Someone hijacked Spotify's Share-to-Instagram asset for a 2004 track(ercanermis.com)

1 pointsby ermishace 7 meses2 comments

Someone hijacked Spotify's Share-to-Instagram asset for a 2004 track

https://ercanermis.com/when-spotifys-share-to-instagram-flow-turns-into-a-free-billboard/

2 comments

ermishace 7 meses

I was sharing an old Turkish pop track on Spotify (“Füsun Önal – Ah Nerede”, 2004). Instead of the expected album art, Instagram showed a completely unrelated person’s Instagram profile screenshot, basically a silent injected ad.

I dug into how Spotify generates Instagram story assets and mapped possible attack vectors in the legacy catalog pipeline. Curious if anyone’s seen similar behavior with older metadata ingestion paths.

Nextgridhace 7 meses

Despite all the AI slop I don't quite get it, was the track metadata pushing an incorrect cover image (a screenshot of someone's Insta profile) or was it linking to an Insta profile (meaning the track/artist metadata had a field for their Insta and it was hijacked)?