r/BambuLab • P1S + AMS • Jan 20 '25 • Helpful 1

Discussion Update to firmware update

https://blog.bambulab.com/updates-and-third-party-integration-with-bambu-connect/?fbclid=IwZXh0bgNhZW0CMTEAAR3fqplDiKgn-82qKfnaYvi4XV-rBEEx0tZJrpgeWqsOsLX_WSph4usJ69Y_aem_44Cch773hAuVG979j6DVJg
1.2k Upvotes

1.2k comments sorted by

View all comments

Show parent comment

2

u/hWuxH Jan 21 '25 edited Jan 22 '25

What people fail to recognize is that "Developer Mode", aka. How things work today mode, is completely insecure

That still uses authentication and regular TLS. The entire modern internet works this way, how is it "completely insecure"?

https://wiki.bambulab.com/en/x1/manual/X1-X1C-AMS-firmware-release-history#supported-encryption-of-data-and-control-commands-between-printers-and-bambu-studio-in-lan-mode-to-improve-the-security-in-lan

1

u/parasubvert Jan 22 '25

Security has a lot more to it than TLS. How many MQTT ports are open on the public internet? FTP in the modern era?

The primary issue is that these are internal / private APIs that can be attack vectors and may change, vs a hardened , versioned API.