If you are still broadcasting your Wi-Fi network without a password, here is another reason to lock it down: there is nothing to prevent any nearby compatible device from hijacking your Chromecast and displaying whatever the interloper pleases. Since Chrome tabs are broadcastable, this means porn, nyancat, Two Girls One Cup, and oh so much more can be put through to a Chromecast.

We’ve struggled a bit to come up with a description of how exactly the Chromecast accepts video—it’s not streaming, at least when it comes to YouTube or Netflix, but it’s not independent playback either, as with Chrome tabs. Either way, at the inception point, the Chromecast is told by another device to play something via a compatible app, and the Chromecast picks it up and does so.

We’ve been experimenting a bit with our Chromecast and found that when we try to interrupt video from one device with another, the Chromecast hardly even blinks and just pushes the newly played video over the old one. If we try to push a broadcasted Chrome tab to the Chromecast when something else is playing, the browser does pop up an alert, but if we push a YouTube video from a Nexus 7 to the Chromecast, the Chromecast kicks off the Chrome tab with no warning on either side.

The ease of setup facilitates this in part. As long as your device is connected to the same Wi-Fi network as the Chromecast, you can simply pick the Chromecast out of a provided list and start pushing video to it. Seems prime for some intra-household family trolling; Google might want to at least introduce some dialog verification boxes here. Outside trolling is theoretically possible, too: if your Wi-Fi network is open, anyone can jump on, connect to your Chromecast, and feed your TV some video.

We plan on spending a lot of time with the Chromecast in the next few days, so look for our full review soon.

Thanks to Sekkyo for the tip!