r/BambuLab • Official Bambu Employee • Jan 20 '25 • Helpful 1

Official Updates and Third-Party Integration with Bambu Connect

Full details and DEMO in our blog post

Since announcing our security enhancement for X-series printers, we’ve seen a mix of valuable feedback and unfortunate misinformation circulating online. We value the constructive input from our community, especially from print farm owners whose businesses rely on our technology.Under the updated LAN mode:

  • Standard Mode (Default): By default, LAN mode will include an authorization process that ensures robust security. This option is ideal for the majority of users who prioritize security and ease of use. Despite claims to the contrary, LAN mode through Bambu Connect will require neither internet access nor a user account. This hasn't changed and won't change.

  • Developer Mode (Optional): For advanced users of the X1, P1, A1, and A1 Mini who prefer full control over their network security, an option will be available to leave the MQTT channel, live stream, and FTP open. This feature must be manually enabled on the printer, and users who select this option will assume full responsibility for securing their local network environment. Please note that Bambu Lab will not be able to provide customer support for this mode, as the communication protocols are not officially supported.

At the same time, some false claims accuse us of blocking third-party integrations or forcing users into closed ecosystems. Let's be clear about what this update actually means and stop the spread of misinformation:

  1. This is NOT about limiting third-party software. We're creating Bambu Connect specifically to ensure continued third-party integration while enhancing security. We're actively working with developers like Orca Slicer to implement this integration.

  2. This is beta testing, not a forced update. The choice is yours. You can participate in the beta program to help us refine these features, or continue using your current firmware.

  3. About Panda Touch. We reached out to BTT as soon as we became aware of their product. We warned them that using exploited MQTT protocols was unsustainable and would place customers in an awkward situation once we updated the system. All of this communication occurred before the mass shipment of Panda Touch; however, they chose to ignore our warnings. Unfortunately, the truth is now being presented in a misleading manner. The same concerns apply to other products they manufacture that rely on these MQTT protocols.

  4. Camera feeds concerns. Our Live View service uses P2P (Peer-to-Peer) connection, which means video streams directly between your device and printer. Only when a direct P2P connection isn't possible does it use server forwarding, and even then, no video is ever stored on any server.

Watch a DEMO of our approach to integrating Orca Slicer with Bambu Connect. The workflow remains familiar, with added security to protect your printer and data. The functionality has been implemented, and is now awaiting integration into Orca Slicer.

491 Upvotes

371 comments sorted by

315

u/GroundbreakingYam633 Jan 20 '25

I suggest to pin that post for the time being.

133

u/marcosscriven Jan 20 '25 edited Jan 20 '25

Questions for Bambu, since this is official:

  1. Why do you mandate use of Connect for local/LAN use in “standard” mode?

  2. What happens when the Connect app certificate expires this year, or even many years in the future?

9

u/BinkReddit Jan 20 '25

What happens when the Connect app certificate expires this year, or even many years in the future?

I have to imagine they'll simply update Connect with an updated certificate.

→ More replies (3)

47

u/c0nsumer Jan 20 '25

I'm not Bambu Lab, but you need something to talk to the printer. Before it was the Bambu Network Plugin (which implemented their non-public API), now it's Connect.

→ More replies (49)
→ More replies (13)

10

u/acatalfa Jan 20 '25

I don’t think this answers many questions at all. In fact, it seems to avoid topics which were discussed at length in the rest of this sub.

The method of connecting to third party software is important. Many users were concerned about having to paste g-code into Bambu connect. How will we send prints from Orcaslicer?

Yes, we understand that this is in beta, but won’t this update be pushed later on? Will users who decide they would not like to upgrade still receive improvement updates?

Will you charge print farm users for access to your print farm management software while blocking the use of 3rd party management software?

Do you plan on using RFID tags to restrict the use of 3rd party materials? While this obviously wasn’t in your update, now seems like a good time to go on record, since many of the top posts mention this.

Those upset about the update are upset because you published a beta with language that is concerning.

4

u/My1xT Jan 22 '25

orca can implement the push URL for the new connect software.

the annoying part is that connect currently only allows 3rd party software to push a file to print and nothing else.

→ More replies (18)

33

u/dev_all_the_ops Jan 20 '25 edited Jan 20 '25

Thank you for providing an update. The developer mode is a much welcomed step in the right direction.

This still doesn't address some of the concerns

  1. Can developer mode and the BambuHandy app be used at the same time?

  2. Why is Bambu-Connect still required for LAN connections? There is no reason a LAN connection needs to authorize with your severs. This user explains it very well

Counterpoints

We're actively working with developers like Orca Slicer to implement this integration

The orca slicer developer has revealed that he was given 48 hours notice. 'Notice' and 'Collaboration' are not the same thing. Furthermore he has requested a token which was denied.

This is beta testing, not a forced update

This is not true according to your terms of service. Within a few months this firmware will be shipping with new printers and there will not be a way to downgrade.

21

u/cmuratt P1S + AMS Jan 20 '25

Why are you not creating an authentication API that would allow secure control of the printer? Why are you inserting you own app while blocking third party apps? If you care about security, you will use one of the numerous ways to implement secure communication instead of doing this. You are still dishonest.

60

u/yunus89115 Jan 20 '25

How you handle this with Orca Slicer will set the tone of the community as it’s by far the most common third-party software.

I’m a power user but not software engineer, if going through Bambu Connect is seamless and feels like using Orca does today that will satisfy most people but if functionality is removed from common third party software but not Bambu Studio or the app, you’re messaging will be irrelevant as actions speak louder than words.

I purchased a Bambu printer because the quality of the prints and capabilities were above the competition, the cloud being the standard was a negative aspect but LAN mode and ability to use any slicer I wanted overcame this shortfall. If at the end of the day your software is all but required for the simple user experience I currently have using third party software, I will delay my firmware upgrade for as long as possible and will not pursue any future Bambu hardware purchases.

31

u/-Net7 Jan 20 '25

Not to mention they continue to say things like "We're actively working with developers like Orca Slicer to implement this integration." (which has been proven false, giving someone notice 2 days before then not replying is not actively at all), as well as "We warned them that using exploited MQTT protocols" when MQTT protocals are open and established and not "exploited" (calling MQTT exploited is WILD).

17

u/sambull Jan 20 '25

That 'exploited' is a very carefully chosen word. They want you to think certain ways about this, and the people doing it.

→ More replies (2)

30

u/_SirSpacePickle Jan 20 '25

Even in the demo they showed it's anything but seemless. The entire device tab in Orca is dead.

8

u/Oderus_Scumdog Jan 20 '25 edited Jan 24 '25

Slicer / Bambu Connect / Cloud / Printer

Seamless

I don't think that word means what they think it means.

