Interesting discovery controlling my Thermostat project.

You all may be used to this, but it took me completely by surprise.

As I was progressing on my Thermostat project (currently updating the e-paper display from essentially hard coded data), I began to explore how my home server would send commands and data updates to my device. In this, I found the node.js BLE examples and then suddenly realized that I didn't need to create an 'API' - the fact that the Espruino code essentially runs as an open console interface means that if I want to update any data, I can simply send a javascript command to assign a value to it!

Need to update the forecast? Just send this over the 0x0002 characteristic :

"\x03\x10forecast = ['Mostly cloudy, with','a high near 70.    ','S wind around 7 mph','Chance of rain 20% '];\n";

Now I do have to admit this is a HUGE security exposure, but it sure is easy!