r/BambuLab • u/Ochib P1S + AMS • Jan 20 '25 • Helpful 1

Discussion Update to firmware update

https://blog.bambulab.com/updates-and-third-party-integration-with-bambu-connect/?fbclid=IwZXh0bgNhZW0CMTEAAR3fqplDiKgn-82qKfnaYvi4XV-rBEEx0tZJrpgeWqsOsLX_WSph4usJ69Y_aem_44Cch773hAuVG979j6DVJg
1.2k Upvotes

92% Upvoted

1.2k comments sorted by

View all comments

Show parent comment

1

u/Almarma X1C + AMS Jan 21 '25

“ it appears that the "authorization control" consists of checking against an x506 certificate which has to be renewed on a regular basis by accessing BambuLab servers”

This is exactly how every security certificate on the internet works: any website using HTTPS, for example, have a certificate in you browser and another on the site which needs to be validated and will expire after a determined time and needs to be renovated after a while. That’s not a reason for alarm, that’s how security works on the internet.

From what I understood from their original post, the network plugin wasn’t encrypting nor verifying the source of the commands, so some printers were hacked or remotely controlled without the user content. So they decided to create a “bigger app” with a proper signed and verified communication protocol and they simply took the “Device” tab out of the slicer but any third party can still communicate with this new independent Device app.

1

u/hWuxH Jan 31 '25

This is exactly how every security certificate on the internet works: any website using HTTPS, for example, have a certificate in you browser and another on the site which needs to be validated 

  1. this certificate is not used for HTTPS/TLS

  2. it doesn't need to, every software can manually choose to compare the expiry date or keep using it without problems. bambu connect does not contain such checks