Collin Mulliner did already present an attack on Bluetooth based HID devices. Luis Miras recently presented a similar attack on regular RF HID devices at CanSecWest. The hardware part is pretty interesting, check out the slides!