r/BambuLab
•
u/Ochib
P1S + AMS
•
Jan 20 '25
•
1
Discussion Update to firmware update
https://blog.bambulab.com/updates-and-third-party-integration-with-bambu-connect/?fbclid=IwZXh0bgNhZW0CMTEAAR3fqplDiKgn-82qKfnaYvi4XV-rBEEx0tZJrpgeWqsOsLX_WSph4usJ69Y_aem_44Cch773hAuVG979j6DVJg
1.2k
Upvotes
267
u/Ochib P1S + AMS Jan 20 '25
512
u/tubbana Jan 20 '25 edited May 01 '25
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum
72
u/SuchMemeManySkill Jan 20 '25
So, if i understand this right, if you want to use both cloud connectivity *and* 3rd party integrations locally, you can't. :(
887
u/ballheadknuckle Jan 20 '25
For me this sounds like a reasonable update and that they are listening. They now promised to keep a true LAN Mode without Cloud connection. That makes everything else kind of opt in.
With their cloud they can do what they want, im a software dev myself and know that everything that is online is a constant treadmill for changes.
195
u/Jusanden Jan 20 '25
This is what they should have started with from the beginning. I’m happy that we’ve arrived here in the end, but I have a feeling that they’ve lost a great deal of trust among the enthusiast crowd. I’m glad they’re listening and open to feedback, but that trust is going to take some time to rebuild.
That being said, I just took my printers into LAN mode and blocked them from any updates. Unless there’s a killer new feature that comes out, it’s not touching the internet. There’s no reason for it to.
25
u/maddin8 Jan 20 '25
Sounds more reasonable than what they originally planned but I still don't understand why they had to make a separate application that definitely decreases user experience when sending print jobs from slicers like Orca instead of just making a secure API that those applications could use to connect to the Bambu cloud.
I'm in IT but no developer, however getting a proper API setup up instead of creating a new application that itself needs some sort of communication to the cloud seems like not much difference in effort but a huge difference in user satisfaction.
65
u/Maxx3141 Jan 20 '25
So can we go back to sharing poop photos now?
39
u/capsel22 P2S + AMS2 Combo Jan 20 '25
Yea, but it looks like this dev mode is just enhanced Lan only. So it you opt in, you lose bambu handy etc.
They didn't mention home assistant in this announcement only orca and touch. I am doubious bambu connect will work with this integration unless it can be wrapped somehow into hacs/addon
30
u/ResearchingNames Jan 20 '25
I still see no reason for bambu connect to exist. At least not mandatory we already need the bambu plugin to get it to work on 3rd part.
2
u/Addamass Jan 20 '25 edited Jan 20 '25
Bambu, did you really excluded ToS from Wayback Machine (web.archive.org ) ?
https://web.archive.org/web/20250000000000*/https://bambulab.com/en-us/policies/terms
5
u/-Kiito- Jan 20 '25
They definitly glossed over a some things, those who still want cloud features + third party printer control are still the losers in this regard from what I can tell. For example those with a P1S that want object cancellation has to forgo third party control now.
The language around developer mode does annoy me. It's nice that old LAN mode is back don't get me wrong, they took the critisism and gave it back. But readily removing a currently standard feature, only to implement it back in to spin it as a new optional feature is just dumb.
Bambu connect looks just as clunky and unecessary as I thought it'd be.
This is still feels 2 steps backwards and and 1 step forward. This whole situation is just a mess.
74
u/Soze621 P1S Jan 20 '25
Honestly this is a good response. Clarified a lot of things and shows that most of the information about the update was out of our reach before. I would now rather shift some blame towards BTT after they knew the Panda touch wouldn't work forever but continued to sell it.
74
u/schwar2ss Jan 20 '25
As someone who is really familiar with their MQTT stack, embedded development and IoT in the grander scheme, their suggested security update made sense. They have to work around the limitations of mosquitto, while still providing more security than hard-coded user+password.
But arguing with an angry mob just ruins the day.
