Mastodawn

Maxim Pistos Jan 14

Kennt jemand eine coole (am liebsten FLOSS) Alternative zu #BandsInTown? #konzertbubble

BobDaHacker 🏳️‍⚧️Dec 26

🎵 New Blog Post: Bandsintown Verification Bypass (Fixed, $200 + Swag)

Found a way to claim any unclaimed artist page on Bandsintown without verification:

Discovered API endpoint from requesting to join Bieber's team
Used same endpoint on Rick Astley (unclaimed) - bypassed all OAuth/social verification
Got full access to 191k followers, their emails, names, locations
Could send push notifications and post as any unclaimed artist (including diddy xd)

I could have rickrolled 191k people for real. I did not.

Bandsintown handled it well - fast fix, honest about bounty limitations, shipped me swag.

Also found a new bypass while writing this - currently disclosing responsibly.

Full writeup: https://bobdahacker.com/blog/bandsintown

#InfoSec #BugBounty #ResponsibleDisclosure #Bandsintown #Security #Privacy #CyberSecurity #RickAstley #APISecuity #Music

Bandsintown: How I Almost Rickrolled 191k People

How I found a verification bypass in Bandsintown that let anyone claim unclaimed artist pages with a single API call - including Rick Astley's 191k followers, their emails, and the ability to send push notifications as any artist.

ferricoxide Dec 16

#BandsInTown, #SongKick, #Spotify, etc. all need some kind of "don't tell me about performances at " (or better ) option.

Even if I liked a given act, telling me about a performance in some random city (that I haven't previously expressed a desire or willingness to travel to) is the opposite of helpful.

cthululemon Nov 4

Is there a privacy-preserving, maybe FOSS, maybe self-hostable equivalent to bandsintown?

Even one of those three would be lovely to know.

#foss #privacy #BandsInTown #help

ferricoxide Sep 8, 2025

Ok. Looks like I need to clean up my #BandsInTown profile: I'm getting event-notifications for Bassnectar.

The Fall of the Bassnectar Empire

According to women and former collaborators who spoke to VICE, and a new lawsuit, the EDM star abused his fame and power to build a complex web of secret and manipulative relationships.

VICE