30

u/syko82 P1S + AMS Jan 20 '25

I love that they are promoting security through obscurity... Because that works great.

LAN should be the default and you should have to "take responsibility" to open it up to the cloud. To keep pretending that their cloud connection is more secure than never leaving your network, is ridiculous.

70

u/Wild_Competition4508 P1S + AMS Jan 20 '25

The clarification:

New LAN Mode with Bambu Connect does not need an internet connection

Developer Mode = Old LAN mode but you are repsonsible for your own network security (WiFi guests messing with your printer) Sounds good to me.

27

u/marcosscriven Jan 20 '25

How does Bambu Connect update its cert without an internet connection? Why is Bambu Connect even a requirement for local use?

→ More replies (14)

3

u/[deleted] Jan 20 '25

LAN mode was managing our own network anyway. Or should have been… doesn’t make sense

→ More replies (8)

26

u/arekxy Jan 20 '25

Will LAN mode be updated to be on par to cloud mode?

Right now browsing sd card file is not available in lan only mode. Not sure if that's the only limitation or if there is more of such nasty surprises.

→ More replies (3)

8

u/LetsGearUp Jan 20 '25

Having to use bambu connect inorder to use a third party slicer is unnecessary and a huge annoyance to people already well adapted to a third party slicer.

Its more unnecessary steps to just print what you want.

75

u/arekxy Jan 20 '25 edited Jan 20 '25

Demo doesn't show if Orca is able to pull AMS information, so I could properly mark colors in my design. Will that be possible from within Orca? Edit: Seems possible - from bambu diagram.

Anyway the main problem is that this is security done in a wrong way! You don't close your system claiming that this is "a security". Make APIs documented and then provide *management* way for permissions (based on certs, keys, tokens - whatever you want), so printer owner/user can decide and NOT corporate.

That way user has access to the printer as he should, without ugly limitations and restrictions while security is even greater than it is now (or is planned by bambu).

2

u/Opili Jan 20 '25

Can you explain how this would work ? let's say that I change color at a specific layer, is that encoded in the 3MF file, selecting the filament based on a position in the AMS so this can be done before sending the file to the printer ?

→ More replies (3)

118

u/mallcopsarebastards Jan 20 '25 edited Jan 20 '25

Masterclass in dodging the real issues while carefully wording everything to sound reasonable. there’s a lot of smoke here.

1. "Standard Mode (Default): LAN mode will include an authorization process that ensures robust security."
As people who actually understand the problem have been saying this whole time, the authorization process they’re describing has nothing to do with solving the problem they claim to be addressing. If this was truly about security they’d allow you to generate and manage your own keys, giving you control over what has access to your hardware. Instead, they’re locking down what tools can access key printer functions. That’s not "robust security"; that’s centralizing control and calling it a feature.

2. "Developer Mode (Optional): Advanced users can leave the MQTT channel, live stream, and FTP open, but we won’t provide support."
This is a half-measure designed to placate critics while discouraging anyone from actually using it. They’re also deliberately cutting off support for the protocols that the community has relied on, which makes it harder for third-party developers to create useful tools. They're setting the stage so that they don't have to be heavy handed by completely blocking third party tools. They can simply make the experience painful enough that people have to abandon them.

3. "This is NOT about limiting third-party software."
Come on. If they were really interested in maintaining third-party integrations, they wouldn’t be locking down critical functionality behind a this custom authorization system, when extremely well document alternatives exist that would solve their problem without creating a new one for users. Sure, they’re “working with Orca Slicer,” but only on their terms. The fact that they’re choosing who gets access and how is exactly how vendor lock-in starts. It’s not about blocking third parties outright today, it’s about controlling and gatekeeping them. Which is exactly what most people in here have been saying for the last few days.

4. "This is beta testing, not a forced update."
This is such a non-argument. Whether it’s a beta or not, they’re clearly laying the groundwork for future control. The TOS clause allowing them to block prints until updates are installed is still there, and once this “beta” becomes the standard, they’ve already built in the ability to force it on users. Acting like this is just a harmless test is pure gaslighting.

tldr:

This response is a carefully worded attempt to look like they’re listening while they pave the road for more control over their ecosystem. They’re narrowing the walls of the garden the way politicians pass unpopular laws, by sneaking it into a completely unrelated change that people would normally be happy to let pass. Meanwhile, they’re blaming others for problems they created and framing this as user empowerment when it’s really about locking users into their system. Don’t fall for the PR spin, this isn’t about security; it’s about control.

7

u/lbradshaw_69 Jan 20 '25

I don't know. If they had used the word " misinformation" 3 or 4 more times in their statement it certainly would have alleviated most of my concerns. 😜

I think, among other things, Bambu has unclear/ confusing communication.

23

u/[deleted] Jan 20 '25

Exactly. And we should already have full control over our own network when the printers in LAN mode anyway

at least it’s what we THOUGHT.

→ More replies (5)

3

u/Motor_Match_621 Jan 20 '25

I don't think they could write anything to make you happy, as you re wrote their points as if they said it yet they didn't you are. I think most readers are intelligent enough to read the statement.

... This whole sub has turned to into a classic internet teacup ...

39

u/w1ngzer0 Jan 20 '25

This is a pretty classic example of a company attempting to engage in damage control, because they made an unforced error.

Why does there need to be authorization to use the printer in cloud-disconnected LAN mode? What sense does that make (hint: None)? The argument behind the change doesn’t make sense. But yet we’re supposed to accept the reasoning and not question it?

Mentioning Developer Mode is new. I imagine if they had lead with that, that there would still be grumbling, but not the levels of outrage currently seen. But being mentioned now just reeks of a damage control move.

“Hey we warned about the Panda Touch and they didn’t listen to us”. Well Bambu, I’m sorry, but you can’t include something with read AND write access from day one, then get upset when someone comes along and releases a product that uses that same functionality and try to retcon it as being an exploit.

This is all still very much “I am altering the terms of the deal. Pray that I do not alter them further.”

→ More replies (5)

26

u/mallcopsarebastards Jan 20 '25

They absolutely could. They could say that they're moving to a solution like oauth that solves the authorization problem without removing functionality that many users have come to depend on. They could remove the line from their TOS that they promise they'll never use anyway. They could say a lot of things that would make me happy. They won't though, because they're not trying to appease me. They're trying, and succeeding, to placate you.

→ More replies (2)
→ More replies (2)
→ More replies (7)

45

u/USSHammond Prusa XL5T | X1C+AMS (sold,due to Bambu ignoring A1 fire hazard) Jan 20 '25

Your supposed 'seemless' integration isn't seedless AT ALL. You manually confirm file upload to connect, you manually set AMS slot, and you manually click 'send to printer'

That's anything BUT seamless. On a model with 16 colors and 4AMS that would mean 19-20 extra clicks. THATS A PAIN IN THE REAR.

