For a school assignment we have to talk about a certain topic within IoT. We chose security, and have to make a sort of live demo for it. So we 'hacked' up an rc-car, and attached an arduino to it that is controllable with a ps3,xbox controller and/or mobile phone.
The premise of the demo is to show a vulnerability in IoT security and the only wireless protocol that is sending out 'sensitive' data to the user, is Bluetooth. So in total we are making 2 rc-cars, one that is protected from outside control/hacks and one that is completely vulnerable to that.
So my question is, what are some (common) vulnerabilities of Bluetooth that we can demonstrate. And it can't just be stuff like "make a stronger password" or "just hide the ssid". There has to be like an exploit like zigbee has/had.
Thank you for considering my question.
ps: Let me know if this is the right stackexchange to ask this question.