Hi there,
I have an app which keeps getting redetected as a new app to PanoScrobbler, which is perhaps its own issue and I'll fill out a bug if I haven't done something dumb.
The issue here however is that this app keeps scrobbling to my public last.fm account without me ever accepting it as a scrobbling source.
The data leaked is, right now, not super dangerous or embarassing but a fix should be implemented for the user's sake that these scrobbles are not sent to the server and only saved in a pending queue.
Where I don't know how the app is implemented, I must impress how important it is to scrobble them to /dev/null (a joke, I mean "to nowhere") instead of a server while they are not confirmed.
Doubtlessly, the app should even tolerate lost scrobbles before leaked scrobbles
Let me know if there's any more detail needed.
(Steps to reproduce: listen to music on a new app and don't answer PanoScrobbler when it asks if it should scrobble from this app. Check your last.fm -- PanoScrobbler didn't wait before sending)