Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Reverse Engineering Bambu Connect

wiki.rossmanngroup.com

Post reply on HN
Print view View original

251–260 of 367 posts

Re: Reverse Engineering Bambu Connect

#251

Post by d1str0 »

ErneX wrote: post #229
esskay wrote: post #197

Earlier quoted context omitted.

I wouldn't buy any new Prusa printer until it's been in the wild at least a year, they tend to be very buggy at launch. They also have no multimaterial support at launch, the MMU3 will not work with the Core One until they release an update, which they've not yet given a timeline for.

Thank you.

I got a MK4 at launch and it worked out of the box with no issues, no bugs, and also was my first 3d printer. I found it perfectly easy to operate.

Prusa’s online documentation (and printed docs for that matter) are excellent.

Re: Reverse Engineering Bambu Connect

#253

Post by myself248 »

bhhaskin wrote: post #38
myself248 wrote: post #35

Earlier quoted context omitted.

"Security" on behalf of the user is a complete red herring. You can't print to my 2d printer or my 3d printer, but I can, with "any old device or application". Because they're on my network, not public on the internet.

I disagree. These devices can easily burn down people's homes if given bad G-code. Then they would be sued into the dirt for a security whole a mile wide. Looking at the changes this is about liability.

And a firmware hack could burn down my house with my laser printer. Yet that's not possible, because neither printer talks outside my network, at all.

Re: Reverse Engineering Bambu Connect

#254

Post by lsllc »

nirvdrum wrote: post #112
harrall wrote: post #51

Earlier quoted context omitted.

Well Prusa was open and did compete. But for 3D printers that worked out of the box under $1000, Prusa had no real competition itself. The Mk3 came out in 2017 and I swear Prusa just sat on their laurels. I was a Mk3s+ owner (well, still am) and was pretty disappointed how little improved with the Mk4. Bambu’s competition was Prusa and they clearly strived to improve over what Prusa had accomplished.

I wasn’t really sold on the 4/4S, but I recently upgraded a 3S+ to a 4S and am amazed how much improved. The new touchscreen LCD is a huge improvement over the old two line monochrome LCD. Remote access and wife printing is a nice plus — I don’t even run OctoPi anymore. Automatic bed leveling and no more Live Z tweaking for each sheet has been a major quality of life upgrade and eliminates one of the major pain point…

Similar experience with PRUSA for me -- I had a MK3S+ (which I loved) and paid ~$250 for the upgrade to the MK3.5S. Very, very impressed, for a modest investment I now have the new color LCD, a good chunk of the MK4 features and the print speed is at least 2x improved (if not better, I haven't quantitatively measured it but it's noticeably faster).

I went for the 3.5 upgrade as the upgrade from 3S+ to 4 was almost as much as outright buying a new 4. I'm glad I did it this way because now I'm thinking of getting the CORE One and then I'll have 2 excellent printers.

Re: Reverse Engineering Bambu Connect

#255

Post by dns_snek »

c0nsumer wrote: post #216
dns_snek wrote: post #175

Earlier quoted context omitted.

I don't have a definitive source readily available, but from talking to people who were investigating the technical aspects, connection between the printer and slicer software will be mutually authenticated using a certificate that will issued by Bambu Cloud, issued only to blessed 1st party software, and verified by the printer upon connection over the local network. So your blessed Bambu Studio instance connects to…

I sorta get what you're saying, and the flowchart here ( https://blog.bambulab.com/updates-and-third-party-integratio... ) somewhat agrees. But where I disagree is with that cert stuff. 1) That cert is on the /client/ side, not in the printer. It has nothing to do with printer functionality, only with talking to the printer. 2) Expired certs do not mean things automatically get rejected. Using and allowing expired or…

> That cert is on the /client/ side, not in the printer. It has nothing to do with printer functionality, only with talking to the printer.

What do you mean, if my software can't talk to the printer then that affects printing functionality.

Re: Reverse Engineering Bambu Connect

#256

Post by rickdeckard »

stavros wrote: post #235
op00to wrote: post #228

Earlier quoted context omitted.

They never officially supported compatibility with Orca, or Home Assistant. Vendors break compatibility with unsupported stuff all the time. Don’t make purchase decisions on unsupported features if you’re gonna get all bent out of shape about it.

They officially supported me printing without an Internet connection, which is stopping now.

