Public API verry soon available

[pergolafabio]

good news guys, just got information that risco wil launch soon a public API for developers, they will inform me next week about ETA seems they also finished integration with amazon alexa already, probably launching verry soon

[rob1981forest]

No, wireshark will capture fine either way I think but you need to make sure you mirror the port to another interface and plug in to that.......I've mirrored the port fine on my Cisco but I have no idea what to do with the data !!!

Would so good if we could just access this locally !!!

Get Outlook for Androidhttps://aka.ms/ghei36

---

From: pergolafabio notifications@github.com Sent: Wednesday, October 23, 2019 7:58:10 AM To: lucacalcaterra/risco-mqtt-bridge risco-mqtt-bridge@noreply.github.com Cc: rob1981forest rob1981forest@hotmail.com; Mention mention@noreply.github.com Subject: Re: [lucacalcaterra/risco-mqtt-bridge] Public API verry soon available (#22)

ah you need portfast on a managed switch to capture wireshark data? otherwise its not possible?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/lucacalcaterra/risco-mqtt-bridge/issues/22?email_source=notifications&email_token=ALCGLUGKYYXREI5FTECYTELQP7YYFA5CNFSM4ICGQ54KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOECAJS3I#issuecomment-545298797, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ALCGLUAAPH2Q7WIIXTIWS3DQP7YYFANCNFSM4ICGQ54A.

[pergolafabio]

ah ok , yeah, but i dont have a managed switch :)

[rob1981forest]

Slight problem !!! I can send you a capture if it means anything to you ?

Get Outlook for Androidhttps://aka.ms/ghei36

---

From: pergolafabio notifications@github.com Sent: Wednesday, October 23, 2019 9:38:18 AM To: lucacalcaterra/risco-mqtt-bridge risco-mqtt-bridge@noreply.github.com Cc: rob1981forest rob1981forest@hotmail.com; Mention mention@noreply.github.com Subject: Re: [lucacalcaterra/risco-mqtt-bridge] Public API verry soon available (#22)

ah ok , yeah, but i dont have a managed switch :)

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/lucacalcaterra/risco-mqtt-bridge/issues/22?email_source=notifications&email_token=ALCGLUGZ7FNIPBC2ROYRB43QQAEPVA5CNFSM4ICGQ54KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOECASOBI#issuecomment-545335045, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ALCGLUAU2J454WUJA2BGV7LQQAEPVANCNFSM4ICGQ54A.

[pergolafabio]

yes, offcourse, you have also older firmware right? i dont think there is any sensitive data in it anyway

just make a trace for only the IP of the risco

[pergolafabio]

and also offcourse trigger your sensors and arm/disarm the alarm :) maybe with some timestamps also

[rob1981forest]

No worries, will see what I can get you

Get Outlook for Androidhttps://aka.ms/ghei36

---

From: pergolafabio notifications@github.com Sent: Wednesday, October 23, 2019 9:42:07 AM To: lucacalcaterra/risco-mqtt-bridge risco-mqtt-bridge@noreply.github.com Cc: rob1981forest rob1981forest@hotmail.com; Mention mention@noreply.github.com Subject: Re: [lucacalcaterra/risco-mqtt-bridge] Public API verry soon available (#22)

and also offcourse trigger your sensors and arm/disarm the alarm :) maybe with some timestamps also

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/lucacalcaterra/risco-mqtt-bridge/issues/22?email_source=notifications&email_token=ALCGLUCF6PE5MLEXDDLCEUDQQAE57A5CNFSM4ICGQ54KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOECASZ6I#issuecomment-545336569, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ALCGLUDBVAOT6ZVFRG3BO43QQAE57ANCNFSM4ICGQ54A.

[pergolafabio]

while we are waiting for api i have found this, its a google assistant service to link a risco panel to google home , dont think its an official one, but code can be usefull maybe?

https://github.com/ofekp/homekeeper/commit/64440047d6fc233cc96b6d34a010759007dc9da8

https://assistant.google.com/services/a/uid/0000008438b03079?hl=en_be

[rob1981forest]

Hi All,

Any updates from Risco on the official API yet ?

[pergolafabio]

nope not yet, no response anymore probably after christmas

[rob1981forest]

Ok, thanks for update

Get Outlook for Androidhttps://aka.ms/ghei36

---

From: pergolafabio notifications@github.com Sent: Saturday, December 14, 2019 1:33:09 PM To: lucacalcaterra/risco-mqtt-bridge risco-mqtt-bridge@noreply.github.com Cc: rob1981forest rob1981forest@hotmail.com; Mention mention@noreply.github.com Subject: Re: [lucacalcaterra/risco-mqtt-bridge] Public API verry soon available (#22)

nope not yet, no response anymore probably after christmas

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/lucacalcaterra/risco-mqtt-bridge/issues/22?email_source=notifications&email_token=ALCGLUH3TYHJ6XKLITYJNCDQYTOBLA5CNFSM4ICGQ54KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEG4CWOI#issuecomment-565717817, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ALCGLUDTBFX3EWDGAEOMHX3QYTOBLANCNFSM4ICGQ54A.

