Yeah - you need code execution on the victim device - you need internet connectivity - you need bluetooth permission - if the victim device has GPS itself,

Yeah - you need code execution on the victim device - you need internet connectivity - you need bluetooth permission - if the victim device has GPS itself, then this attack is pointless because you may as well just use that directly.