Software:Home Assistant

From HandWiki
Short description: Home automation software


Home Assistant
Home Assistant logo (2023).svg
Original author(s)Paulus Schoutsen
Developer(s)Home Assistant Core Team and Community
Initial release17 September 2013
(10 years ago)
 (2013-09-17)
Repositorygithub.com/home-assistant
Written inPython (Python 3.11)
Operating systemSoftware appliance / Virtual appliance (Linux)
PlatformARM, ARM64, IA-32 (x86), and x64 (x86-64)
TypeHome automation, smart home technology, Internet of things, task automator
LicenseApache License (free and open-source)
Websitewww.home-assistant.io

Home Assistant is free and open-source software for home automation designed to be an Internet of things (IoT) ecosystem-independent integration platform and central control system for smart home devices, with a focus on local control and privacy.[1][2][3][4] It can be accessed through a web-based user interface, by using companion apps for Android and iOS, or by voice commands via a supported virtual assistant, such as Google Assistant or Amazon Alexa, and their own "Assist" (built-in local voice assistant).

After the Home Assistant software application is installed as a computer appliance, it will act as a central control system for home automation, commonly called a smart home hub,[5][6][7] that has the purpose of controlling IoT connectivity technology devices, software, applications and services from third-parties via modular integration components, including native integration components for common wireless communication protocols such as Bluetooth, Thread, Zigbee, and Z-Wave (used to create local personal area networks with small low-power digital radios). Home Assistant as such supports controlling devices and services connected via either open and proprietary ecosystems as long they provide public access via some kind of Open API or MQTT for third-party integrations over the local area network or the Internet.

Information from all devices and their attributes (entities) that the Home Assistant software application sees can be used and controlled from within scripts trigger automation using scheduling and "blueprint" subroutines, e.g. for controlling lighting, climate, entertainment systems and home appliances.[8][9][10]

History

The project was started as a Python application by Paulus Schoutsen in September 2013 and first published publicly on GitHub in November 2013.[11]

In July 2017, a managed operating system called Hass.io was initially introduced to make it easier to use Home Assistant on single-board computers like the Raspberry Pi series. Its bundled "supervisor" management system allowed users to manage, backup, update the local installation and introduced the option to extend the functionality of the software with add-ons.[12]

An optional subscription service was introduced in December 2017 to solve the complexities associated with secured remote access, as well as linking to Amazon Alexa and Google Assistant.[citation needed] Nabu Casa, Inc. was formed in September 2018 to take over the subscription service.[13] The company's funding is based solely on revenue from the subscription service. It is used to finance the project's infrastructure and to pay for full-time employees contributing to the project.[citation needed]

In January 2020, branding was adjusted to make it easier to refer to different parts of the project. The main piece of software was renamed Home Assistant Core, while the full suite of software with the Hass.io embedded operating system with a bundled "supervisor" management system was renamed Home Assistant (though it is also commonly referred to as "HAOS" as in short for "Home Assistant OS").[14]

In January 2021, Home Assistant made a public service announcement, disclosing vulnerabilities with its third-party custom integrations.[15]

Later in January 2021, it made a second security disclosure about a security vulnerability.[16]

Features

Hardware

Home Assistant is supported and can be installed on multiple platforms. These include single-board computers (for example Hardkernel ODROID, Raspberry Pi, Asus Tinkerboard, Intel NUC), operating systems like Windows, macOS, Linux as well as virtual machines and NAS systems.[17] Windows support is via a Windows VM or installing the Windows Subsystem for Linux (WSL).[18]

On officially supported hardware platforms like the ODROID N2+ and Raspberry Pi 3/4 single-board computers, the installation requires flashing a corresponding system image onto a microSD card, eMMC, or other local storage from which the system can boot.[17] It is possible to use Home Assistant as a gateway or bridge for devices using different IoT technologies like Zigbee or Z-Wave, necessary hardware can be mounted onto GPIO (Serial/I2C/SMBus), UART, or using USB ports.[19][20] Moreover, it can connect directly or indirectly to local IoT devices, control hubs/gateways/bridges, or cloud services from many different vendors, including other open and closed smart home ecosystems.[21][22][23][24]

In December 2020, a customized ODROID N2+ computer appliance with bundled software was introduced under the product name "Home Assistant Blue" as an officially supported common hardware reference platform. The same package is also referred to as "ODROID-N2+ Home Assistant Bundle" when sold without the official custom-made enclosure. It comes with Home Assistant OS pre-installed on local eMMC storage, a power-adapter, and a custom Home Assistant themed enclosure. Home Assistant founders made it clear that the release of official hardware would not keep them from supporting other hardware platforms like the Raspberry Pi series.[25][26]

