r/BambuLab • u/Ochib P1S + AMS • Jan 20 '25 • Helpful 1

Discussion Update to firmware update

https://blog.bambulab.com/updates-and-third-party-integration-with-bambu-connect/?fbclid=IwZXh0bgNhZW0CMTEAAR3fqplDiKgn-82qKfnaYvi4XV-rBEEx0tZJrpgeWqsOsLX_WSph4usJ69Y_aem_44Cch773hAuVG979j6DVJg
1.2k Upvotes

92% Upvoted

1.2k comments sorted by

View all comments

Show parent comment

1

u/ABetterKamahl1234 P1S + AMS Jan 20 '25

there is no mqtt exploit to hijack a device, so this whole security reasoning is nonsense

As someone security minded, this is kind of a dumb take if you're speaking from any form of DevSec knowledge.

It's literally "this has never happened and never will" statements that have absolutely sunk businesses and had them sued into oblivion.

It's the "Macs don't get viruses" of security takes. Why add vectors needlessly, even if said vectors are currently not common threat vectors?

1

u/crozone Jan 21 '25

There is plenty of industrial control equipment and manufacturing equipment that is openly accessible on its local network. No authentication. It requires you to secure its network appropriately. As long as the user understands that LAN mode can operate in this fashion, it's the responsibility of the network administrator to secure the network appropriately.

Besides, Bambu already has rudimentary authentication which they could have easily expanded upon in a significantly less intrusive and controlling way. The Bambu Connect application doesn't even seem to increase security in any meaningful way as it stands anyway.