Decade-old Bluetooth flaw lets hackers steal data passing between devices