Successfully downgraded my hub to 4.15.193 and restored API access. Full repro:
Launch MyHarmony app on PC.
Press Alt+F9 to open the advanced tools menu
Scroll the window to find your Harmony model.
Select “Factory Reset” for the appropriate model. This does not do anything immediately.
Steps 1-4 will be displayed for completing a Factory Reset. We are only doing Step 1. “Restore” here means “Rollback”.
Connect your Harmony hub to the PC via micro-USB.
Within a few minutes, it will be detected by MyHarmony and display Remote Model, Firmware Version, and Hardware revision. The Restore button will be enabled.
Click “Restore” and wait. (Now is the first time that it actually describes that it’s a rollback!)
When it completes, you should be on Firmware Version 4.15.193. Disconnect the hub from the PC and return it to its original location.
And the final, important step: eliminate the ability for the Harmony hub to access these domains, or the internet altogether. I used DD-WRT’s Access Restrictions feature to disable all internet access, because my specific implementation is entirely intranet-based. YMMV.
[quote=“ronluna, post:584, topic:184450”][quote=“cw-kid, post:583, topic:184450”]There is a thread on the Logitech forums, if you want to voice your own concerns about this.
So is the Harmony plugin for Vera still working or not, for your Harmony hub with the updated firmware ?[/quote]
i uninstalled and reintall the plugin. it’s not working now. i will downgrade to version 201 tomorrow.
That’s a bummer to say the least. As developer of the plugin I can confirm it is using the local XMPP protocol that they stopped supporting with the 206 version as it seems.
It won’t be overnight to rewrite to websockets as Logitech gives zero information or support for this.
Only advice I can give is try not to upgrade the hub.
On the Logitech forum post I linked to previously, there are a few guys on there talking about switching to websocket connection and a project they were looking at as a base here:
Also a Logitech employee has started a new thread about the problem here:
Update 3 (18 dec): Twitter user @ChadBeattie has discovered that there seems to be a second undocumented local API that is being used by the Logitech Harmony iOS app. Home Assistant dev @ehendrix23 is looking into updating the PyHarmony library to use this. Join #devs_backend on our chat if you want to help with development. We can?t guarantee that it will work, but if we can get it to work, we will do a hot fix release
I will have a look if the recently introduced websocket lib on Vera can made to work with this. See wiki and search on websockets on details. No promise on timing though. Was not looking to do this now.
Logitech recently released a firmware update for Harmony hub-based remotes that addressed some security vulnerabilities brought to our attention by a third-party cyber security firm. Logitech takes our customers? security seriously, and we work diligently to fix these kinds of issues as they?re discovered.
Last week we began rolling out this update. We are aware that some customers using undocumented Harmony APIs for local home control were affected as a side-effect of our closing these vulnerabilities. These private local control APIs were never supported Harmony features. While it is unfortunate that customers using these unsupported features are affected by this fix, the overall security of our products and all of our customers is our priority.
We urge customers to update to this latest firmware, version 4.15.206. Please see this article for complete directions on checking and updating your current firmware version: Update firmware"
I saw that too and does not look good. The Logitech forum is flooded with complaints, but they do not seem to care. For now I blocked my Hub from any access to the internet so it will stay on the 201 version (I hope), so I advise anyone using the plugin to do the same. It now no longer works with my Alexa, but that I find much less important.
As you probably know Harmony can on top by far in the poll for Vera to support natively. However, I have no idea if and when that will happen, but I doubt we will see anything before March next year, It will most likely use the Internet based API other vendors use as well. It will not be local as Logitech seems to see those APIs as theirs to pull at will as we can see.
The XMPP API we and many other Home automation platforms use is the API Logitech used in the first versions of their own apps. So it is not an ‘undocumented’ API, it is an obsolete one in their view. It is undocumented from Logitechs view as they refuse to share any details to the public domain. Only to development companies and I assume under NDA.
I want to ask any one from Vera if they can give an estimate for native Harmony support. I fear nothing before March next year. If they will/can make it sooner rather then later they will have a serious perk over the competition again.
If it will take long I will see what I can do. I tried the verawebsockets from the wiki, but just as the luup.request it will only be supported on the Edge and up and is not working in the latest release (the included example is not working on an Edge running the latest firmware).
So. All we can hope is to keep our Hubs from upgrading until a new solution is found.
I was told yesterday by someone that Logitech were making it difficult for companies to officially integrate with Harmony. Apparently Hubitat have been trying and were told Logitech were not allowing new official integrations. This person said to me the “door was closed” for the Hubitat Devs.
