Re: Grab the burning torches and pitchforks
I've come back to this because it's still annoying me. This wasn't scaremongering over the Bluetooth API as such
Except for the sub-headline; "Warnings about leaky Bluetooth Web API all-too-accurate".
That appears to me to suggest the Bluetooth Web API is at fault here.
From the article: "Basically, it is possible for a webpage to connect to CloudPets plushie, via Bluetooth in the computer or handheld viewing the page, without any authentication"
Yes; and that's a failure of authentication, not a failure of the Web Bluetooth API. I would refer you to the post below from pdjstone; "Author of the blog here ... I don't think there's anything particularly bad about Web Bluetooth itself (Chrome pops up a prompt and the user has to explicitly choose a device to connect to)".
There is no automatic means for a web page to automatically connect to any Bluetooth device, including CloudToy. That requires human intervention.