In September 2021, Home Assistant developers at Nabu Casa announced a crowdfunding campaign on Crowd Supply for pre-orders of "Home Assistant Yellow" (initially called "Home Assistant Amber"), a new official home automation controller hardware platform with Home Assistant pre-installed, a spiritual successor to "Home Assistant Blue". "Home Assistant Yellow" is designed to be an appliance, and its internals is architected with a carrier board (or "baseboard") for a computer-on-modules compatible with the Raspberry Pi Compute Module 4 (CM4) embedded computer as well as include an integrated M.2 expansion slot meant for either an NVMe SSD as expanded storage or for an AI accelerator card, and an onboard EFR32 based radio module made by Silicon Labs capable of acting as a Zigbee Coordinator or Thread Leader (Thread Border Router), as well as optional variant with PoE (Power over Ethernet) support. The most otherwise notable features missing on "Home Assistant Yellow" an HDMI or DisplayPort to connect a monitor, (which is likely due to it like most smart home hubs being purpose-built to act as a headless system), as well as lack of onboard Bluetooth, Wi-Fi, and a USB 3.0 port by default. Shipping of "Home Assistant" is targeted for June 2022.[27][28]

Dashboard

The primary front-end dashboard system is called Lovelace (named after Ada Lovelace),[29] which offers different cards to display information and control devices. Cards can display information provided by a connected device or control a resource (lights, thermostats, and other devices). The interface design language is based on Material Design and can be customized using global themes. The GUI is customizable using the integrated editor or by modifying the underlying YAML code. Cards can be extended with custom resources, which are often created by community members.

Automation

Home Assistant acts as a central smart home controller hub by combining different devices and services in a single place and integrating them as entities. The provided rule-based system for automation allows creating custom routines based on a trigger event, conditions and actions, including scripts. These enable building automation, alarm management of security alarms and video surveillance for home security system as well as monitoring of energy measuring devices.[30][31][32][33] Since December 2020, it is possible to use automation blueprints - pre-made automation from the community that can be easily added to an existing system.[34]

Security

Home Assistant, as an on-premises software product, with its focus on local control for the purpose of privacy in combination with its state as an open-source application, has been described as beneficial to the security of the platform; specifically when compared to closed-source home automation software based on proprietary hardware and cloud-services.[1][2][3][4]

There is no remote access enabled by default and data is stored solely on the device itself. User accounts can be secured with two-factor authentication to prevent access even if the user password is known by the attacker. Add-ons get a security rating based on their access to system resources.

In January 2021, cybersecurity analyst Oriel Goel found a directory traversal security vulnerability in third party custom integrations. The issue was disclosed on January 22, 2021, and addressed in Home Assistant version 2021.1.5, released on January 23. There is no information about whether the vulnerability has been abused.[35][36]

In March 2023, a full authentication bypass was discovered in Home Assistant, earning a CVE score of 10/10.[37] This security issue affected Home Assistant's default remote access solution, Nabu Casa, due to Nabu Casa's remote access security model that publically exposes the local Home Assistant server to the public internet. This security issue allows bad actors full control of any Home Assistant server they can access due to the full auth bypass.[38]

Awards, reception and reviews

Home Assistant took second place in 2017[39] and 2018[40] for the Thomas Krenn Award (formerly Open Source Grant), later winning first place in 2019.[41] Home Assistant also won an DINACon award in 2018 for their "Open Internet Award" category,[42][43] as well as being a nominee for the same awards in 2013[44]

Home Assistant has been included in a number of product and platform comparisons, where, like many other non-commercial smart home hubs/gateways/bridges/controllers for home automation, it has often in the past been criticized for forcing users into a tedious file-based setup procedure using text-based YAML markup-language instead of graphical user interfaces.[45][46][47][30][48] However, newer versions of Home Assistant produced by the core development team continue to make the configuration (from initial installation as well as most basic configurations) more user-friendly by allowing configuration using the web-based graphical user interface as well as the original YAML scripting.[49][50][51][52][53][54] GitHub's "State of the Octoverse" in 2019 listed Home Assistant as the tenth biggest open-source project on its platform with 6,300 contributors.[55]

