The process of pairing two Bluetooth devices, for example, usually needs physical input on both devices. This setup weakens that requirement, and it's unclear w

The process of pairing two Bluetooth devices, for example, usually needs physical input on both devices. This setup weakens that requirement, and it's unclear why, other than convenience and gimmickry. One possible risk is that streaming video to the Chromecast could be used to exploit security flaws in the video codec. That might sound like a stretch, but you're increasing your attack surface. Where previously, the host would have had to intervene to accept a stream, now there's this weak audio-based security system. However minor the possible risks to the Chromecast are, this method of authentication just seems to be asking for trouble.