Sorry to potentially pour oil into fire here, but I'm curious: did they really?

"Officially support" printing without internet connection?

Was this explicitly documented as a feature or did this just "happen to work" as you expected?

A lawsuit may have some leverage to find that something could have been "reasonably expected" to work in a certain way, but that's quite uncertain territory.

i.e. I would expect an Apple Watch to also work with Android Devices, but this was never officially supported by Apple and it's arguable whether it was reasonable for me to even expect this.

Re: Reverse Engineering Bambu Connect

#257

Post by nullc »

rickdeckard wrote: post #256
stavros wrote: post #235

Earlier quoted context omitted.

They officially supported me printing without an Internet connection, which is stopping now.

Sorry to potentially pour oil into fire here, but I'm curious: did they really? "Officially support" printing without internet connection? Was this explicitly documented as a feature or did this just "happen to work" as you expected? A lawsuit may have some leverage to find that something could have been "reasonably expected" to work in a certain way, but that's quite uncertain territory. i.e. I would expect an Apple…

Yes, "lan mode" is an officially supported advertised feature, where you can happily print on an isolated network. (though as of this morning it now sounds like they're backing off after public backlash)

Re: Reverse Engineering Bambu Connect

#258

Post by nullc »

jdietrich wrote: post #177
franga2000 wrote: post #69

I was very against Bambu in the beginning for their lack of proper network (not cloud!) support. Then they added LAN mode and I actually considered getting one. Luckily I was lazy and never got around to it. What the fuck Bambu?? Security, really? Not even HP dares to make that excuse...

Bambu Lab have been quite explicit about this. Their consumer-grade printers rely on a cloud service; for people who want or need printing over a private LAN, they offer the X1E. https://store.bambulab.com/products/x1e

That hasn't been true for years, the regular X1C has an officially supported lan mode and works fine without any of the cloud stuff. (I believe the smaller ones do too, but I haven't used them so I can't speak to them).

Re: Reverse Engineering Bambu Connect

#259

Post by Spunkie »

dangus wrote: post #41

I personally think the outrage I've seen on this issue is generally not justified. In general people are just scared of change and on top of that are playing telephone on the details of the change, assuming the worst intentions from Bambu like they're trying to be the next HP. I have seen a lot of misinformation on this topic, and I think that in that sense it's a good idea to read the actual announcement details to…

Their "update" is a bunch of hand wavy corporate PR bullshit.

Their idea of "working with" the people impacted by this change is just give them a couple of days notice that they are about to be fucked over.

Also the whole "it's just a beta" is such a stupid point I don't even want to respond to it. Truly idiotic.

They are positioning themselves to build a proper walled garden.

That entire blog post could be sumed up as "We know we are doing a shit thing but We. Don't. Care. So it would be great if y'all could just shut up about it until it's more ready."

Re: Reverse Engineering Bambu Connect

#260

Post by piaste »

Arch-TK wrote: post #248
piaste wrote: post #202

Earlier quoted context omitted.

Do you have the sandboxed Play Services installed? It works fine for me on Graphene (just checked). That said, the recommendation I always give, and personally follow: keep a spare phone in a drawer somewhere, with official Android installed, a Google account, and use it exclusively for business purposes - banking, government services, and the email account you use for those (separate from the one you use for everyth…

> That said, the recommendation I always give, and personally follow: keep a spare phone in a drawer somewhere, with official Android installed, a Google account, and use it exclusively for business purposes - banking, government services, and the email account you use for those (separate from the one you use for everything else). Nothing else, no messaging, socials, browsing, or games. Anything which doesn't support…

I certainly agree with the sentiment (I would trust-bust tech giants, and severely restrict advertising as a whole for being a negative-sum game).

Nevertheless, for living in this world while preserving your privacy, my advice stands. Separate the devices that you control, which you will use for personal and private purposes, from the devices that global corporations and institutions control, which you will use to access the services those institutions provide - services which, by definition, you would not control anyway.

It is far, far simpler than having to get proprietary, frequently-updated software to play nice inside a secure sandbox. If they do, great, but separate devices ensures it isn't a capital-P Problem for you if they stop.

(FWIW, I lived in three different European countries over the past decade and so far the governments all offered TOTP-based web alternatives to their apps. When it comes to private banking, only one (Lunar) was available only via app, but it was also the only one that ran without Play Services.)

Post reply on HN