Subj : Tunefab music piracy tool leaked hundreds of gigabytes of user da
To   : All
From : TechnologyDaily
Date : Tue Jan 02 2024 21:30:05

Tunefab music piracy tool leaked hundreds of gigabytes of user data over 24 
hours last year

Date:
Tue, 02 Jan 2024 21:28:15 +0000

Description:
DVDfabs dedicated audio conversion tool has been confirmed to be involved in 
a data breach dating back to September 2023.

FULL STORY
======================================================================

Users of the Tunefab suite of music ripping software could be waking up to an 
identity theft nightmare after experts claimed a database left user data 
publicly accessible for roughly twenty-four hours in September 2023. 

You might be reading this and thinking there isnt a story here, and you might 
be right: minimal exposure time, and probably minimal damage  but the cache 
of leaked data is presumed to be around 280GB  which is probably quite a lot 
of data in plaintext or unencrypted databases. 

As a result, we might have to wait a while to see just how much damage has 
been caused by the leak, via a misconfiguration on database platform MongoDB, 
even if it was just for a day. Its the disclaimer, thats right, the 
disclaimer 

Per an exclusive from Cybernews , this estimation, and the discovery of the 
leak itself, comes from cybersecurity researcher Bob Diachenko, who warns 
that, as is often the case with data leaks, the data may be used to build 
more detailed profiles on users whove been unlucky enough to have data 
exposed briefly. 

While tools such as Tunefab operate on a backup your music for personal use, 
wink emoji basis, and must, somehow, get narrowly away with this on some 
legal technicality like Roadrunner versus Wile E. Coyote, theyre almost 
certainly in a legal grey area. 

This is, not least, because DVDfab  the company behind not just this software 
suite, but others designed to rip content from physical media and video 
streaming services  charge for them. 

So, we cannot endorse them, but, from this same perspective, we have to 
acknowledge that they exist, that people do use them, and the problems they 
can cause. 

Buy your copyrighted content from multi-bazillionaire companies who dont even 
need your money to function, kids. Better yet, buy your copyrighted content 
from independent, DRM-free sources, so you have something akin to ownership 
of a digital item. Music piracy sounds cool, but you know what isnt cool? 
Having your personal data breached to dark forces online. 

What you shouldnt do is try and steal content from a service full stop, and 
if you are going to do that (dont write in, we dont want to hear about it, 
la-la-la-la), dont do it by giving money to another service, especially one 
with such an abysmal track record when it comes to safeguarding your private 
data . More from TechRadar Pro Big Tech knows most Brits don't know how to 
protect their online privacy Young people are increasingly worried about 
privacy in the AI age Weve also rounded up the best VPN services right now



======================================================================
Link to news story:
https://www.techradar.com/pro/security/tunefab-music-piracy-tool-leaked-hundre
ds-of-gigabytes-of-user-data-over-24-hours-last-year


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.