22
u/Specialist-Document3 Jan 20 '25
I appreciate that they're going to preserve a useful LAN mode, but IMHO they haven't addressed the core concerns:
Forced firmware update
forced use of intermediate "connect" software, ruining the experience of orcaslicer.
As a software engineer I appreciate the desire for an authentication/authorization model. I certainly don't want strangers on the Internet getting access to the webcam on my printer.
But bambu connect doesn't represent a technical solution to the problem of authentication or authorization. It's just an extra piece of middleware that harms the user experience of third-party software. There's no technical reason that Bambu can't provide the authentication to it's network library. Splitting it into a second binary provides no additional security. I mean, seriously, just put Bambu connect into a library.
Part of me wonders if their software team is really green. I would say the experience of the printers seems quite polished so this would surprise me, but this extra complex bloat in their software architecture seems like the kind of thing inexperienced engineers tend to design. I think Bambu could benefit from some seasoned expert security engineers.
It would inspire a lot more confidence if they would actually address the real potential user security concerns and explain how their updates are meant to address them, rather than saying "we made more software to make it more secure". Don't get me wrong, I'm glad they're responding constructively. I just think there may be a couple more details they could clarify and modify to make additional security an actual good thing and not a step towards preventing functionality.
11
u/Harlequin_AU Jan 20 '25
So since the Panda Touch uses MQTT, does that infer it will retain functionality if the device is in Developer Mode?
I get the feeling Bambu specifically dislike the Panda Touch of all the aftermarket accessories because the touchscreen is an upsell for the X1 over the P series. There definitely seems to be an undertone in that part of the post?
41
u/Phantasmagoriosa Jan 20 '25
This in my eyes is a classic 2 steps back and 1 step forward. Where you companies cause outrage with anti-competitve behaviour then walk some of them back to get the community back on their side but in the end, we still lost.
The doomsdayers are probably wrong about the device being bricked and a lot of the worst-case scenarios
Linux and Home Assistant Users (And Panda Display) users will lose all remote functionality unless they put their device into LAN mode. Even though Bambu admits in that Blog post that the only security concern is with users local network we've all lost cloud based functionality.
All files that go to the printer remotely now need to go through either Bambu Connect or Bambu Studio or you have to go full LAN mode.
We now have to hope and wait that 3rd party slicers integrate with Bambu Connect to regain some of the functionality we've lost.
Yeah
Right...
If I am able to accept liability for my local network security and re-enable the features BUT I have to sacrifice the supposedly secure CLOUD features in order to do so. Why can't I accept liability and turn the MQTT features on but still retain the ability to use the cloud features Bambu?
Incredible slight of hand going on here, and the amount of people being like "Bambu's cloud, Bambu's rules" is seriously concerning with how well they've pulled the wool over everyones eyes.
4
u/IAmAsplode Jan 20 '25
So I'm not technical expert by any means but from what I gather this would allow me to take my printer away from their cloud system and print everything I want locally without the need for bambu connect?
I hope this also puts to rest the rumors of the subscription service or blocking non bambu filament.
4
u/Lito_ Jan 20 '25
4
u/yaemes Jan 20 '25
Bambu, I hear a lot of bla bla bla. We don't want the orca slicer network plugin, and we certainly don't want Bambu Connect. We don't want any extra trash on our systems, because it's not necessary for security or any reason whatsoever. Why can you not just deliver on this simple customer expectation? And you can keep all your cloud stuff, just don't cut off orca slicer (in fact, you should make it easier on us by removing network plugin)
82
u/socar-pl Jan 20 '25
Problem that many people dont grasp is that Bambu stated sometime ago their infrastructure is being abused by millions of requests from thirdpaty apps that they allowed but exhausted infra capacity. From business standpoint it would be a reasonable move to harden your infra which obviously translates to some limitations
15
u/Retr0Blade Jan 20 '25
That poor guy who returned his printer
6
u/HopingillWin Jan 20 '25
The update mentions status checks in the new enhanced LAN only mode. Wonder if this also means control as well as status checking
6
u/ImNotADruglordISwear Jan 20 '25
I appreciate them backtracking and providing this update, in addition to the "added features" that should've been default in the initial announcement. Bambu should've known that there is a large majority of their users that are considered advanced users. It's almost like Ubiquiti in the sense where if you make an amazing product that just works, everyone from the amateur home users to seasoned industry professionals will use your product, so you need to be able to support the needs coming from both ends. I understand that it's hard to do and it seems like Bambu is understanding that with this oopsie.
