1213

Reposted by Samuel

thedankelly.bsky.social @thedankelly.bsky.social · 07/11/2024

🔥 Pretty cool to fire off this blog post about RN Lists and then learn about a brand new List! samuelscheit.github.io/react-native...

samuelscheit.github.io

React Native Skia List

The fastest react-native list renderer

1205

Samuel @samuelscheit.com · 07/11/2024

Thanks for the shoutout. If anyone wants to help with PR‘s, bug reports, docs writing feel free to contribute, I can use any help github.com/SamuelScheit...

040

Samuel @samuelscheit.com · 02/11/2024

Concluding from the domain, I looked up OVH bare metal server prices and configured the $159/month server option. It has the following specs: - CPU: AMD EPYC 4464P - 12c/24t - 3.7GHz/5.4GHz - RAM: 64GB DDR5 - SSD: 2x 960 GB www.ovhcloud.com/en/bare-meta...

ovhcloud.com

Advance-3 Dedicated Server

Get an ADV-3 dedicated server to host your e-commerce store and other websites. vRack private network 100 Mbps + 500 GB storage + Anti-DDoS included.

020