BOSE Sountouch systems are connected wireless speakers that lets you play music directly from a phone or tablet using Bluetooth, or connect the speaker to your Wi-Fi network for instant in-home listening.

All modern connected speakers let’s you integrate various music services for enhanced music experience. These are the services you can connect a bose speaker to:

BOSE Soundtouch music services

Spotify API

Here’s an example of user supplied data returned by spotify API

Spotify playlist via API

BOSE XSS Spotify

So overall you can play some public playlist on spotify and share it publicly when anyone using connected devices plays your playlist you can steal Oauh tokens for their Amazon music, itunes, Pandora and spotify accounts. Compromising them all. Here’s the full P0C video: