

- HARMONY ASSISTANT QUARTER REST INSTALL
- HARMONY ASSISTANT QUARTER REST UPDATE
- HARMONY ASSISTANT QUARTER REST SOFTWARE
This PR is currently being tested, and if all works well, will be released as a hot fix on the 19th.
HARMONY ASSISTANT QUARTER REST UPDATE
There is now an open pull request for Home Assistant to update the Harmony integration to use it. Home Assistant developer with the help of and other amazing people in the comments to this post, did manage to figure out how the local websocket API works for the Logitech Harmony, which is also used by the Logitech Harmony iOS app. Update 4 (18 dec): No word from Logitech yet on the future of the XMPP-based local API. We can’t guarantee that it will work, but if we can get it to work, we will do a hot fix release. Join #devs_backend on our chat if you want to help with development. Home Assistant developer is looking into updating the PyHarmony library to use this. Update 3 (18 dec): Twitter user has discovered that there seems to be a second undocumented local API that is being used by the Logitech Harmony iOS app. Message is still that more details will follow soon. Update 2 (18 dec): the same employee now created a new post on their forums (we assume for more visibility). Update 1 (17 dec): still no response on our inquiries but Twitter user found an answer from Logitech on a thread on their forums (visible after clicking a few times on “More answers”):įorum post by member of the Harmony Team. Until this is resolved, we no longer recommend buying or using Logitech products. We have reached out to Logitech for a clarification and will update this post when available. We hope that this was an oversight on their end and that it will be reverted shortly. With the latest update to the Logitech Harmony Hub, this is no longer possible. For privacy and speed it is important that home automation devices communicate locally, without data leaving the network.
HARMONY ASSISTANT QUARTER REST SOFTWARE
Logitech has disabled the local API of the Harmony Hub with their latest software update (v4.15.206).

(Verified, it’s from an account connected to a email address)įorum post by Harmony employee on the Home Assistant forums. Until then, we don’t expect the websocket API that we are using since 0.84.3 to go away or change until we migrate back, so if your Harmony setup works today, don’t change anything. We will verify with Logitech if this post is official, and if so, we will revert the Home Assistant implementation back to using the XMPP API.

Update 7 (21 dec): Even better news! Someone from Harmony posted in our forums and stated that they are now committed to maintaining their local XMPP API.

Tenable, the cyber security firm that discovered the security vulnerabilities, has released a Research Advisory detailing the issues and the disclosure timeline. The developer-only firmware that reinstates the local XMPP API. Thanks Logitech for turning around and working with your users. This is great and this restores our trust in Logitech. Logitech is also working on a new version of the hub firmware that fixes the vulnerabilities. Note that installing this version voids your warranty.
HARMONY ASSISTANT QUARTER REST INSTALL
Update 6 (21 dec): Great news! Logitech has announced in a forum post that it has introduced an XMPP Beta Program that makes it possible to install a developer firmware version which reinstates the XMPP API as it was, including the security vulnerabilties.