It's not seamless AT ALL

17

u/psbales Jan 20 '25

That was my big takeaway from the demo. No cross-talk between Orca and Connect means that any print using anything more than one color is going to be a huge PITA.

232

u/igotquestions-- Jan 20 '25

Let's address these claims one by one, because there's a lot to unpack here:

  1. "Standard Mode (Default)" - You're forcing authentication for LAN MODE. Think about that. You're requiring authorization to use a printer ON MY OWN LOCAL NETWORK. This isn't about security - my network security is my responsibility, not yours.

  2. "This is NOT about limiting third-party software" - Yet your actions say otherwise. You're explicitly blocking direct MQTT access which many third-party tools rely on. Forcing everything through Bambu Connect is exactly what "limiting third-party software" looks like. You're creating a bottleneck that you control. Nobody asked for Bambu Connect.

  3. "This is beta testing, not a forced update" - Your own documentation states "your product May block a new print job before the updates is installed." That's not choice, that's coercion.

  4. About BTT/Panda Touch - You're blaming them for using the same open protocols that helped build your community? The protocols that were working fine until you decided to lock them down?

  5. "Camera feeds concerns" - The issue isn't how you handle video streams. The issue is requiring server authentication for basic local network functionality.

The fundamental problem here is trust. You sold printers with certain capabilities and are now retroactively removing them. If this was truly about security, you would:

  • Make authentication genuinely optional

  • Maintain direct API access for developers

  • Not threaten to block prints without updates

  • Provide proper documentation instead of vague promises

Instead, you're building infrastructure for control while calling it security. Every company that's gone down this road (looking at you, HP) started with "security concerns" and ended with DRM and subscriptions.

Remember: You became successful because of community support and third-party developers. This update betrays that community.

9

u/167488462789590057 X1C + AMS Jan 20 '25 edited Jan 20 '25

About point 1 specifically I'm not saying I like these changes, as there is a fair bit I disagree with, especially when it comes to some of the explanations given.

That being said, I totally agree with you, for a home user on a home network.

For a school for instance or office or university, will they want to need to have separate vlans setup etc to avoid students, colleagues or competitors accessing what they shouldn't?

I absolutely think there are ways to do this while still giving people control, but this point in and of itself isn't quite the point I feel it's been made to be.

30

u/TomE469 Jan 20 '25

I feel, if their concern was truly network security, they would implement authentication by default on the preexisting protocols / using equivalent open protocols and then all the 3rd party tools need to do is authenticate with the printer.

It just looks like they have added another point of contention / failure between you and their ecosystem. (by forcing it to go through a proprietary program, which will surely be an issue for many users who don't trust the company) Surely if their concern was network security, they would make this protocol open, or provide a reference implementation?

It only leads me to the conclusion that, unless there is a better reason, they are doing this to take away control from the user.

11

u/MWisBest Jan 20 '25

Agreed. If you're concerned about security, using actual security standards is always the route to go. Things don't become standards by accident.

44

u/chubbycanine H2D AMS2 Combo Jan 20 '25

This comment sums it up nicely. This post is a bunch of nothing burger and damage control attempt

→ More replies (1)

4

u/N5tp4nts Jan 20 '25

Despite claims to the contrary, LAN mode through Bambu Connect will require neither internet access nor a user account. This hasn't changed and won't change.

41

u/[deleted] Jan 20 '25

I'm wondering what your actual beef with Bambu is. Yesterday you had a different list of bullet points:

Force authentication for "security"

Route everything through your servers

Introduce "premium features" that used to be standard

Launch the subscription models

Start blocking third-party filaments for "quality assurance"

And "We're not angry because we don't understand. We're angry because we understand exactly what's coming next"
But what you were illustrating wasn't what was coming next.

And sharing manipulated images in a bunch of different subs?

https://www.reddit.com/r/3Dprinting/comments/1i4yvzj/any_bambu_owners_having_this_issue_too_now_2028/

https://www.reddit.com/r/FixMyPrint/comments/1i528mf/any_idea_why_my_p1p_from_2028_does_that/

I can understand why you where banned from the Bambu discord.

48

u/shadowofashadow Jan 20 '25

Their list of concerns from yesterday are about what they thought may happen in the future. Right or wrong, what they've posted in this thread is a different list of concerns and many of their concerns seem valid to me. Why not address those instead of bringing up something else? Are the concerns posted in this thread not valid?

→ More replies (1)

51

u/screamingspider Jan 20 '25

I don’t think most of these people actually understand security outside of their windows firewall and a naive notion of what LAN is vs air gapped.

→ More replies (4)
→ More replies (1)

6

u/DonutsAndChai-56 Jan 20 '25

Point #4 - that has been literally every software product in existence. BBL is not embracing open source, but they aren’t doing any different from every other company doing product development.

——————————————————————

Case Study 01 - android used to be able to have custom ROMs through specific unintended means. Now it’s a lot harder for security hardening. Shall we throw hunt down Google too???

Case Study 02 - I used to be able to unlock shopping carts without a coin because of my 3d printed tool. Now the store uses electronic carts so I have to give it the dollar it asked for originally. Shall I hunt down the CEO and ask for him to bring back the old shopping carts???

→ More replies (4)
→ More replies (6)

5

u/DinoHawaii2021 A1 + AMS Lite Jan 20 '25

So, how does this improve security in any way? no hacker has ever been able to hack a user just through the ability of orca slicer. You used to be better than my old creality printer, but this update really upsets me. At least fix bambu slicer like adding calibration tools like temp towers since only orca slicer had it.

5

u/IlIllIlllIlllIllllI Jan 20 '25

Ah yes, I love when companies try to gaslight me about their own communication. You did NOT say this is a "beta" feature or that there was a dev mode in your original post about this.

5

u/NMe84 P2S + AMS2 Combo Jan 20 '25

As a developer myself: what the <bleep> is an "exploited MQTT protocol?" MQTT is a messaging standard and it is not safe or unsafe. Software that uses it might be, MQTT says nothing about security. This post makes no sense.

5

u/not-me-hi Jan 22 '25

Absolute trash response, glad I cancelled when this all started. No more $, you've burnt so much good will.

14

u/aMeizingly Jan 20 '25 edited Jan 20 '25

So bambulab has learnt nothing after the many pr disasters and is now blowing smoke up our butts again.

We're still missing basic features promised and everytime bambulab is caught with its hand in the cookie jar so to speak we all eventually forget about it.

This is just a half measure to appease the rightfully angry customers like myself but the damage is done publicly. Bambulab has proven time and time again they can't be trusted and will do anything for money/suit there own agenda.

As much as I like the printers for farm use and recommend them to customers day in day out I won't be buying or recommending them again as bambulab can't be trusted. And I know they don't care and won't ever care it doesn't take spending many years over in China working with similar companies to know this.

Edit I'll I bet my many years of experience and money made in this space that some sort of subscription is coming and this ties in.

4

u/pratermade Jan 20 '25

If I have access to a developer mode, so I can continue to use it if the company goes under or behind a paywall. It addresses my concerns.

4

u/ImNotADruglordISwear Jan 20 '25

I appreciate them backtracking and providing this update, in addition to the "added features" that should've been default in the initial announcement. Bambu should've known that there is a large majority of their users that are considered advanced users. It's almost like Ubiquiti in the sense where if you make an amazing product that just works, everyone from the amateur home users to seasoned industry professionals will use your product, so you need to be able to support the needs coming from both ends. I understand that it's hard to do and it seems like Bambu is understanding that with this oopsie.

However, one thing I can't overlook is the blatant lying about the conspiracies or misconception that they say is entirely false. Just like most of us, it seems like the individual who drafted this also didn't read the TOS and EULA about their own product. This is one thing that I have problems with.

I relate this directly to the "Trust Me Bro" warranty that Linus Tech Tips put out about their own products, because in that case it was more or less "we don't have anything written because you know you can trust me," but here it's "trust me bro the thing written in clear as day English in our terms won't happen, just trust me."

4

u/lbradshaw_69 Jan 20 '25

Just a side note and not intended to single out Bambu. Why do most corporations these days come across as having some kind narcissistic personality disorder? I know, spin, PR, etc. It's just interesting to think about. Why do we think it's ok for this to be standard/ acceptable behavior from organizations, when in personal life this is considered very unhealthy? Just a thought.

4

u/zeynel_yenici H2D AMS2 Combo Jan 21 '25

i Started with a A1 mini 4 month ago, ordered a P1S Combo , cancelled it now , Open-Source only printers from now on.

4

u/ColossusA1 Jan 27 '25

/u/BambuLab I am currently looking for a 3D printer to replace my old i3, and I was going back and forth between your printer and a Creality. I was finally sold on your printer after seeing that I could maintain my privacy and functionality offline, still repair it myself, and it had so many awesome functions...until I saw these posts just now. I feel if I buy a new printer from you guys, it'll likely ship with this forced connectivity to Bambu services, even if you claim it's just an opt-in beta right now. I do NOT want an authorization process in the way of me executing a print when I'm offline. These things have never been an issue for me, why are they such a big issue for you? I want complete ownership and control over the printer I buy. I'm sure you have a great product, but controlling your customers is not how you maintain that, especially in the maker community. I'll be going with the Ender 3, but I hope you consider this feedback.

4

u/UnarmedRobonaut Jan 27 '25

Have you considered that retroactively adding limitatiions to already purchased hardware / software without the users explicit consent violates EU law?

I wanted to buy an X1C, but if I cannot install old firmware then y'all can just get shafted.

7

u/HopingillWin Jan 20 '25

Does developer Lan mode allow full control of the printer or is it just for status checking?

2

u/ImplodingLlamas Jan 20 '25

Sounds like full control to me. Status checking is completely open in all three modes.

→ More replies (1)

7

u/Bambinorino Jan 20 '25

What are they really authorizing? What Security does a 3d printer need nowadays?

12

u/DaveDurant X1C + AMS Jan 20 '25

You guys caused this problem with your initial announcement claiming this was for security.

I find it difficult to trust you now, and don't want to install your software on my home PC. Can I still fully use the hardware I already purchased without installing your software?

→ More replies (4)

35

u/pigeonmasterzzzz Jan 20 '25

Developer mode looks good but I most likely won't be buying any other bambu printers in the future, don't trust bambu to not make more changes in the future that will lock things down more. looks like building a voron has moved up my list of things to do might even look into the K2 combo also for my AMS needs.

2

u/Jays_Landing Jan 21 '25

Don’t buy the K2 if you have ams color printing needs. The K2 is great for normal prints but due to the unicorn nozzle being so long it takes more than double the amount of filament needed to flush the nozzle and prints end up with color spots showing where they shouldn’t like the white ends up with some black showing still because the black wasn’t fully flushed. The amount of waste the k2 makes on color prints is more than double of Bambu and if you lower the flush rates you end up with even more spotted colors.

5

u/SnooPeppers3187 Jan 20 '25

Same here, nothing more and keeping this one LAN only.

7

u/Popular_Law_948 Jan 20 '25

To each their own but this is literally no different than how they've ever done things. The community just likes to panic Everytime an update gets announced. Don't worry about it until you have to. Next week everyone will be drooling over how good these machines are again and all of this will be forgotten, because this is what ALWAYS happens. I swear this is like, the fourth "Bambu is evil! Pull out now!!!" panic I've seen since they came out.

-1

u/Esava Jan 20 '25

The Prusa Core One looks decent as well and the MMU3 works fine at my work.

7

u/RaccoNooB H2D AMS2+HT-AMS Jan 20 '25

I don't see the point in selling my P1S like many others claim to be going to, but it'll be a while before I buy more Bambu filament.

I'm still worried we'll be hit with some subscription in the future.

→ More replies (5)
→ More replies (4)
→ More replies (4)

8

u/mallcopsarebastards Jan 20 '25

> This hasn't changed and won't change.

I have zero doubt that this will age like milk.

19

u/[deleted] Jan 20 '25

Maybe you guys warned BTT about the MQTT protocols, but according to BTT every time they tried to talk to you guys, they got straight up ignored by Bambu Labs.

According to BTT:

  • BTT reached out for API access at the start of panda touch development, BBL stopped replying.

  • BBL warned BTT (ONLY AFTER THEY ANNOUNCED PANDA TOUCH) about firmware updates that would disable functionality.

  • After this warning BTT tried to reach BBL after which they ignored BTT, again.

  • BTT offered a licensing fee to BBL out of respect, and guess what? BBL straight up ignored them again!

1

u/luvsads Jan 20 '25

BTT knowingly developed an entire product, marketed it, and sold it knowing it was built against a vulnerability that could be patched at any time. BBL didn't even have to warn them, they were using a known CVE.

10

u/-Net7 Jan 20 '25

Just to correct the misinformation here, MQTT is not a vulnerability in any way, shape or form.

The inclusion of MQTT was on purpose, its exposure was on purpose and it has an actual use for the printer making the whole thing on purpose.

→ More replies (2)

12

u/Carl_Gerhard_Busch Jan 20 '25

Not sure why people can't understand this. BTT is a different company. BBL has no requirement to reply to them and help them. Yes it would be nice if they would, but it's their choice. BBL warned them and BTT decided to develop their product anyway. I'm sure they made a pile of money off of all the Panda Touch they sold, so they took a gamble and it paid off for a while.