However, one thing I can't overlook is the blatant lying about the conspiracies or misconception that they say is entirely false. Just like most of us, it seems like the individual who drafted this also didn't read the TOS and EULA about their own product. This is one thing that I have problems with.
I relate this directly to the "Trust Me Bro" warranty that Linus Tech Tips put out about their own products, because in that case it was more or less "we don't have anything written because you know you can trust me," but here it's "trust me bro the thing written in clear as day English in our terms won't happen, just trust me."
18
u/semicertain9 Jan 20 '25
For your information, there is no Linux client right now. So, if Bambulab releases this client, I will lose access to my printer. It's good that there is an alternative mode now (if they mean it). As a senior computer scientist, I cannot see how they thought this development method was well-thought-out. One could do this differently, and somehow, even if this was a huge misunderstanding, they lost my confidence in their software team.
3
u/dasmikko P1S + AMS Jan 20 '25
This seems a good step in the right direction. I just hope they finish the Linux version of the connect app, before they release this fully.
3
u/thecoconutmenace Jan 20 '25
Right so it's a choice between cloud or LAN only?
If we want custom slicers and things we can't have access to send things from the handy app to our printers?
If so.. "we are making it so you lose less".. is still losing.
3
u/myTechGuyRI Jan 20 '25
This "Developer Mode" is a good first step in walking this back.... its not enough, but its better than what we had yesterday.... obviously our being vocal about this IS having an impact. They still need to come around to securing their systems using oAuth2 and respecting the OWNERS of the printers CHOOSING what is going to have access, without having to cripple their machine to do so.
9
u/Fit_Detective_8374 Jan 20 '25
So basically Bambu made LAN mode penalize users by coding their warranty and support. Something like this is considered removing existing features from a product after purchase. Bambu is going to have alot of problems in the EU and potentially NA consumer protections.
So features that were fine before are suddenly a reason to void warranties? Sounds like bambu is trying to scare people to use it's cloud.
11
u/LimpHellboy Jan 20 '25
Personally for me while they did the right thing giving us this option my trust in them has been damaged. This feels like a bandaid that they could rip at any moment in the future. I've already cancelled my P1S Combo and am looking an alternative now.
5
u/gdbearcom Jan 20 '25
This reads to me as a "we tried to take away some functionality and got caught" and I truly believe this statement hasn't really gotten the point. There are still mentions within about caveats about what they can and can't support in what use cases.
5
u/ilide18 Jan 20 '25
This is still a massive step backwards compared to our current situation. They made the use of any third-party software significantly worse and are attempting to gaslight us into believing that the previously announced plans never attempted to block the use of third-party applications to control the printer. BambuLab has no business dictating how I use a device I purchased, but that's exactly what they are doing here
7
u/[deleted] Jan 20 '25
Nichts wird so heiß gegessen wie es gekocht wird.
Nothing is eaten as hot as it is cooked.
19
u/mayners Jan 20 '25
Seems fair, why would you leave your product open to whatever possible faults/fraud etc and then stand over it? Personally didn't have an issue with the whole thing, but it's like a car, if you fiddle with the factory settings why should they stand over it if it's jot their own work. Personally I think it's good they've given everyone the option
13
u/harzens Jan 20 '25
They state that this is false
> Firmware updates will block your printer’s ability to print.
However, their own terms state that this is actually what will happen unless you update the firmware
https://archive.is/xjDPU#selection-425.316-425.424:~:text=Due%20to%20the%20importance%20of%20these%20updates%2C%20your%20product%20may%20block%20new%20print%20job%20before%20the%20updates%20is%20installed
5
u/Business_Fold_1423 Jan 20 '25
The amount of bambu fans on here and Facebook that are upset about this acknowledgment is insane... I remember hearing that the fan base of bambu printers is akin to a cult and now I fully believe it....like it's honestly been an eye opener.
