
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
homebridge-skybell
Advanced tools
:warning: This project is no longer maintained. :warning:
Due to my SkyBell HD failing and the difficulty of obtaining a replacement I have replaced it with a Logitech Circle View Doorbell.
SkyBell HD Wi-Fi video doorbell plugin for Homebridge.
SkyBell is a trademark owned by SkyBell Technologies, Inc.
libx264 and libopus codecs enabled) using: sudo apt-get install ffmpegnpm install -g homebridge-skybellconfig.json and add the SkyBell platform (see example below).pin value in config.json).config.json{
"platforms":
[{
"platform": "SkyBell",
"username": "skybell@gmail.com",
"password": "Passw0rd!",
"port": 47569,
"secret": "My webhooks secret"
}]
}
The username (email address) and password should be set to the credentials used to log into the SkyBell HD app. The plugin will automatically create HomeKit accessories for all SkyBell HD (and SkyBell Trim Plus) doorbells associated with the account.
The port and secret values are optional. They should be omitted unless webhooks are being used.
SkyBell Technologies only share API details with selected third parties through their SkyBell Connect API program. Instead this plugin uses the unpublished API that the SkyBell HD app uses to communicate with the SkyBell cloud.
Without access to mobile push notifcations (Apple Push Notification service (APNs) or Google Cloud Messaging (GCM) for Android) this plugin has to poll the API for changes. It leaves 5 seconds between successive requests. Unfortunately, the SkyBell cloud servers appear to be very heavily loaded, with responses to each API request typically taking a few seconds.
By default button presses and motion events are detected by polling the SkyBell cloud for new video recordings being available. The doorbell only uploads the video after it has stopped recording so this typically results in a delay of several minutes between the event occurring and HomeKit being notified (and hence any automation being triggered).
The delay can be significantly reduced by snooping on the packets between the doorbell and its cloud services. If tcpdump can be run on the gateway/router between the doorbell and the internet then configure webhooks and install the doorbell packet sniffer.
Apple's Home app (as of iOS 11) does not display Doorbell services; their characteristics cannot be viewed or controlled. For full functionality use one of the following apps:
However, Apple's Home app does generate rich notifications for both doorbell button presses and motion events. These appear with a small snapshot image from the camera. A larger image and live video stream can be viewed by sliding the notification left and selecting View. The doorbell button notification is enabled by default, but the motion event notification has to be explicitly enabled within the app.
This plugin normally uses the avatar image that the SkyBell HD pushes to the SkyBell cloud once per hour. However, if a video was recorded more recently then its thumbnail will be used instead. The update time shown within the HomeKit app indicates when the image was requested, not when it was actually captured.
Viewing the doorbell's video via HomeKit will normally establish a live stream showing the current camera image. However, within 30 minutes of a video being recorded (in response to a button press or motion event) this plugin will instead play that recording. In both cases the Home and Eve apps will badge the video as LIVE, so to make it clear when a recording is being played this plugin superimposes a caption at the top of recorded videos. Only recordings made after Homebridge is started are played.
Viewing the live stream from a SkyBell HD via HomeKit results in an On demand video being recorded, just as it does with the official SkyBell HD app. For some reason the SkyBell cloud terminates the live video stream after approximately 45 seconds when viewed via this plugin (instead of 5 minutes with the official SkyBell HD app). It is not obvious why this occurs.
This plugin currently only supports audio in a single direction: from the doorbell's microphone to HomeKit. This is because the audio streams in each direction use the same ports, but unfortunately FFmpeg (which is used by this plugin to transcode the audio and video) does not support sharing a single port between two SRTP streams.
All notable changes to this project will be documented in CHANGELOG.md.
The current version of this plugin requires Homebridge 1.0.0 or later. Use version 1.8.1 with older releases of Homebridge.
ISC License (ISC)
Copyright © 2017-2021 Alexander ThoukydidesPermission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
FAQs
SkyBell HD Wi-Fi video doorbell plugin for Homebridge
We found that homebridge-skybell demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.