I suspect that the strategy I've described in my the post (forwarding a signed email with some modified headers) isn't actually new, and that it's just the first time I've looked closely enough to become interested in how it works.
The whole "put a misleading string in the PayPal name field" thing may be new.
> How would they even validate their new attack vector? I would like to think that there’s scam A/B testing or something similar…
I'm curious about that as well. My guess is that there's nothing as sophisticated as A/B tests with measured results going on, but I'd love to learn more.
If you end up looking for a product that does this rather than building it yourself, I've had a good experience with the WiiM Mini: https://wiimhome.com/wiimmini/overview
> Volume controls also shouldn't just be a flat wideband gain - they should respect how we actually perceive sound so the timbre doesn't change as the level changes (when you turn the volume down, you are typically left with just the stuff in the vocal frequency range, and lose all the bass etc).
The amp I'm upgrading from was interesting in this regard. In addition to the main volume knob, it had a loudness knob. The manual actually recommended keeping the volume knob fixed most of the time and using the loudness knob to set the listening level throughout the day.
From the manual:
> 1. Set the LOUDNESS control to the FLAT position.
> 2. Rotate the VOLUME control on the front panel (or press VOLUME +/– on the remote control) to set the sound output level to the loudest listening level that you would listen to.
> 3. Rotate the LOUDNESS control counterclockwise until the desired volume is obtained.
Amazing. This is probably the correct way do make amp controls. I'd say the volume should be a multi turn trim potentiometer in the back of the device so you don't have to brief your guests on correct operation.
Nice! I don't have any Schiit gear, but few months ago I started reading the founders book 'Schiit Happened'. I got halfway through (and then got distracted by other books, need to pick it back up), but can definitely recommend it for anyone interested in audio, and especially if you already have some Schiit!
It seems that you’re correct! I’m not sure what led me to believe that. I’ll update the post when I get home later.
edit: fixed
I dug into the API similarities between the speakers more and it seems like they're both using this software called StreamSDK [1]. I hadn't heard of that and it's given me more to research on these.
The whole "put a misleading string in the PayPal name field" thing may be new.
> How would they even validate their new attack vector? I would like to think that there’s scam A/B testing or something similar…
I'm curious about that as well. My guess is that there's nothing as sophisticated as A/B tests with measured results going on, but I'd love to learn more.