Google Home, Chromecast Leak Location Information

The devices don’t require authentication for connections received on a local network; and, HTTP is used to configure or control embedded devices.
Source: Threadpost