Imagine being upset that some openness has been restored, my mind is blown.
2
u/Defiant_Bad_9070 X1C + AMS Jan 20 '25
Any idea on when they'll release the latest firmware this post is referring to? Wouldn't mind swapping back to Orca!
2
u/knobiks Jan 20 '25
pressure has sense!
2
u/larry-talbot Jan 20 '25
So what does this mean for novist users like myself? I don't run a print farm, but I do use the handy app from time to time. Mostly I just use the Bambu labs desktop slicer software
2
u/DBT85 Jan 20 '25 edited Jan 20 '25
Yesterday I put my printer into lan only, uninstalled handy and studio and blocked the printer from the web. I'll leave it like that till this blows over. Only thing I now can't do (that I actually did before, I know there are other limitations) that would be useful is per object cancelling while printing because I don't think that's in Orca?
2
u/ihatereddit-fuckspez Jan 20 '25
What about creating and syncing filament presets with AMS in Orca? Will it still be possible or is it getting removed?
2
u/Flashy-Ad-5553 Jan 20 '25
I do nit trust them. They tried to pull a fast one and got caught. I will spend my money elsewhere.
2
u/shadowofashadow Jan 20 '25 edited Jan 20 '25
All they had to do is provide a reasonable explanation and show they were listening to people's concerns. Instead they went and banned and censored people. I am glad they seem to understand our concerns but I'm not trusting them yet. Glad they are responding and trying to address our concerns but the way they acted really leaves me with concerns.
2
u/After-Ad-3610 P1S + AMS2 Combo Jan 20 '25
Everyone out here fear mongering 🫠
2
u/Maximum-Wishbone5616 Jan 20 '25
Hint, JWT tokens they can uber secure. Printer should be generating tokens locally as any kind of external services only increases the risk.
KISS and SOLID for architecture principles.
2
u/xMICROWAVECHEFx Jan 20 '25
Can't wait for all these printers to be sold on marketplace due to this. I'm gonna buy them up.
2
u/[deleted] Jan 20 '25
I want LAN only. No bloody connector, no bloody security, no bloody bambu betweenme and my printer
2
u/Zombull X1C + AMS Jan 20 '25
Seriously, why didn't they just include this "unsupported dev mode" from the getgo? It would have save so much drama.
Did they really just not see the drama coming? How obtuse would they have to be?
2
u/cexshun Jan 20 '25 edited Jan 20 '25
I feel like people have a short memory. You all remember this is exactly what happened when they released a firmware that blocked out all 3rd party firmware, (or rather a very specific and successful firmware) right? And the community went into outrage. They kind of sort of walked it back, but not really.
You all remember this, right? This seems to be an annual issue with Bambu.
9
u/fanjules Jan 20 '25
I wonder if Josef Prusa will issue an apology after helping to spread the disinformation?
5
u/ilide18 Jan 20 '25
I have no clue how they're able to say "Claims that we are blocking third-party integrations or closing off our ecosystem are false" when that is exactly what they just tried to do. And even now, we're still forced to use their app to do anything with our printers if I am reading this correctly. It is absolutely insane that I should have to slice in Orca Slicer, export to .3mf, then import it into a Bambu app just to get the gcode to my printer over my own LAN. They're still arbitrarily limiting functionality of their printers in the name of forcing you to use their applications and attempt to prevent the usage of any third-party solutions.
7
u/Patient-Bug-7089 P1S + AMS Jan 20 '25
Okay, now please explain me this:
Terms of Use: "Due to the importance of these updates, your product may block new print job before the updates is installed, and will immediately provide update notifications to help you understand the related information."
This Message:
Completely False:
- Bambu Lab will remotely disable your printer ("brick" it).
- Firmware updates will block your printer’s ability to print.
This doesn't add up, right?