See also


References

  1. 1.0 1.1 "No Privacy Compromise Home Automation" (in en-US). https://www.jupiterbroadcasting.com/115566/no-privacy-compromise-home-automation/. 
  2. 2.0 2.1 "Home Assistant lets you automate your smart home without giving up privacy". 10 May 2018. https://www.the-ambient.com/features/home-assistant-automation-privacy-582. 
  3. 3.0 3.1 "Secure home automation, without clouds or dedicated hubs". 20 June 2016. http://linuxgizmos.com/secure-home-automation-without-clouds-or-dedicated-hubs/. 
  4. 4.0 4.1 Greenberg, Andy (20 July 2016). "Now You Can Hide Your Smart Home on the Darknet". Wired. https://www.wired.com/2016/07/now-can-hide-smart-home-darknet/. 
  5. Alex Kretzschmar - Mar 31, 2021 11:30 am UTC (2021-03-31). "How to achieve smart home nirvana (or, home automation without subscription)". Ars Technica. https://arstechnica.com/information-technology/2021/03/how-to-achieve-smart-home-nirvana-or-home-automation-without-subscription/. Retrieved 2022-05-13. 
  6. "Home Assistant makes your smart devices work together the way you imagined". 12 April 2018. https://www.androidcentral.com/whats-home-assistant-and-why-should-home-automation-enthusiasts-consider-it. 
  7. Valens, Clemens (2020-09-16). "Home Automation Made Easy: Combine Home Assistant, ESPHome and MySensors". Elektor Magazine. https://www.elektormagazine.com/articles/home-automation-made-easy. Retrieved 2022-05-13. 
  8. "Magical Smart Home Upgrade Lets Muggles Control Their Homes With a Wand Too" (in en-us). https://gizmodo.com/magical-smart-home-upgrade-lets-muggles-control-their-h-1833941228. 
  9. "How to set up and use Home Assistant to power your smart home". 30 March 2021. https://www.the-ambient.com/how-to/how-to-set-up-and-use-home-assistant-to-power-your-smart-home-2581. 
  10. "Tech projects for IT leaders: How to use IoT for home automation". TechRepublic. 30 March 2021. https://www.techrepublic.com/article/tech-projects-for-it-leaders-how-to-use-iot-for-home-automation/. Retrieved 2022-05-13. 
  11. "Home Assistant: The Python Approach to Home Automation". Linux.com. 2018-11-20. https://www.linux.com/topic/embedded-iot/home-assistant-python-approach-home-automation/. Retrieved 2022-05-13. 
  12. Schoutsen, Paulus (25 July 2017). "Introducing Hass.io" (in en). https://www.home-assistant.io/blog/2017/07/25/introducing-hassio/. 
  13. "About us". https://nabucasa.com/about/. 
  14. Assistant, Home. "Home Assistant vs. Home Assistant Core" (in en). https://www.home-assistant.io/faq/ha-vs-hassio/. 
  15. Schoutsen, Paulus (22 January 2021). "Disclosure: security vulnerabilities in custom integrations HACS, Dwains Dashboard, Font Awesome and others" (in en). https://www.home-assistant.io/blog/2021/01/22/security-disclosure/. 
  16. Schoutsen, Paulus (23 January 2021). "Security Disclosure 2: vulnerabilities in custom integrations HACS, Font Awesome and others" (in en). https://www.home-assistant.io/blog/2021/01/23/security-disclosure2/. 
  17. 17.0 17.1 Assistant, Home. "Installation" (in en). https://www.home-assistant.io/installation/. 
  18. "Windows Subsystem for Linux (WSL)". https://www.home-assistant.io/installation/windows. 
  19. "RaspBee II Overview". https://phoscon.de/en/raspbee2. 
  20. "ConBee II Overview". https://phoscon.de/en/conbee2. 
  21. Assistant, Home. "Integrations" (in en). https://www.home-assistant.io/integrations/. 
  22. Murphy, Dylan (May 2018). "Controlling smart lights with Home Assistant". HackSpace (4): 92. ISSN 0016-9900. https://s3-eu-west-1.amazonaws.com/rpi-magazines/issues/full_pdfs/000/000/013/original/HS_6_Digital_Optimised.pdf. Retrieved 18 June 2020. 
  23. "Transferring my Z-Wave Network to Home Assistant from Vera". 15 August 2019. https://hometechhacker.com/transferring-my-z-wave-network-to-home-assistant-from-vera/. 
  24. "Best Hardware for Home Assistant". Smart Home University. 21 June 2019. https://smarthome.university/home-assistant/best-hardware-for-home-assistant/. 
  25. https://techtechandmoretech.com/reviews/home-assistant-blue/ Home Assistant Blue Review
  26. "ODROID-N2+ based "Home Assistant Blue" announced as official hardware for Home Assistant - CNX Software". 16 December 2020. https://www.cnx-software.com/2020/12/16/odroid-n2-based-home-assistant-blue-announced-as-official-hardware-for-home-assistant/. 
