[flippyhead]

Ok so the lesson here is be really careful where you allow API access using your keys.

[x1798DE]

I think the lesson is that you only have to trick people into authorizing your malicious app once.

[lostlogin]

Which makes a mockery of their advertising showing music everywhere easily.