Ok thanks. I still don't see more than a general relation to the first two links, but the third link basically says Bluetooth is highly vulnerable if not configured properly:
- Already done: Configure devices so that the user has to approve any connection request
- Answers one of my questions: Turn off Bluetooth when not in use
- Not configurable (unless this refers to discovery mode): Do not operate Bluetooth devices in Mode 1;
Already done: ensure discovery mode is enabled only when necessary to pair trusted devices
- Not configurable: Trusted devices should be paired in safe environments out of the reach of malicious elements
- Not configurable: Minimize the range of devices to the shortest reasonable distance
- Already done: Consider installing anti-virus and personal firewall software on each Bluetooth device
Windows 8.1's Bluetooth settings are minimal at best:
- "Allow Bluetooth devices to find this PC" is already unchecked.
- "Alert me when a new Bluetooth device wants to connect" is already checked.
- (Windows 7's "Allow Bluetooth devices to connect to this computer" doesn't exist in 8.1.)
- I also have Avast Antivirus running on the computer since day one. Virus scans are fine according to two other products.
- I will now turn off Bluetooth when not in use (rarely used).
So unless I'm misunderstanding, it seems these settings aren't working as described, because I had two devices paired which I never authorized. Which still leaves the questions: Is this something I should be concerned about or is it a problem inherent to Windows 8.1? Could either of these devices which paired with my computer have accessed or altered my data?