Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bambu Lab - Setting the Record Straight About Our Security Update

blog.bambulab.com

Post reply on HN
Print view View original

91–100 of 122 posts

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#91

Post by ipv6ipv4 »

the_mitsuhiko wrote: post #81
ipv6ipv4 wrote: post #27

Earlier quoted context omitted.

You mean Bambu Lab broke compatibility with OrcaSlicer and every other slicer out there. I don't know if the OrcaSlicer maintainers feel this way. But if they feel that Bambu Lab is stabbing them in the back, they don't have to jump when Bambu Lab tells them to (that's pretty much the raison d'être of open source).

I'm guessing most of OrcaSlicer's users are using bambu printers and if they upgrade to the firmware that requires bambu connect it's quite likely that the OrcaSlicer maintainers will have some interest in keeping the slicer working. The alternative is that users have to manually use bambu connect and that seems inferior to what the PR enables.

> I'm guessing most of OrcaSlicer's users are using bambu printers and if they upgrade to the firmware that requires bambu connect it's quite likely that the OrcaSlicer maintainers will have some interest in keeping the slicer working.

Yes. That's where the maintainers need to decide if they are Bambu Lab's lackeys or if they have a say in their beloved project. Part of that is thinking about at what point the project becomes pointless as a meaningful BambuSlicer alternative.

> The alternative is that users have to manually use bambu connect and that seems inferior to what the PR enables.

Everything is going to be inferior to using BambuSlicer. That is Bambu's real intent.

The OrcaSlicer maintainers probably have the most leverage (what little there may be) on Bambu Lab. I think that is why Bambu Lab is keen to offer the PR on GitHub. The maintainers should exercise whatever leverage they have while they still can.

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#92

Post by locusm »

reimertz wrote: post #84

We were about to to buy a Bambu Lab printer but then learnt there will be new printers coming out in Q1 so naturally wanted to wait. I need to educate myself on this a bit more on this issue, but it feels like the rest of the printer industry is just catching up with the X1C (looking at Creality K2 Plus).. Do I wait for next-gen printers from Bambu Labs which I imagine will be quite revolutionary, or do I buy we buy…

Have you taken a look at the Prusa Core One?

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#93

Post by storoj »

parasubvert wrote: post #41

People seem to be missing that FTP and MQTT are generally insecure protocols. I think FTP is probably the bigger issue than MQTT. This kind of stuff is common in home IOT networks but would never pass security audit on a corporate network. Bambu is growing up, serving more corporations beyond the hobby community, and probably has been asked to beef their security up to make it easier to deploy their printers securely…

I clearly don't understand what kind of security are we talking about in this particular case of using a 3D printer. A protection from what – someone comes to my home, connects to my wifi with my password, and then – prints a huge cube to waste all my filaments? Where's the real threat here?

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#94

Post by KMnO4 »

the_mitsuhiko wrote: post #82
KMnO4 wrote: post #66

Earlier quoted context omitted.

Prusa does not have an equivalent printer to the P1S/X1C. Even their Mk4s is twice the price of an A1 and is missing some basic features that come standard on all Bambu Lab printers (such as a camera).

Prusa Core One exists.

It exists, but hasn't started shipping yet. It also is Prusa's step away from open source, so it could end up being just like the BBL.

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#95

Post by dang »

ChrisArchitect wrote: post #2

Related: BambuLab new firmware to cut access to third-party API and tools https://news.ycombinator.com/item?id=42760491

This also?

Reverse Engineering Bambu Connect - https://news.ycombinator.com/item?id=42764602 - Jan 2025 (316 comments)

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#96

Post by hammond »

barbazoo wrote: post #74
mmorriso wrote: post #53

Earlier quoted context omitted.

I use LAN mode for my P1S currently in a shed with a local AP and no internet access and it works fine.

https://www.youtube.com/watch?v=91kfolYkRNM Says even then you have to use their app and cloud service to set up the printer.

It's not true, my P1S+AMS has never touched the Internet and I was able to set it up fine on an isolated wifi network out of the box.

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#97

Post by 1116574 »

parasubvert wrote: post #72
igor47 wrote: post #52

Seems like the maker community, esp. YouTube influencers, uniformly recommend bambu. Curious-- do folks here have other recommendations? Equivalent quality, speed, maybe even price, but more committed to free software?

Generally speaking, no. Prusa comes close - they're dedicated to community and OSS, and are quality parts... but are almost 2x the price and tend to be missing comparable features. The other competition doesn't quite have the UX and quality of Bambu Lab. That's changing slowly, but it's reality today IMO. The challenge is that the 3d Printing community is maturing from a hobbyist/tinker phase into a consumer phase wi…

How do normal paper printers work on such networks? From what I gather there is some standardised solution to that, wherein here bambu requires their own "connect" software, correct?

I think that big enterprises are full of old systems that are put on vans, vpns, conditional access rules etc., so it's weird to me that ftp is such a problem?

There is also a point in their tos: 7.4 - boils down to "your printer will block printing until you accept critical security patches" that directly contradicts the linked blog post

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#98

Post by throw_a_grenade »

muppetman wrote: post #36
louwrentius wrote: post #6

Meanwhile Jeff Geerling already put a video out on his second channel that he won’t recommend a bambu lab printer anymore although he was happy with his printer. And this update didn’t convince him to change his mind. “Developer mode” isn’t a solution. You buy hardware and it should work 100% without cloud connectivity. Otherwise it’s not your hardware.

There is little I find more hilarious than the " has put out a video on their that says " comment reply. I summarise all these replies in my head as "Influencer I've never heard of influences" I agree with your re: Developer mode though.

This is not the case though, Jeff Geerling is not a no-name influencer. He actually does stuff, contributes to Fedora and AlmaLinux (IIRC). The most influencer-y stuff would be his playing with funny Raspberry Pi setups, but calling that "influencing" would be uncharitable. That's a hobby.

Re: Bambu Lab - Setting the Record Straight About Our Security Update

#100

Post by the_mitsuhiko »

ipv6ipv4 wrote: post #91
the_mitsuhiko wrote: post #81

Earlier quoted context omitted.

I'm guessing most of OrcaSlicer's users are using bambu printers and if they upgrade to the firmware that requires bambu connect it's quite likely that the OrcaSlicer maintainers will have some interest in keeping the slicer working. The alternative is that users have to manually use bambu connect and that seems inferior to what the PR enables.

> I'm guessing most of OrcaSlicer's users are using bambu printers and if they upgrade to the firmware that requires bambu connect it's quite likely that the OrcaSlicer maintainers will have some interest in keeping the slicer working. Yes. That's where the maintainers need to decide if they are Bambu Lab's lackeys or if they have a say in their beloved project. Part of that is thinking about at what point the projec…

> Yes. That's where the maintainers need to decide if they are Bambu Lab's lackeys or if they have a say in their beloved project.

I understand your anger, but I don't think that properly describes the situation. As a maintainer of an open source project your users are who you are about. If your users want support for bambu connect, then you are likely to implement it. Whatever Bambu does is whatever Bambu does, you need to accept it.

> Part of that is thinking about at what point the project becomes pointless as a meaningful BambuSlicer alternative.

Why would OrcaSlicer become pointless if it supports Bambu Connect? It also supports the Bambu network plugin.

> Everything is going to be inferior to using BambuSlicer. That is Bambu's real intent.

What would Bambu's motivation be to do that? I don't think they would have built Bambu Connect if the goal is not to support third party slicers to directly send things to the printer. Note that most 3d printers on the market didn't or still don't have integration into slicers.

Post reply on HN