Assuming an attacker has complete control over your computer, and your phone is within bluetooth range, can he make the phone generate a token without user interaction?
I was assuming the user would have to click a button on the phone or something, but I couldn't see it in the video.