[pergolafabio]

Update;

It suppose to get to cloud version 5.5 (release date is around June / July)

[pergolafabio]

@lucacalcaterra

did you already implemented the new code with Rest API from @mancioshell in your docker? wanted to know, s i could get a real time state, when arming/disarming from a hardware panel

[pergolafabio]

I wish I knew what to do here but I don't !!!! So given what has been said if @lucacalcaterra/risco-mqtt-bridgemailto:risco-mqtt-bridge@noreply.github.com updates things a little we may be able to use risco PIR sensor to trigger lights in Home Assistant ? Keep up the good work guys !! Get Outlook for Androidhttps://aka.ms/ghei36 … ____ From: pergolafabio notifications@github.com Sent: Wednesday, October 16, 2019 5:48:18 AM To: lucacalcaterra/risco-mqtt-bridge risco-mqtt-bridge@noreply.github.com Cc: rob1981forest rob1981forest@hotmail.com; Comment comment@noreply.github.com Subject: Re: [lucacalcaterra/risco-mqtt-bridge] Public API verry soon available (#22) Aha, that's verry good news!!!!!! — You are receiving this because you commented. Reply to this email directly, view it on GitHub<#22?email_source=notifications&email_token=ALCGLUGDVAUGKVBEPAWT3WDQO2MJFA5CNFSM4ICGQ54KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEBLBJSY#issuecomment-542512331>, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ALCGLUDHGHIBRFY6CUN6BP3QO2MJFANCNFSM4ICGQ54A.

hey!! @rob1981forest , testing this one out ! this triggers sensors instantly!! https://github.com/mancioshell/risco-mqtt-home-assistant

[rob1981forest]

Hi all, received an email from Risco saying that cloud was being upgrade to V5.3 and this is the new features:

RISCO Cloud V5.3 will provide two main new features: Perform manual or schedule based RRI (Remote Routine Inspection) via the Installer Cloud admin Support of new 'Presence Zone', enabling push notifications and IP camera triggers while the system is disarmed

Do we think the RRI is their name for the API ?

[lucacalcaterra]

Hi all, received an email from Risco saying that cloud was being upgrade to V5.3 and this is the new features:

RISCO Cloud V5.3 will provide two main new features: Perform manual or schedule based RRI (Remote Routine Inspection) via the Installer Cloud admin Support of new 'Presence Zone', enabling push notifications and IP camera triggers while the system is disarmed

Do we think the RRI is their name for the API ?

personally... Don't think so.. my 2cent. ps sorry for my inactivity, but covid and works are giving me so much work :-(

[rob1981forest]

No worries, yes things like this certainly aren't the important at the moment so no issues !

Sent from Outlook Mobilehttps://aka.ms/blhgte

---

From: Luca Calcaterra notifications@github.com Sent: Friday, April 17, 2020 11:17:23 AM To: lucacalcaterra/risco-mqtt-bridge risco-mqtt-bridge@noreply.github.com Cc: rob1981forest rob1981forest@hotmail.com; Mention mention@noreply.github.com Subject: Re: [lucacalcaterra/risco-mqtt-bridge] Public API verry soon available (#22)

Hi all, received an email from Risco saying that cloud was being upgrade to V5.3 and this is the new features:

RISCO Cloud V5.3 will provide two main new features: Perform manual or schedule based RRI (Remote Routine Inspection) via the Installer Cloud admin Support of new 'Presence Zone', enabling push notifications and IP camera triggers while the system is disarmed

Do we think the RRI is their name for the API ?

personally... Don't think so.. my 2cent. ps sorry for my inactivity, but covid and works are giving me so much work :-(

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/lucacalcaterra/risco-mqtt-bridge/issues/22#issuecomment-615166356, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ALCGLUBMYVKH5XLHZNGLPB3RNAUDHANCNFSM4ICGQ54A.

[pergolafabio]

Public api is not part of 5.3 yet, I got that already confirmed, it's for 5.4 probably, this summer

[TrueOsiris]

Any progress here, if I may ask?

[pergolafabio]

Planned for January...

Allthough an PR is now in progress for official component for HA ... No extra docker/mqtt needed anymore

[TrueOsiris]

you mean there will be a plugin for hassio? Will I be able to set it up in a ha-core (dockered) ?

[pergolafabio]

Yes, official component, no custom stuff needed anymore... Likely for release 114 or 115...

Op di 4 aug. 2020 08:46 schreef Osiris notifications@github.com:

you mean there will be a plugin for hassio? Will I be able to set it up in a ha-core (dockered) ?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/lucacalcaterra/risco-mqtt-bridge/issues/22#issuecomment-668412570, or unsubscribe https://github.com/notifications/unsubscribe-auth/AKJ7LQF3HBHJZ7E3CYKHSRTR66VD5ANCNFSM4ICGQ54A .