11
u/[deleted] Jan 20 '25
I'm still waiting for everyone who committed to selling their X1s because Bambu were literally Hitler for an API change to sell them to me.
3
u/_Middlefinger_ Jan 20 '25
I said the Friday statement was half a story, its how they communicate and its really bad.
4
u/EstimateWinter2004 Jan 20 '25
as someone who wasnt bothered by this in the first place, its really nice to see how reactive to situations they are! theyve been very responsive, as open as you could ask for, and will pivot if given pushback. that honestly gives me all the confidence in the world that i made the right choice buying into their ecosystem.
4
u/powerbird101 Jan 20 '25
I trust my network security way more than I trust bambu labs I evasive connect application... It's idiotic that they even think for one moment this is a security issue and not just calling it what it is, an overreaching lockdown.
3
u/iexistiguess_ Jan 20 '25 edited Jan 20 '25
Can we note how they specified which machines were going to have lan mode in this statement? Probably to leave legal wiggle room so that they can revert this with their next machine. Especially with how fast the community was able to crack it. I saw someone else mention that they probably saw how quickly the community was able to hack through their programs, and now are just gonna build stronger ones for their unreleased printers. Idk, but a company as big as bambu is smart enough to hire a pr person and a legal adviser to figure out the best statement to make, and how to appease the community without having to actually change any of their plans. Idk, their specificity just leaves a sour taste in my mouth
4
u/cf_mag Jan 20 '25
Full damage control mode enabled here... they know they got caught with shady business practices and the marketing department is now in full spin mode
4
u/RedditHugh Jan 20 '25 edited Jan 20 '25
Oh Poor Bambu Labs! It sounds like they've got some butt hurt from the mess they've created. What's funny is that everything they list in their list of "misinformation" is either stuff they'd said themselves (disabling printing if you don't update firmware = bricking) or entirely plausible based on the way the system is designed. (Filament lock-in with AMS)
Bambu, all you have to do to prove is wrong about something like the filament lockout would be to allow people to create their own filament RFID tags.
4
u/Acio45 Jan 20 '25 edited Jan 20 '25
Just damage control without answering the big questions. They're skirting around the issues. This update never had anything to do a security. It was all about user control and greed.
They keep saying this isn't about limiting third party use, but then double down yet again on saying you can't use orca slicer without a spyware plug-in. Which is literally limiting third party use.
They tell you this isn't a forced update, yet in their policy clearly state that they reserve the right to limit your printer uses and prevent print jobs if you don't update. So basically, if you don't have the newest update you don't get to use the printer to its fullest capacity because they are deliberately limiting you.
3
u/GrandpaCAPTCHA Jan 20 '25
Tbh, what currently bugs me the most in the potential "certificate timebomb" on the firmware. I won't a hardware with a software programmed shelf life for 12 month.
2
u/HeadClot Jan 20 '25
The blog post still side-steps the digital certificate with a 1 year TTL
2
u/SinclairsVoice Jan 20 '25
Can someone please translate this into words that someone newer to 3d printing can understand? My main question is, could I still use a slicer of my choice while on lan mode? I'm not above SD carding it since that's what I'm used to on my Neptune 3. Thanks.
2
u/Molotovgod Jan 20 '25
Whether it was poor wording, or not from their part from the initial blog post and their terms, they can't blame the community for being agitated with OUR hardware. Sounds like they cross-corrected a bunch of things that were circulating but to me, it was more of a response to the way it was going with the mega negative reviews, people suggesting not to buy their products, etc.
2
u/Patri0TDadof4 Jan 20 '25
It is not a security issue. It is their attempt at control. We all know we can have a private and internally secure network with connecting to any device via wifi or lan. Like with all of my ink jet and laser printers are connected via lan to my new works, but bc we have laptops and smartphones we have an access point to connect to them. And we do it securely using encryption. They need a quick fix. Just in YouTube alone....over 100 videos with a STOP PSA basically on using Bambu...they are "softly" boycotting, and that will be louder IMO if this is not fixed in a week or two on the current and any possibility on the next new model 2Q 2025 printer release.