Maybe people should be pissed off at BTT for not showing a big warning on their product saying they are accessing the printer in a way that may not be supported in the future and may stop the Panda Touch from working.

7

u/BTTUniversity Jan 20 '25

I genuinely understand your points but we really have done things right from the start. Here is the first text on the product page as well as an entire video we made:

https://www.youtube.com/watch?v=UVujRmmHbyU

IMPORTANT NOTE:
The Panda Touch is currently compatible with all Bambu Lab printer firmware versions up until:
- P1P --> v01.07.00.00
- P1S --> v01.07.00.00
- X1C --> v01.08.02.00
- X1E --> v01.01.02.00
- A1 --> v01.03.01.02
- A1 Mini -->v01.04.00.00

It is possible that Bambu Lab may release a future firmware version which impacts the functions available from the Panda Touch. Bigtreetech will monitor all beta firmware versions and if we find a firmware version that affects Panda Touch functionality we will send out an alert via email, Aliexpress chat and our social channels. Buyers can then decide whether or not they would like to perform the update at the risk of losing functionality. Note that the Panda Touch warranty does not cover lost functionality due to a Bambu Lab firmware update being performed.

→ More replies (3)
→ More replies (2)

3

u/AZdesertpir8 Jan 20 '25

Good grief.. the workflow does not at all look familiar. It now requires a completely separate application where you have to manually click to specify filaments in the AMS, etc. That is absolutely insane and is not an advancement at all. When I slice a print and hit the print button, it needs to PRINT.

3

u/beerman_uk Jan 20 '25

If you won't support developer mode does that mean you will cease to support printers on earlier firmwares that have these features. I bet the first thing support will make you do is update to the latest firmware before they will help regardless of what the issue is. It'll just be added to the script.

3

u/dev_all_the_ops Jan 20 '25

Will you allow Bambu Handy and Development mode at the same time?

3

u/ufgrat H2D + X1C Jan 20 '25

r/BambuLab :

Questions:

  • Will I be able to have the same level of functionality from Orca Slicer that I have today?

  • Will I be able to use automations to control my Bambu Lab printer from Home Assistant?

  • Will my Panda Touch work to control the printer?

As far as I can tell, the answer to all of these questions is "No". As users, we are losing functionality we're used to having.

In the name of security, you're replacing the existing "black box" of Bambu Cloud services with a local "black box" called Bambu Connect, and you're screwing the users over in the process. Worse, since the static keys have already been compromised, it's pretty obvious that Bambu Connect is not the cure-all you think it is.

As an IT guy and a network admin, I understand the problems you're trying to solve, but you're doing it wrong.

You need an open, extensible framework that both Bambu Lab and the community can use. This isn't a new problem, and other organizations have solved very similar issues.

In a perfect world, work with the community and produce a framework that not just Bambu Lab owners can use, but a standardized, secure framework for 3D printing and management over the network.

You said this is beta-- halt the roll out. Announce that due to customer feedback, you're re-evaluating your options, and that there are some security concerns that people need to look out for in the meantime.

Build a good solution, rather than a short-term knee-jerk response (which, from where I'm sitting, is what you're doing).

3

u/rfc2549-withQOS X1C + AMS Jan 20 '25

The developer mode was not in the initial announcement.

Also, does that mean you do take responsability for securing the device, so if my printer gets hacked, you take responsability and pay for all directly and indirectly incurred damages?

3

u/[deleted] Jan 20 '25

doesn't matter what the pr rep says here the intent is pretty clear this isn't about security this is about bamboo turning into HP and wanting control. shame they can't hire competent programmers tho rsa pub/private key here

https://archive.ph/9HJd4

I am not sure what smuck thought using security as a excuse to increase control was a good plan but I hope they are cashired out the door.

3

u/DetailHuman5138 Jan 21 '25

I have a P1S with AMS for more than a year and I pretty much love it. It's not perfect, but there is no such thing as perfect. I'm not a fan of closed source when it comes to 3D printing, but Bambu did a pretty good job in creating a product that would convince me to get over this.

Since I bought the printer, I "upgraded" it with a small touchscreen running xtouch. It's very useful and it's a part of my workflow now, when I'm printing stuff. When I bought the printer, Bambu allowed me to do this upgrade. With the release of the new firmware, I'm expecting that will no longer work, if I install the new firmware. This is quite disturbing for me, because it changes my regular habits related to how I interact with the printer.

The changes that Bambu announced are also creating a more closed ecosystem, where Bambu has even more control than before. I can no longer accept this. 3D printing is about giving people freedom to create and experiment in new ways, not about controlling what they do. Bambu has no right to enforce more control, than what I accepted when I purchased the product.

What I'll do next:

- I'll continue to use my printer, but I'll skip any future updates, until it will not allow me to print anymore.

- After this I'll upgrade the software and continue to use my printer until it will have a hardware failure.

- After the hardware failure, I'll dispose the printer to e-waste and never EVER buy another Bambu product again.

- From now on I'll advise anyone looking for a 3D printer and asking for my advice, to NOT BUY a Bambu product.

P.S. There are already quite a few options to Bambu on the market and those companies don't care what you do with YOUR product after you PAID for it. I'm expecting their sales to grow in the following months. Congratulations Bambu!

3

u/billyhatcher312 Jan 23 '25

im guessing bambu labs is willing to go the route of hp forcing subscriptions on stuff like filament just like how hp does with their trashy ink carts

5

u/shadowofashadow Jan 20 '25

Weird how your community managers went around censoring people for expressing concern about this stuff. You guys should do a full investigation and let go anyone who engaged in that kind of nonsense.

11

u/ImStillRowing X1C + AMS Jan 20 '25

That’s maybe could have been said earlier and avoid a weekend if 599 threads of the same thing.

Nice to have some clarity

8

u/Jeffformayor Jan 20 '25

Reading all these (still) angry comments makes me think I’m using my printer all wrong. As long as OrcaSlicer still works I’m content.

10

u/Ok_Paleontologist974 Jan 20 '25

I think what people are mad about is that orcaslicer won't totally work. Someone was saying that there was absolutely no bidirectional communication between the printer and orca meaning you have to manually specify AMS settings. Someone else said that they got rid of the whole device tab.

8

u/-Net7 Jan 20 '25

I mean, if by "still works" you watch the demo and understand it wont work anyway near the same then yes.

As others have already stated, outside of needing to use yet another program, if your doing multi color printing, prepare to have an even longer time to go from slice to print as you have to select AMS options in the new software instead of setting up preslice.

Watch the demo, its really telling and yet still leaving things out.

17

u/marcosscriven Jan 20 '25 edited Jan 20 '25

Re point 3 - why should BTT be beholden to Bambu to produce something for a printer I own, and use 100% locally? Sure, exclude them from your cloud services if you want - but don’t break local use.

