alexmercerind / audire

Identify music playing around you.
GNU General Public License v3.0
234 stars 7 forks source link

[Enhancement] Add optional delay to Shazam requests #30

Open LeftyDextrous opened 8 months ago

LeftyDextrous commented 8 months ago

Hello,

After reading some of the techniques used to anonymize data, I can tell that Audire and Songrec is clearly focused on privacy.

With that noted, it occurred to me that important information could be potentially deanonymized by Shazam, such as location or affiliation information, by matching Shazam request timestamps to streaming service request timestamps. If the music player's location or user is known, the Shazam client's location and possibly connections to other people may be deducted.

Now, I'm no security expert, but this does appear to be an unlikely threat, as it would require Apple to communicate Shazam history with other companies or vice versa. Nevertheless, it is something to keep in mind, and I figure this feature would be easy to implement along with issue #16.