music metadata attack works