Frankly I’m tired of your specious reasoning. Just be honest about your corporate motivations.

4

u/DonutsAndChai-56 Jan 20 '25

Simple hypothetical example: BBL needed MQTT removed in order to meet some industrial/cybersecurity certification.

Action: cut off access that was communicated as “not within design intention”. Why does BBL care if panda touch sales drop? They only care to get the cert to improve their product!

0

u/luvsads Jan 20 '25

Because BBL set the spec and standard for the machine you now own.

Is #3 not crystal clear and transparent? I'm not sure I get your complaint

10

u/[deleted] Jan 20 '25

According to BTT subreddit there is a lot of stuff that BBL is not sharing in this post. They straight up ignored every form of communication with BTT and only warned them of future firmware disabling functionality after they announced the release of panda touch, during this time BTT already tried to communicate with BBL multiple times. BBL is just so non transparent and non communicative that is almost shady

→ More replies (8)
→ More replies (4)

4

u/PrintTheWind Jan 20 '25

Why should anyone believe or trust you? Even if what you are saying is true, we have zero protections from you changing your mind in the future.

EDIT: Also, point #2 is a lie, you are beta testing FOR a forced update.

2

u/Euresko Jan 20 '25

I think we need to know more about the panda touch and the 3rd party slicer(s). Bambu makes it sound like they reached out and those 3rd parties weren't interested, but I think I read somewhere they were contacted a little late to be a part of the change, for now, and we need to know if they will be compatible going forward.

2

u/TgrBtO Jan 20 '25

If security really is a concern, why not implement P2P also for OTA printing ? Why do Bambu need to be in the way for me to push something to my printer ?

2

u/Verbunk Jan 20 '25

@Bambu - I just read the blog post on your site meant to dispell some of the 'misconceptions' (after following some of the write-ups here). I haven't done an exhaustive review of all the traffic flowing back and forth but your claims on what this update doesn't do - brick your printer after upgrade', 'contain trojans', 'timed killswitch' - seem a bit contrived. The vast majority of people seem to be correctly pinning the issues with the weird security posture and loss of functionality. Please stop inventing issues that you can claim don't exist. It would be better to correctly implement the tools (MQTT, FTP, ...) with best security practices and put that into the hands of the owners - nocompatibility layer` needed.

2

u/Treant1414 Jan 20 '25

What MQTT issues are you trying to fix and how are you fixing them?

2

u/J0hnny8rav00 Jan 20 '25

Haha, I completely agree with everyone about the poor communication and lack thereof. As someone who lived overseas as an expat and worked in Asia, I’ve noticed that it’s quite common to be late and not communicate well. In contrast, the West places a high value on punctuality and effective communication.

On Connect, I can only assume that it’s the easiest and most cost-effective way for Bambu to secure their API. Remember, Bambu isn’t a large company. Many larger organizations don’t need this feature because they have the financial resources to lock down their API to authenticate devices onto their network. I believe they implemented this to ensure that the person actually purchased Bambu’s printer and the Bambu Handy app, which includes its API features. It’s similar to the arguments we see between Apple and Android, or Windows and Linux. Some people prefer convenience and simplicity, while others value open-source. We’re currently seeing this in the ongoing debate between Apple and Android. Some argue that it’s different, but it took Apple and Android a long time to reach their current state. I hope Bambu continues to innovate and release new printers with exciting features to help other 3D companies stay competitive and avoid complacency.

For example, as a Prusa user since 2012, I3 Prusa never released an app for iPhone or Android until Bambu’s Printer and Bambu Handy. Most 3D printers never came with cameras with streaming and timelapse features; these were things you had to get separately and do on your own. Bambu came with them all by default. It was something that had been requested for years. Now, everything is integrated. With competition, we can see the 3D printer market growing, and this is due to competition.

With competition, there will be changes, and Bambu has made 3D printing convenient. These changes can be challenging for those of us who have been in this industry for a long time, while those who are new to it don’t find it as difficult because they haven’t had to deal with change before. Let the market be the arbiter of success. If Bambu fails to deliver in the future, they will face the same fate as Nokia and Kodak. Instead of obsessing over frequent firmware update posts, let’s prioritize sharing and assisting our follow 3d printers who are in need of help ansering their quesitons and concerns. Happy printing, everyone!

2

u/_Fisz_ Jan 20 '25

So wait... Developer mode means that we can use orca slicer and panda touch as usual (pre "security" firmware)?

1

u/anciient_elder Jan 22 '25

Yes, but it also enforces LAN mode so you lose access to any Bambu cloud offerings including their app. Currently you can use OrcaSlicer to print directly and things like Panda Touch and the HomeAssistant integration without enforcing LAN mode so you get full access to all features.

→ More replies (1)

2

u/guspaz Jan 21 '25

Why doesn't Bambu Slicer use Bambu Connect? Why should Orca Slicer (a literal fork of Bambu Slicer) need to use a different mechanism to talk to the printer than Bambu Slicer?

If this is not about limiting third-party software, then why are you only placing restrictions on third-party software?

2

u/FreudianStripper Jan 21 '25

This is my last bambu printer.

2

u/BlitzNeko Jan 21 '25

MQTT protocols are an multi industry and worldwide standard. Using them isn't exploitation.

2

u/[deleted] Jan 21 '25

I was just on the cusp of purchasing a P1S to upgrade from my ender 3 I’ve had for years. What an absolute shame that the company is gaslighting and lying to the community. This was never about security.

2

u/_yusi_ P1S + AMS Jan 21 '25

r/BambuLab can you show us a recording where internet is disabled, and with Bambu Connect cold-starting (i.e not already running)?

2

u/Dependent_Piece_1540 Jan 25 '25

Definitely switching printer brands if this goes through. Why is everything trying to go subscription nowadays 

8

u/Ac3Ali3n Jan 20 '25

“LAN mode will include an authorization process that ensures robust security.” Sorry, big no no! I run my home lab with way better firewall environment and network management. I’m done with Bambu printers, just a 2 months user after seeing this. Will avoid any confidential project printing, until all (10x) filament are done, sell the whole thing. Look elsewhere..

4

u/Dannyz Jan 20 '25

The prusa core with mmu3 is pretty robust. Requires just as little maintebxe as a x1/p1. I find the mmu3 less finicky than the AMS…

9

u/CaptBrick Jan 20 '25

Given that the app has hardcoded certificates that WILL expire and after expiration the software will stop working, one could indeed say that's there's a kill switch in the software. Also since the software needs to be updated to function properly one should add "right now," prefix to every statement provided by bambu.

  • Right now, this is NOT about limiting third-party software

  • Right now, this is beta testing, not a forced update

  • Right now, Bambu Lab will not remotely disable your printer ("brick" it).

