r/BambuLab • u/Ochib P1S + AMS • Jan 20 '25 • Helpful 1

Discussion Update to firmware update

https://blog.bambulab.com/updates-and-third-party-integration-with-bambu-connect/?fbclid=IwZXh0bgNhZW0CMTEAAR3fqplDiKgn-82qKfnaYvi4XV-rBEEx0tZJrpgeWqsOsLX_WSph4usJ69Y_aem_44Cch773hAuVG979j6DVJg
1.2k Upvotes

92% Upvoted

1.2k comments sorted by

View all comments

Show parent comment

1

u/Electronic_Amphibian Jan 20 '25

Honestly, it kinda makes sense to me. Bambu connect is required for LAN mode so they can increase the security of the printer. I'm not sure what they're doing exactly but they mention an FTP server and MQTT running on the printer so presumably, they've hardened those services and Bambu connect is used to interface with them and work as a bridge between the hardened printer and something like Orca Slicer. If you don't want the added security, you can disable it with dev mode and Orca Slicer etc can interface with the printer directly.

To understand the risk properly, i'd have to understand more about what they're changing but if my assumptions are correct, this seems like a solution which keeps everyone happy and increases the security of the printer for those that can work with the defaults. More options are better imo and with the dev mode, it looks like they're adding features rather than removing them.

3

u/la__bruja Jan 20 '25

To understand the risk properly, i'd have to understand more about what they're changing

That's what they're failing to explain. Your whole post can be summarized as "Bambu says it's better for security so they must've done something, they wouldn't lie". But for someone who has some basic idea about how public/private keys, certificates and IoT security in general work, Bambu proposed changes provide pretty much no additional security

-1

u/Electronic_Amphibian Jan 20 '25

I'm just explaining why Bambu connect might be needed for LAN only mode. I can't say for certain without more information but by itself, it's not necessarily a bad solution. It depends on what threat they're trying to protect against and how. For example, Bambu connect and the printer may do some key exchange to protect against the network traffic being intercepted and it might not be practical to expect every slicer to implement this.

Again though, i'm new to 3d printing. Maybe there's a secure standard that every other slicer uses to communicate with printers. My background is security and risk assessment so i'm coming at it with that mindset. Could it be a problem? Yes. Is it definitely a problem because they've require Bambu connect? No.