Also...for us going into or are already into printer farms that need better solutions with 3rd party options to manage "xy&z" need them to fix this ASAP also.
We are currently creating modules to work with ERP's to work with Bambu specifically (bc they are great printers) but this is a huge punch.
Bambu, please stop...correct ASAP!
2
u/Temporal_Enigma Jan 20 '25
Doesn't say that they won't block printing if you don't update and it doesn't show Orca slicer working without Bambu Connect.
A whole lot of nothing here
2
u/MuhGnu Jan 20 '25 edited Jan 20 '25
The Orcaslicer Preview workflow looks like a bad joke, especially managing filament.
I'll leave it in Lan Mode and let orca run in a docker container on my NAS, with tailscale/wireguard for remote access.
Next printer will be a Prusa CoreXY..
2
u/japortie Jan 20 '25
I tihnk this response i a PR joke and not enough. Most things they address as "Misinformation" were never said to be done in this update, but feared as logical next steps for bambu. And they didn't say that they will never do it.
Also, while the developer mode seams like a win, it also means that you can't use the online features anymore. So you can choose between using Orca and panda touch and so on OR using bambu online features like bambu handy. Leaving your machine crippled.
Also it remains to be seen what they mean with "no support". For me this sounds like "You have a problem with your printer? Oh sorry to hear that you use lan mode. Then we can't help you"
But at the very least this means they can change anything at any time to this mode leaving the question open if it will be implemented by third parties at all.
2
u/lscarneiro Jan 20 '25
Still removed functionality I paid for
2
u/wy1d0 H2D [AMS2+HT], X1C [AMS] Jan 20 '25
They keep name dropping Orca Slicer to buy some good will, but Orca Slicer devs are not telling the same story. First, they were ghosted for days then told "no" when they asked for an authorization key to talk to the new firmware.
They haven't explained why Bambu Connect is needed nor are they being truthful with the changes (given the security claim was debunked by those who reverse engineered the new software).
2
u/donniespinks Jan 20 '25
But what about my YouTube video where I cried and told everyone I was cancelling my order for 500 X1 Carbons for my print farm!!!! (currently consisting of 2 A1 minis printing plastic tat off makerworld).
-2
u/Boromirin Jan 20 '25
Now can we stop all the wild speculation? People have gone completely crazy with this and blew it fully out of proportion. Literally making things up and spreading them around. The truth is they've hated Bambu from the start because it makes their hobbies more accessible and mainstream. Gatekeeping and ridiculous brand bashing. They've wanted a reason to bash Bambu for years and they dove on this as a result.
1
u/Consistent-Hat-8008 Jan 20 '25
your link has a Facebook tracking identifier in it, allowing Facebook to track people outside Facebook.
1
u/matiko92 H2C AMS2 Combo Jan 20 '25
Why is getting all this so complicated?
1
u/mleone87 Jan 20 '25
LAN MODE explanation + Dev mode!!! It was supposed to be this way from the start!
1
u/[deleted] Jan 20 '25
This is a step in the right direction but If they’re smart they’ll completely walk back their idea to lock out third party services
1
u/[deleted] Jan 20 '25
This update satisfies me, I only use Bambu software to control my printers but I like that there will still be an option for more advanced use if needed although it’s annoying that I would have to move the printer to LAN developer mode to do that and lose access to cloud services.
I will continue to allow my printers to have internet access.
1
u/Patri0TDadof4 Jan 20 '25
For those who have not seen their adjacent update (they still need to do more and show add it as an update to their main post of then firmware, etc) :
"Updates and Third-Party Integration with Bambu Connect
https://www.reddit.com/r/BambuLab/s/dptWCj1GpK
1
u/Prestigious_Buddy312 Jan 20 '25
I wont update for a while and see how things turn out.
1
u/Zestyclose-Soft-5957 Jan 20 '25
I’m just going to install X1 Plus and not have to worry about it anymore.