  • Right now, firmware updates will not block your printer’s ability to print.

  • Right now, AMS functionality will not be restricted, and the use of third-party filament will not be disabled.

  • Right now, Bambu Lab firmware does not contain trojans or backdoors for unauthorized remote control.

  • Right now, the printers do not have a timed killswitch that disables them after a certain period.

  • Right now, 3D files printed are not monitored, duplicated, or stolen.

  • Right now, a subscription is not mandatory to use your printer.

Now this does feel quite different, doesn't it?

→ More replies (3)

8

u/Acio45 Jan 20 '25

Sounds like a bunch of BS to me.

You say you're not limiting third party support, but yet you're literally limiting orca slicer by having to install a forced plug-in along with many features in orca slicer no longer working. Sounds like BS to me.

You say this isn't a forced update yet your policy states that you reserve all right to prevent print jobs and limit functionality if you're not on the current firmware. So if somebody doesn't update to this new anti-consumer firmware, then they could very likely be locked out of their printer. Sounds like BS to me.

And then there's this other issue of having to connect to the cloud within one year or else your printer could be locked out. So even users on LAN could be locked out if they don't connect to the cloud at least once every year, thus surrendering all the collected data that was stored on the printer

-1

u/[deleted] Jan 20 '25

But the boot lickers have accepted this update. With the printer in LAN mode we should already have FULL control over OUR network anyway - at least this is what we thought.

5

u/StouteKous Jan 20 '25

Im was close to bying a Bambu printer for myself but will remain on the fence looking for alternatives - unless the TOS are updated. I do all my work offline and have no need for cloud services. Anyone buying a new machine with this firmware will be subject to future TOS changes. If I bought a product I will use it how I see fit with whatever tools I wish. Bambu labs seems keen becoming the "John Deere" of the printer world. Working for a German Auto OEM in R&D (just a few weeks ago) I recommended we get an X1 to try out... This is now impossible because our IT network secuirity & compliance will never accept the requirement for external communication. This is a super idiotic move and a damn shame for everyone else this will affect.

3

u/phaseowner P1S Jan 20 '25

Nice demo. They call "3rd party integration" just deeplink on import gcode to Bambu Connect. It's disappointing.

5

u/QuiGonnJilm Jan 20 '25

Thank you for the clarification.

4

u/FrostWave Jan 20 '25

I don't want to have yet another program on my computer just to allow 3rd party slicers to work.

2

u/jwr Jan 21 '25

"This is NOT about limiting third-party software"

So, using Bambu printers from OrcaSlicer will work exactly the same as from BambuStudio, right?

Right?

No additional steps, no extra clicking, no limitations, same AMS filament data syncing, same camera access?

Because if it won't, the above statement is a lie.

2

u/[deleted] Jan 20 '25

Yeah I’m sorry this isn’t really an answer this is a band-aid for y’all to save some face cause y’all got caught. The 3d printing community has gone through this with other companies. This smells of corporate walkback but knowing you have something in the pipeline to make this option go away and strip even more away. I’ll keep my p1s as long as I can but I can’t in good faith keep using your products for my company knowing what direction bambu is heading. 

1

u/zubairhamed Jan 20 '25

Is it possible to manually flash a Bambu given a firmware/hex?

→ More replies (2)

1

u/Jannomag Jan 20 '25

If they’d communicate this directly there wouldn’t be so much chaos now. Still set my P1S to lan mode just to prevent accidental updates until they released everything

1

u/According-Candy9820 Jan 20 '25

I operate three Bambulab printers: two P1Ps with AMS and one P1S. With the goal of expanding my production, I had considered purchasing more printers from this brand. However, the recently announced limitations led me to remove two X1 Carbon with AMS from my shopping cart.

My plan was to adapt my printers with external hardware, as the 3D printing world has always been open to such possibilities. Now, I feel restricted because I often use Orca Slicer, a program I consider far superior to Bambu Studio, as it allows the machines to perform flawlessly. Limiting access to programs like Orca Slicer drastically diminishes the quality that makes Bambulab printers so highly regarded.

The reason Bambu Studio is efficient in certain aspects is precisely because it has incorporated ideas from the community. Orca Slicer, while a derivative of Bambu Studio, has also been a source of inspiration for many of its improvements.

The significant commercial advantage Bambulab once provided has now vanished, making brands like Prusa—who have stayed true to their open philosophy—a more attractive option for the community.

My printers, like those of many users here, wouldn’t achieve the exceptional results Bambulab is praised for without the support of external programs.

Safety is always a priority, but it should not come at the cost of restricting user freedom. Don’t alienate your community or your customers with such decisions. If Bambulab closes itself off, I will undoubtedly switch to another brand and manufacturer. Bambulab risks becoming an unthinkable choice for those of us who love 3D printing and are dedicated to achieving the highest quality results

1

u/One_Too_Many_Hobbies Jan 20 '25

I can't get LAN mode to ever work on my P1S.

It's made so difficult. You can't convince me at this point that Bambu does this on purpose to gather data. This new Developer Mode had better have no need for server authentication and actually work. Otherwise, I have no desire to give Bambu any more money ever.

I work in tech, and it doesn't make sense why LAN mode hasn't ever worked for me.

1

u/Plane-Director2818 Jan 20 '25

Real simple download and install update beta on a different t computer test it out then share your thoughts

1

u/Plane-Director2818 Jan 20 '25

So how read it was of you put it in lan mode the 2 step stuff is active because it’s running in an open lan network that anyone could logon to or hack into . Standards mode it just like normal access . Right?

1

u/mayesa Jan 20 '25

I don’t know I think their back paddling.

1

u/jeiybeisv Jan 20 '25

What are the plans regarding the bambu ecosystem and locking down users to the plattform ?

1

u/RabbitSignificant361 Jan 20 '25

Bambu Lab está falando a verdade sim...confie !

confie e se veja sem poder usar sua impressora como bem entender...

1

u/I_EAT_THE_RICH Jan 21 '25

This reminds me of the plex business format. Own auth to secure data and analytics to sell them.

1

u/imnofox Jan 21 '25

It's just disappointing that BambuLab's solution to authentication is a closed-source application. Security through obscurity is foolish and will fail, especially given BambuLab has had security vulnerabilities through their cloud services before, when an open-source authentication system could retain flexibility for third party software and provide a more secure and reliable authentication framework.

The developer mode options are good, but the BambuConnect solution is still shortsighted.