  27. Pattison, Jennifer (2021-09-16). "Home Assistant now comes in a ready-to-use box". The Verge. https://www.theverge.com/2021/9/16/22678088/home-assistant-amber-smart-home-hub-specs-release-date-price. Retrieved 2022-05-13. 
  28. "Crowdfunded Home Automation System Uses Raspberry Pi Compute Module | Tom's Hardware". Tomshardware.com. 16 September 2021. https://www.tomshardware.com/news/raspberry-pi-home-assistant-amber. Retrieved 2022-05-13. 
  29. "Home Assistant: Getting Started With Lovelace" (in en-US). 2019-02-07. https://hometechhacker.com/getting-started-lovelace/. 
  30. 30.0 30.1 comments, 14 December 2017 Jason BakerFeed 1481up 23. "6 open source home automation tools". https://opensource.com/tools/home-automation. 
  31. "16 Open Source Home Automation Platforms To Use In 2020". 30 October 2019. https://ubidots.com/blog/open-source-home-automation/. 
  32. "Trends In Open Source Home Automation". 21 March 2017. https://digitalconqurer.com/home-automation/trends-open-source-home-automation/. 
  33. "My Smarthome Evolution: Part 3 - Current State". 12 December 2019. https://hometechhacker.com/my-smarthome-evolution-part-3-current-state/. 
  34. Assistant, Home. "Using Automation Blueprints" (in en). https://www.home-assistant.io/docs/automation/using_blueprints/. 
  35. Schoutsen, Paulus (22 January 2021). "Disclosure: security vulnerabilities in custom integrations HACS, Dwains Dashboard, Font Awesome and others" (in en). https://www.home-assistant.io/blog/2021/01/22/security-disclosure/. 
  36. Schoutsen, Paulus (23 January 2021). "Security Disclosure 2: vulnerabilities in custom integrations HACS, Font Awesome and others" (in en). https://www.home-assistant.io/blog/2021/01/23/security-disclosure2/. 
  37. "Authentication bypass Supervisor API" (in en). https://github.com/home-assistant/core/security/advisories/GHSA-2j8f-h4mr-qr25. 
  38. "CVE - CVE-2023-27482". https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27482. 
  39. "Thomas-Krenn-Award 2017: Zammad, Home Assistant und Freifunk". 12 March 2017. https://www.thomas-krenn.com/de/tkmag/allgemein/zammad-home-assistant-und-freifunk-das-sind-die-gewinner-des-thomas-krenn-awards-2017/. 
  40. "Die Gewinner des Thomas-Krenn-Awards 2018". 12 March 2018. https://www.thomas-krenn.com/de/tkmag/allgemein/die-gewinner-des-thomas-krenn-awards-2018-stehen-fest/. 
  41. Thomas-Krenn.AG (16 March 2019) (in de-DE). Thomas-Krenn-Award 2019 – Die Gewinner. https://www.thomas-krenn.com/de/tkmag/tk-insights/thomas-krenn-award-2019-gewinner/. Retrieved 18 June 2020. 
  42. "Das sind die Nominierten für die Dinacon Awards 2018". 4 September 2018. https://www.netzwoche.ch/news/2018-09-04/das-sind-die-nominierten-fuer-die-dinacon-awards-2018. 
  43. "DINAcon begeistert 200 Teilnehmende und die Award-Gewinner 2018" (PDF) (Press release) (in Deutsch). 19 October 2018.
  44. "Home Assistant > DINAcon Awards". https://awards.dinacon.ch/en/awards/home-assistant/. 
  45. "SmartThings vs Home Assistant: What is the Best Smart Home Hub". Smart Home University. 29 April 2018. https://smarthome.university/smartthings-vs-home-assistant/. 
  46. "Best of open source smart home: Home Assistant vs OpenHAB". Smart Home University. 28 February 2018. https://smarthome.university/your-smart-home-platform-home-assistant-vs-openhab/. 
  47. Jancer, Matt (26 May 2016). "Smart-Home Gadgets Need a Translator Real Bad—Here's How to Get One". Wired. https://www.wired.com/2016/05/smart-home-hubs-apps/. 
  48. "Home Assistant Review – Sean's Technical Ramblings". 4 March 2017. https://seanb.co.uk/2017/03/home-assistant-review/. 
  49. "Smart Home Home Assistant Konfiguration mit YAML". 12 July 2017. https://smarthome-training.com/de/smart-home-home-assistant-konfiguration/. 
  50. "Weekend Project: Setting up Home Assistant on your PC or Mac". 22 April 2016. https://www.automatedhome.co.uk/software/weekend-project-setting-up-home-assistant-on-your-pc-or-mac.html. 
  51. "OpenHAB vs Home Assistant: What is the Best For Smart home?". 11 February 2020. https://sweethomex.com/openhab-vs-home-assistant/. 
  52. "Home Assistant Vs Openhab 2019". 10 August 2019. https://home-automations.net/home-assistant-vs-openhab-2019/. 
  53. "Home Assistant Vs OpenHAB". 29 July 2019. https://appuals.com/home-assistant-vs-openhab/. 
  54. Gadget-Freak, Chef (28 April 2019). "Comparison between Domoticz and Home Assistant". https://gadget-freakz.com/domoticz-vs-home-assistant/. 
  55. "The State of the Octoverse" (in en-gb). https://octoverse.github.com/2019/. 

External links