You are reading a single comment by @maze1980 and its replies. Click here to read the full conversation.
  • I would not implement something like ota.setMode({mode="on|off") because it'll be still insecure if enabled. Signed updates only would be the way to go, but that would require proper key management, that is not comfortable at all - unless it is build into the IDE.
    I'll try to remove all ota.h/ota.c references from the code, and re-compile without.

    Telnet and OTA are nice features for development, that is I have to agree. But they should not go to the wild, unless you want Espruino devices to join Mirai and other botnets. In my opinion they should be disabled in the standard firmware.

About

Avatar for maze1980 @maze1980 started