36. The method of claim 35 : wherein the trusted communication is facilitated in a manner such that the sandboxed application never learns at least one of a private IP address and a hardware address of the networked media device when: a first Network Address Translator (NAT) device coupled with a network on which the client device operates to receive communications from a public IP address of a different network on which the sandbox reachable service operates, and a second NAT device coupled with the different network on which the networked media device operates to translate the private IP address of the networked media device to the public IP address visible to the sandboxed application.
37. The method of claim 36 : wherein the networked media device comprises a plurality of sandbox reachable applications including the sandbox reachable application, wherein a service agent module of the networked media device coordinates communications with the discovery module of at least one of the security sandbox and the pairing server, wherein the security sandbox is at least one of an operating system on which the sandboxed application is hosted and a browser application of the operating system, and wherein the networked media device is at least one of a television, a projection screen, a multimedia display, a touchscreen display, an audio device, and a multidimensional visual presentation device.