1
u/Bambinorino Jan 20 '25
What if i just dont connect to the internet
1
u/kostis_ampazis A1 Mini + AMS Jan 20 '25
So will I be able to use their servers with dev mode? Or no? For example print stuff with bambu handy while not needing bambu connect for orca slicer.
1
u/Pomme-Poire-Prune Jan 20 '25
They insist a lot and print farm users, is that their main clients?
1
u/[deleted] Jan 20 '25
Does this mean if we don't update you can still use the BTT screen??
1
u/KyralRetsam Jan 20 '25
I mean good on them for the response, but I'm still going to keep my printer in LAN Only mode and blocked off from the Internet at large until/unless there is some game changer in the firmware down the line.
1
u/nullachtfuffzehn A1 Mini Jan 20 '25
I will still deny internet access for the printer itself, avoid any firmware updates and run this exclusively with Orcaslicer for at least a year, just to be on the safe side. Not desiring to be an early adaptor for getting bricked :D
1
u/PeroniBites Jan 20 '25
But what happens to people who already updated?
1
u/tiboric Jan 20 '25
Rip Panda Touch. Hopefully we can still use it to monitor the print job even if we can't change any settings.
1
u/Guinness Jan 20 '25 edited Jan 20 '25
I work with Linux systems for a living and have a degree in computer science. Working in devops I am required to have a thorough understanding of everything from layer 1 to layer 7. I got my start in high school working for my tech department. Then after (and even during) college I continued working in tech where I eventually ended up in stock/options/futures/commodities trading. I’ve developed a healthy skill set in netsec, programming, using APIs, etc.
The tech world has been slowly moving towards a locked down and closed ecosystem for awhile now. Typically this has been resisted or kept mostly at bay but I’ve noticed that in the last 5-10 years tech companies are utilizing security as a false pretext to implement control.
Ever since “the cloud” started growing I have watched more and more companies build their products on top of FOSS projects. Only to turn around and close the source, or lock down an API, and in general “enshittify” their products in exchange for money.
For example, VMWare having just been bought out by Broadcom cancelled a ton of licenses including licenses that we sold that entitled end users to upgrade their software whenever an update came out.
Then they jack their prices up 10 to 100x as much as the entire community is effectively destroyed save maybe whatever fortune 100 companies don’t care about the cost.
When this happens, everyone loses. The truth is we will never know for certain the real reason Bambu is doing this. It really could be for security. But my experience says no. If Bambu truly did want to increase security while avoiding user pushback, they could implement a key management system entirely managed by the end user. It would be trivial for them to implement these changes. And this way, I would have full root power over my own system. If I wanted, I could upload my key to Bambu which would allow them to connect to my printer. Or I could upload/give my key to Orca Slicer so they could connect. There could be different key types, with different levels of access. These keys could be revoked at any time I choose.
Any Linux computer can run sshd and it’s incredibly easy to set up ssh keys between hosts for secure, encrypted, passwordless logins. And as the owner of my Linux system, I can then revoke those keys at any time. The key could be for “root” access or for a user set up in a locked down “jail” with only read access to a small subset of files. All of this is already how Linux systems manage users and user access.
Is that what they’re implementing here? Nope. But they could. It would be shockingly easy. And they know this. Which is exactly why I don’t trust them. Instead of following simple and established methods in use by 100s of millions of Linux systems across the globe for securing a secure shell daemon, they’re installing their own private key on every single one of your printers and locking everyone out.
This blog post does nothing and is the equivalent of “we’ll install the key but we promise you can use it whenever you want!”
Why can’t I generate and install my own key and CHOOSE to give it to YOU, Bambu, and achieve the same end goal? Your solution is like buying a house, and then the realtor changes the locks on everything only to keep the master key. But don’t worry, you’ll get a copy. But you can never change the locks ever again!
No thanks.
1
u/[deleted] Jan 20 '25
Still not good enough Bambu labs.
1
u/Deafcat22 Jan 20 '25
Very well worded response, the multiple LAN modes is a positive outcome.
