Until this is resolved, we no longer recommend buying or using Logitech products. We have reached out to Logitech for a clarification and will update this post when available. We hope that this was an oversight on their end and that it will be reverted shortly. With the latest update to the Logitech Harmony Hub, this is no longer possible. For privacy and speed it is important that home automation devices communicate locally, without data leaving the network. Logitech has disabled the local API of the Harmony Hub with their latest software update (v4.15.206). (Verified, it’s from an account connected to a email address)įorum post by Harmony employee on the Home Assistant forums. Until then, we don’t expect the websocket API that we are using since 0.84.3 to go away or change until we migrate back, so if your Harmony setup works today, don’t change anything.
We will verify with Logitech if this post is official, and if so, we will revert the Home Assistant implementation back to using the XMPP API. Update 7 (21 dec): Even better news! Someone from Harmony posted in our forums and stated that they are now committed to maintaining their local XMPP API. Tenable, the cyber security firm that discovered the security vulnerabilities, has released a Research Advisory detailing the issues and the disclosure timeline. The developer-only firmware that reinstates the local XMPP API. Thanks Logitech for turning around and working with your users. This is great and this restores our trust in Logitech. Logitech is also working on a new version of the hub firmware that fixes the vulnerabilities. Note that installing this version voids your warranty. Update 6 (21 dec): Great news! Logitech has announced in a forum post that it has introduced an XMPP Beta Program that makes it possible to install a developer firmware version which reinstates the XMPP API as it was, including the security vulnerabilties.
0 kommentar(er)