[pergolafabio]

here is PR : https://github.com/home-assistant/core/pull/36930

[pergolafabio]

@mancioshell @lucacalcaterra Time to say goodbye!!

wanted to thank you guys fior making this possible with those 2 nice containers really liked it, but since its now integrated into HA 115.0 , not need it anymore tnx to @onfreund

thnx again for all your hard work

PS: Public API will be available in jan 2021 , if i have more info, i ley you know

[crokdh]

Risco cloud 5.4.0 was installed today. Anybody has updates about API?

[pergolafabio]

i think its still down, lets hope it comes back soon

[pergolafabio]

oh, and yes, public API is not scheduled for 5.4 , probably 5.5 or 5.6

[pswiatki]

4 Jan 2021 - 12 Jul 2019 = 542 days or ~1.5 years. Looks like Risco will never make any public API. If you think otherwise - let me know.

[lucacalcaterra]

4 Jan 2021 - 12 Jul 2019 = 542 days or ~1.5 years. Looks like Risco will never make any public API. If you think otherwise - let me know.

I'm agree with you :-(

[pergolafabio]

It's coming, just hold on, normally in 5.4

[pswiatki]

OK, I shall wait as I am quite new to this, but would like very much to see it and be able to interact with the alarm system from my own app.

[lucacalcaterra]

IMHO... don't need so much API. grab an api capture software like postman and start to develop your own app..

[pswiatki]

So, in this particular case, you mean the approach you used yourself (and also based on szlaskidaniel's homebridge-risco-alarm project). Basically, trace the net traffic and try to mimic it (POST requests and what not) with one's own application?

[pswiatki]

One more thing, if I may: where does the POST request go? Is riscocloud server its destination and then it is them who either interrogates the given system or simply serves the very last status it knows about it? You see: my devices which I would love to interface with the alarm system are on the same LAN as the system in question. It would be way more secure (I presume) not to go outside of that LAN to at least find out the status of the alarm zones, etc. I guess, if they published the API it could make it possible.

[pergolafabio]

No API is for cloud, not lan :-)

[pswiatki]

Ohhh..... I see. So there is no way to interact with the alarm over LAN then?

[pergolafabio]

No, not official

[pswiatki]

Not good. But hey, maybe some unofficial ways are good, too. As long as they work reliably. I am only interested in fetching the status, not in control.

[pergolafabio]

armed / disarmed status?? well what i did before, i created a seperate user on riscocloud before, with a seperate mailbox for each arm/disarm state, i sended a mail in HA , i created a Imap email sensor, based on body of the text i had my state...

[OnFreund]

If you can place a proxy between your alarm system and the cloud, you can try to reverse engineer that protocol, and then we can try to build a local integration. @pergolafabio sent me this once as a good starting point: https://cybergibbons.com/alarms-2/vulnerability-in-risco-lightsys-protocol-encryption/

[lucacalcaterra]

If you can place a proxy between your alarm system and the cloud, you can try to reverse engineer that protocol, and then we can try to build a local integration. @pergolafabio sent me this once as a good starting point: https://cybergibbons.com/alarms-2/vulnerability-in-risco-lightsys-protocol-encryption/

Even if protocol has not been changed... so for me the way acting on cloud is more flexible..

[OnFreund]

Changing this protocol requires changing the firmware on all devices. I wouldn't expect that to happen often. The APIs we have now (reverse engineered app api + scraping based api), are easy to change, though...

[pswiatki]

What does

scraping based API

mean? Also, I have two concerns. The first (security in the cloud) is probably nothing major - I guess this solution is secure enough (as it is used with https). Another issue is: I want to periodically poll the site (my alarm system) for status - isn't RISCO finally get annoyed or start suspecting me of trying to break into the system? I am interested in arm/disarm status for zones/partitions.

[OnFreund]

The scraping approach is what's used in this project here. I don't know how many, but lots of people are using this project, the other one based on the app api, and the native integration in HA, without Risco getting "annoyed".

[lucacalcaterra]

All integrations in Openhab and HomeAssistant (native even) use Risco Cloud Api... my project oldest API and others project evolution (@mancioshell i.e) use newer mobile cloud api... Even there are not official Risco API Docs, we "hack" communications. So... no worry about "annoying" Risco , you acting as a normal user!

[pbda]

The mobile app receives a status every 15 seconds.

[pswiatki]

Even there are not official Risco API Docs, we "hack" communications. So... no worry about "annoying" Risco , you acting as a normal user!

Yes, I fully understand this. My only concern was the frequency (rate) of requests sent out to RISCO.

The mobile app receives a status every 15 seconds.

Does it mean the app actively requests such status every 15 seconds by POSTing a request to RISO cloud?

[pbda]

Does it mean the app actively requests such status every 15 seconds by POSTing a request to RISO cloud?

I think so.

[pswiatki]

Just checked in Chromium's Developer Tools: GetCPState() requests are posted every ~6 seconds. Soo... good! That's what I need. I think the only issue is the eventual expiry of the session. Must analyze how it is handled here (in this project). I am sure it must be covered. Perhaps the session shall be refreshed every now and then.

[OnFreund]

The session expires every hour, and then you need to login again

[pswiatki]

That's what I thought. Thanks!