13. The method of claim 12 : wherein the trusted communication is facilitated such that the sandboxed application never learns at least one of a private IP address and a hardware address of the networked media device when: a first Network Address Translator (NAT) device coupled with a network on which the client device operates receives communications from a public IP address of a different network on which the sandbox reachable service operates, and a second NAT device coupled with the different network on which the networked media device operates translates the private IP address of the networked media device to the public IP address visible to the sandboxed application.
12. The method of claim 1 , wherein the client device and the networked media device reside on networks that are incommunicable with each other comprising at least one of a firewall separation, a different network separation, a physical separation, and an unreachable connection separation, and wherein the sandboxed application of the security sandbox of the client device and the sandbox reachable service of the networked media device communicate with each other through a relay service employed by a pairing server having a discovery module and a relay module to facilitate a trusted communication between the sandboxed application and the sandbox reachable service.