Sendspin’s protocol specification requires devices to reject audio and volume commands for playback roles they have not approved. Previously, the rules told a server not to send those messages without also requiring the receiver to ignore them.
A related pairing correction requires a fresh code entry for every attempt and limits the server to twenty rounds. Previously, only the client had that limit, leaving an intermediary a route to repeatedly guess against one entered code. These are requirements for device and server implementations; the specification changes alone do not establish protection in every Sendspin product.