My Pebble smartwatch, like many (most?) other smart watches, uses Bluetooth Low Energy (Bluetooth Smart, BLE, BTLE, etc) to communicate with my smart phone.
There's some security in the link, including authentication, data encryption, and signing, however last summer researchers suggested an attack that appears to compromise the encryption.
I have email sender names and subjects, phone numbers and names, and other data sent to my watch over this link, further this link allows me to query my smart phone and to some degree control it. Most worrying, I typically act on the information it provides, so if incorrect information was sent, such as an emergency text from a loved one, it can be a way to control me to some degree.
The impact of this particular attack isn't immediately clear to me, can someone help break it down for me?
I'd like to know if there are any simple steps I can take that will prevent this attack. If not, I may need to discontinue use of it until security is improved.
Are there other attacks I should be aware of for Bluetooth Smart?