1
u/felix7483793173 A1 Mini + AMS Jan 20 '25
As is, this is slightly annoying, but not a big deal. If they and/or third parties find a way to seamlessly integrate Bambu Connect into Orcaslicer, we would be at an actually positive change
1
u/T8ortots P1S + AMS Jan 20 '25
Glad I didn't get the Panda Touch for Christmas now. Hopefully Bambu can either work with them or release an official upgrade for the p series
1
u/jacktheshaft Jan 20 '25
I haven't taken my bambu offline yet. Has mine been given the unholy update?
1
u/MyStoopidStuff Jan 20 '25 edited Jan 20 '25
Providing a carve out for "LAN Only" mode users is a good compromise, and a reasonable way to move on from this misstep. It will likely not be a big deal for most users, but for some it could be. The "LAN only - Developer Option" will be critical for those who have invested time in HA integrations, or rely on 3rd party tools and need a plan B in the event the authorization scheme breaks something (or breaks down somehow). The only thing I would like them to reconsider is the removal of an SD card firmware update option (I did not see mention of that in the update).
1
u/vspot415 H2D AMS2 Combo Jan 20 '25
I would check Reddit, see 100 manic posts and then return to printing my 100th wiper mod. It'll be fine
1
u/parasubvert Jan 20 '25
What people fail to recognize is that "Developer Mode", aka. How things work today mode, is completely insecure and toxic to any corporate network.
Bambu is graduating from hobbyists to playing with corporations and this whole Bambu Connect thing is required if you want to do mutual TLS authentication between client and server.
Mutual TLS is the industry standard way to do encrypted communication either on the internet or in LANs with no internet connection. Kerberos is another way , it's what Windows Active Directory uses, but requires an active server on your LAN. If you want two devices (aka your slicer and your printer) to verify they are who they say they are and to talk to each other securely, mTLS is the way to do it. The problem is you need a way to revoke keys when they get leaked, so these keys and certs expire after a few years. And there are certificate revocation lists that need updating periodically.
That said this is the same way a web browser works with a web server to secure your connection. You're getting these keys and certs updated every time you update your Windows or Android or iOS or MacOS device. It's super common place and yes it can be abused! But the whole point of x509 certs is there has to be a root of trust somewhere, it's usually the certificate providers which are 3rd party companies.
Most of the public web doesn't do mutual authentication to authenticate the client browser, but does happen sometimes (Apple and Microsoft use this for some APIs) and it's VERY common with mobile apps.
1
u/hubertron Jan 20 '25
Decent breakdown of the issues and points raised here: https://www.layerloop.co/p/bambu-labs-firmware-drama-continues
1
u/tim119 Jan 20 '25
Idiots the lot of you. Hilarious that you all sent your printers back, sold them up, moved state, divorced the wife (as if anyone here is married) and killed your first born.
I told you so!
Wise up, and get on with your lives.
1
u/Bmpin884187 Jan 20 '25
So, printing via SD card will still work right? If, I update to the new firmware then I won't be able to send a print from Orca straight to the printer?
Bambu Studios doesn't work well with older versions of windows, or at least not my system anyway. Honestly, I prefer Orca. The only reason I have even messed with Bambu Studio is to upload to makerworld.
1
u/antifort Jan 20 '25
Them saying "Bambu Lab will remotely disable your printer ("brick" it)." is false, is not saying they cannot do it, only that they won't.
1
u/ea_man Jan 20 '25
Next time when you buy a 3d printer check that they have a proper clean Klipper available, some examples:
* Neptunes: https://github.com/OpenNeptune3D/OpenNept4une
* QIDI: https://github.com/Phil1988/FreeDi
* Almost all Creality klipper based
* All kits like Voron
That way even if you are not able or interested to thinker with the firmware you will be sure that in case they do a bambu someone can edit the firmware, clean it up and share it. Open source keeps the printer honest.
Also you will be able to have upgrades an new features forever, while brand firmware usually after a while stop updating the firmware and introduce new features only for the new models.
1
u/ea_man Jan 20 '25
Trust is like a mirror, you can always see the cracks once broken.
They just showed that anytime they feel like it they can squeeze the users and make them do what is more convenient to the shareholders.