Sustainability Navigation

Firmware update blocked API access.

Đã trả lời

Bình luận

227 bình luận

  • Han Jonford

    I figured out how to downgrade (hidden scrollbar in the myHarmony reset page to find smart control) but this does not block future updates. Really, the API access should be restored. If security is the goal, roll it out disabled by default and allow users wishing advanced control the option to turn it back on, perhaps accepting a warning in the process if there's some issue I'm not aware of. My network is locked down well - no security issue with local access to the port, no need to totally disable it.

    0
    Thao tác bình luận Đường dẫn cố định
  • weeha91

    Same for me! This makes the Harmony Hub almost completely unusable for my needs! I want to use it without always being connected to the internet. Plus, I use a third party app to control it from my windows machine and Windows IoT device. Now this is no longer possible! Logitech should really do something about this and let people again allow to connect through local network!

    0
    Thao tác bình luận Đường dẫn cố định
  • bieniu

    I have Harmony Ultimate which is now worthless for me. I used it in conjunction with the Home Assistant, and now it isn't possible after the upgrade. Restoring the previous software isn't a good solution because you can't block automatic updates from the device.

    0
    Thao tác bình luận Đường dẫn cố định
  • Jared9580

    This has rendered my hubs useless as well. This needs to be fixed. If you want to close this down then fine close it by default but offer a toggle switch to those of us that accept the risk to open it back up. I have no concern with local access to my device. It's the cloud service that I have more concerns with.....

    0
    Thao tác bình luận Đường dẫn cố định
  • jkadivnik

    Same here. Since update 206 I can no longer access the API locally.

    Port 5222 is no longer available to use which is the port that allowed applications (home assistant, openhab, domoticz...) to access the state and send commands of the harmony hub.

    0
    Thao tác bình luận Đường dẫn cố định
  • Han Jonford

    Looks like I'm not the only one, Logitech... Still waiting to a response to this, my tweet, and/or my support ticket. Curious to hear the company's response.

    0
    Thao tác bình luận Đường dẫn cố định
  • luma

    I now have 4 Harmony Hubs that are no longer usable in my system at home. This is a pretty serious action to take without notifying customers ahead of time.

    0
    Thao tác bình luận Đường dẫn cố định
  • Bohz

    Same here, Logitech you must fix this in one way or another.

    And change your policy regarding breaking changes communication.

    0
    Thao tác bình luận Đường dẫn cố định
  • dragonpark

    Please rethink this change. I just bought the Harmony Elite about 1.5 months ago and a hub less than a month ago. This change would make me inclined to return both units. I also planned to purchase additional hubs to control other devices around the house, but this change would make them absolutely useless. Local control needs to be kept in place even if it is disabled by default and has to specifically be enabled by the user.?

    0
    Thao tác bình luận Đường dẫn cố định
  • GrantLewis7524

    Taking features away from users and putting your products in a walled garden is a sure way to lose customers. Please restore API access.

    0
    Thao tác bình luận Đường dẫn cố định
  • djchronz

    If Logitech see's this please note that nobody in this thread will accept "its a security risk" from your development team. You guys need to restore this immediately. SHAME ON YOU!!!!!

    0
    Thao tác bình luận Đường dẫn cố định
  • craig_j

    Thanks for this latest update! It broke my homebridge-harmonyhub setup. Now unable to control Activities via Siri.

    At least bring out something HomeKit compatible yourselves before plugging a "security hole" via a update on a device that was working perfectly.

    0
    Thao tác bình luận Đường dẫn cố định
  • kkoeniger

    Same here, please restore API access as fast as possible.

    0
    Thao tác bình luận Đường dẫn cố định
  • joegr

    Me too. I just got three hubs and two remotes. I am/was using them with my home automation system. Now they are close to paperweights. Please resolve this. Why would you block local access?

    0
    Thao tác bình luận Đường dẫn cố định
  • tcaulfld

    This is shameful. Your customers/community deserve an explanation and an apology. If Logitech is unwilling to restore local API access, I expect a full refund.

    0
    Thao tác bình luận Đường dẫn cố định
  • jerobins

    This killed my home automation setup. My kids and wife are now using "logitech" as a curse word. When can I expect a fix?

    0
    Thao tác bình luận Đường dẫn cố định
  • Michael1924

    Note this is a small subset of the people effected by this. Pretty much all non-Google Home / Alexa integrations use the XMPP API, and this update has killed all of those integrations. If the goal is to move away from XMPP, that's fine, but please provide us another local API we can work with, as you've basically not just shot yourself in the foot but blown your own leg off with the home automation community here.

    0
    Thao tác bình luận Đường dẫn cố định
  • TheMattS

    This is a very unwelcome and unneeded change. Needs to be fixed ASAP to allow for local control.

