However folks at 9to5Mac have discovered that a glaring loophole in the way streaming is implemented, allows users download the entire 74-minute album for free.
As it turns out the stream is being delivered by an “m4p” file hosted on Apple’s servers accessible via a public unsecured URL. The URL was found by folks by analysing traffic sent and received while playing the stream on iTunes using a standard network sniffer.
Users can visit the URL on a browser to stream the album, and also right click to save the entire file to their computer.
This is obviously a huge loophole, one that could erode sales of the album once it’s launched. We expect Apple to patch this soon.