[louprado]

If I understand correctly, the Bluetooth exploit also requires a man-in-the-middle attack during pairing. Wouldn't the victim then see two Bluetooth devices with the same name during pairing ? Also most Operating Systems then order the list of devices by signal strength. Without physical access to the victims home/office/etc., it would be hard for the attacker to have a higher signal strength since most users would be pairing to a device in close proximity. In a public place this could be easier, but even then it would probably fail more often then it would work.