    0
    Thao tác bình luận Đường dẫn cố định
  • djchronz

    @Michael Hallock? not a small subset of users, please don't make this thread sound like that. We need this fixed. No reason to give logitech a reason to drag their feet.

    0
    Thao tác bình luận Đường dẫn cố định
  • tcaulfld

    @daniel shokouhi? I think what @Michael Hallock? ?was saying was that the users posting on the forum are but a small subset of the total number of users affected. It should be clear to Logitech that this was not an edge use case and is directly impacting a large number of users.

    0
    Thao tác bình luận Đường dẫn cố định
  • Michael1924

    What @Tristan Caulfield? said. The people posting HERE right now are a small subset of the MUCH LARGER community of people effected. See the threads on Twitter, various home automation subreddits on Reddit, issue trackers around supporting libraries right now on Github, etc. They just torpedoed their product with a lot of the exact community that has been advocating for them for the last several years.

    0
    Thao tác bình luận Đường dẫn cố định
  • Colin0668

    I can understand that unrestricted access can be a security concern, but completely removing an extremely useful feature (that was a major selling point for many) is NOT the way to fix it. Can this be a toggle-able option instead? That way people who need it (and understand the risks) can continue using this feature.

    0
    Thao tác bình luận Đường dẫn cố định
  • API_SH*T_CRAZY

    Well, to say that this threw a giant wrench into my home automation setup is a wee bit of an understatement, ffs

     

    0
    Thao tác bình luận Đường dẫn cố định
  • Han Jonford

    To all affected users: You can downgrade the firmware as a stopgap measure.

     

    https://community.logitech.com/s/question/0D55A000073ZTpxSAG/downgrade-harmony-firmare

     

    If you only do the RESTORE FIRMWARE step and don't reset the hub, it only downgrades, and does not reset all your settings.

     

    Presumably, the hub will eventually update itself again, unless you block access to various domains on a network level, which I don't have the ability to do without upending my whole internet setup. So - there's a way to get it working for now, but we still need a sustainable solution and an answer from the manufacturer. We're all waiting...

    0
    Thao tác bình luận Đường dẫn cố định
  • tcaulfld

    @Colin O'Dell? ?Compared to some of the hub's other security concerns, this is a non-issue. The update system will accept any SSL Cert, and there is no password set for root access...

    0
    Thao tác bình luận Đường dẫn cố định
  • ErikH

    Logitech, note that this is only just now being discovered. Over the next few days there will be multiple end users of these home automation solutions stating they are unable to use this anymore. And for each of these the response will be that Logitech removed this capability and that it is best to replace Harmony with something else as Logitech is not supporting an open environment.

     

    If you truly wanna disable XMPP and go with a REST-API then provide the API accordingly. That is if you want the Harmony to be part of smart home automation solutions.

    0
    Thao tác bình luận Đường dẫn cố định
  • Han Jonford

    the silence from the manufacturer is deafening.

    0
    Thao tác bình luận Đường dẫn cố định
  • GrantLewis7524

    @Han Jonford: I was able to downgrade my Logitech Harmony Companion's firmware, but so far am not having any luck with my Logitech Harmony Smart Control. I found that that hardware is not supported by the MyHarmony Desktop software, and so I tried the older Logitech Harmony Remote software -- both on Mac and on Windows 10 -- but the software would not recognize the hub on either platform.

    0
    Thao tác bình luận Đường dẫn cố định
  • Michael1924

    Agree @Erik Hendrix? . Im not surprised, only disappointed. Logitech had basically a highly utilized, but undocumented and unsupported feature here. The smart move would have been bringing it into the fold and embracing the community that has grown up around their product. If they want to replace the API with something better than XMPP, that actually makes a lot of sense! But prematurely killing arguably one of the biggest features that have driven their success in the DIY home automation space before supplying us with another option is a terrible choice here.

     

    This is an OPPORTUNITY to do the right thing and maintain your community here. We are telling you we NEED a local control API for your product to be viable in the DIY home automation space, and you LUCKED INTO being the defacto king there by having the XMPP protocol that some dedicated individuals took the time to reverse engineer. By all means, replace it with a BETTER API, XMPP has its own issues, but recognize the need in one of your major customer bases for a local control API.

     

    The other option is we all move away from your products, and stop recommending them as viable to others.

    0
    Thao tác bình luận Đường dẫn cố định
  • KatCeDe

    Hi,

    my binary HarmonyHubControl (source available in internet) still works with old and new firmware.

     

    Ralf

    0
    Thao tác bình luận Đường dẫn cố định

Vui lòng đăng nhập để lại bình luận.