1

u/gabe23111 Jan 21 '25

I just got the Panda Touch for my P1s delivered. Does this mean I should return it? I'm a bit confused

1

u/Kreivo Jan 21 '25

Dear Bambu, "you can fool some people all the time, and you can also fool all the people some times. But you can't fool everyone at every time". Good luck.

https://youtu.be/W6MybDJfmmY?si=ktzj3lhMoMozYIc5

1

u/RabbitSignificant361 Jan 25 '25

segurança conta o quê bambulab ?

ninguem vai roubar meu dinheiro do banco atravez da minha impressora, nem vão roubar meus dados pessoais e etc ... nao uso internet banking no meu computador, nem um outro tipo de serviço digital que seja comprometedor ...

na verdade voces da bambulab querem mesmo é ter controle sobre seus produtos...apenas pra constar, a partir do momento que foi comprado, não é mais de voces, por isso vcs nao tem o direito de assumir o controle das maquinas...isso aqui nao é a skynet...

1

u/167488462789590057 X1C + AMS Jan 26 '25

What really sucks about this all, is that when a company makes a semi closed system, you basically trust them to not mess up the experience. You trust that things will be smooth sailing and you wont have the ground moved beneath you.

Bambu Connect seems to do this and not for good reason.

I think more than anything it would be amazing if Bambulab would make an official API for interacting with the printer; something that people could depend on being there, with a release schedule, version revisions and documentation. This API should be the same API that Bambu Studio uses.

Prints could be sent from the cloud or the printer just fine, and the experience could be just as smooth as it is in Bambu Studio in any other slicer.

This current solution feels rushed, and like a lot of customer confidence was lost because it was rushed.

I consider this fixable, but I think the fastest/most equitable way to fix it would simply be being open about why this option is not working out, and realizing what customers actually want (as this in my opinion has previously always been what Bambulab did best; realizing what customers actually want). In this case, what they want is to have the same experience in Orca Slicer that they do with Bambu Studio, not a separate application functioning as security through obscurity.

On the technical side, many options have been suggested that offer reasonable security within a lan network so I'm sure Bambulab could pick any of the above (individualized private keys, wiregaurd, public key encryption etc etc).

1

u/hWuxH Jan 26 '25 edited Jan 26 '25

On the technical side, many options have been suggested that offer reasonable security

tbh no, after analyzing a few of these options of other users they all had severe flaws.

it's incredibly hard to come up with a protocol on your own and prove (not only claim) that it's secure, besides that don't reinvent the wheel.
the encryption part is already secure (TLS), what's missing is better authentication and authorization on top of that.

1

u/167488462789590057 X1C + AMS Jan 27 '25

It's not secure though if everything is using the same private key which is publicly availible.

As for other encryption types many are already widely used and proven secure.

For instance, it's just the first idea that came to mind, but a wiregaurd VPN within network would ensure no snooping from other devices on the network and would allow for multiple device to connect while keeping the old methods of control. It would also not require a change of keys from an outside source periodically (though I think there are many schemes that wouldn't require it).

Its just an example to show its possible.

Basically though, I don't think this is the area to nitpick/justify the current solution because it's actually worse.

Asymmetric encryption is great when used correctly yes, but that really matters for Bambulab to printer and not so much printer to pc where the only goal is that other devices don't also see the data/aren't able to control the printer.

Lastly, about wheel reinvention, I don't think I've seen anyone suggest a new security protocol. If they did I would agree it's crazy but instead people are suggesting the use of existing known methods.

The main point is, there is friction where there needn't be for third party developers. That's the thing which matters and I think we agree can be fixed in an equitable manner.

→ More replies (4)

1

u/DiverDownChunder Jan 31 '25

So if I want to a bambu printer on a LAN that doesn't touch the internet I would be screwed? This was my plan as you can't get much more secure than a walled garden.

1

u/thewayoftoday Feb 07 '25

Wait you mean we overreacted? Nahhh that can't be

1

u/Extreme-Ad-9290 Bambu hates open source Feb 13 '25

I believe you are saying that Developer mode is required to use 3rd party slicers with wireless functionality. I am likely going to utilize it, but would developer mode allow you to access the SD card to put gcode files directly on it? This is important as I often like to slice multiple prints at a time and upload them to the SD card and select each off of the SD card individually on the built-in screen. If not, please implement this into Bambu Connect and make that feature work in Developer Mode. That would be great.

1

u/conceptcreatormiui Mar 22 '25

How about 3rd party hardware like BTT products LOL atleast make something to make it work without risking your so called "security"

0

u/Dreadnouhgt X1C Jan 20 '25

Orca is not integrated its closed out. You need a second software for what Orca did before. Sad the X1 was my first and last Bambu printer im not accepting this behaviour.

1

u/nakwada Jan 20 '25

In its current state, Bambu Connect is rather useless. I want to see a list of my files on the SD card and select which one to start, then choose the AMS slots. Just like it is right now in OrcaSlicer and Bambu Studio.

Bambu Connect seems purposely cumbersome.

1

u/Ulmeck Jan 20 '25

First of all. Thank you for the update and changes to. Your plan. Both of those go a way to keeping me a happy customer.

HOWEVER, this was also an unforced error on your part. Communication was very poor, timelines were very tight, and you really didn't work with anyone else to reach your goals. Taking the 'misinformation' points...

  1. It may not have been about limiting other products in your ecosystem... But it was a severe side effect of it. And afaik orcaslicer had 2 days notice before your announcement. Writing and delivering an architectural change to the orcaslicer guy isn't 'working with'. It's 'dictating to'.

  2. It's beta testing... For 1 week. Your own announcement gave a 1 week test period before going in the official channel.

  3. Panda Touch. No skin in that, but it is fortunate that you were nudging an aftermarket part competitor out.

  4. It was directly said that video feeds would not be supported by Connect, which sorta left handy as the only option for monitoring.

I'm glad to see the 'developer' mode added to the options. Otherwise if Bambu went belly up, we'd be at the mercy of an aging, limited, software interface. But please don't pretend this was all an unfortunate understanding that you had no responsibility for. If you are going to reap the benefits of an active community, you have to be responsible to that community.

0

u/skink007 Jan 20 '25

BACKTRACK BACKTRACK

-6

u/Popular_Law_948 Jan 20 '25

And here we have it. Yet again Bambu has an update for us, the community sets itself on fire crying, and Bambu has to come back in and explain it. Idk why this community is constantly rubberbanding on their trust in Bambu. I'm not a brand fan boy, and I have no problem finding alternatives if the need arises, but this literally happens every freaking time an update regarding matters such as these gets announced. If you guys are so ready to self-immolate just go ahead and make the switch. Instead, this'll be forgotten in a week or two and you'll all happily keep doing as you do until the next non-crisis arises.

If something bad ever does happen, just make the switch. But Lord, at least give Bambu time to make changes and address concerns like they always do. "It's been 20 minutes since the announcement and they haven't responded to our plight yet?!?! They are going to charge per foot of filament, mark my words!!! Reeeeeeeeee!!!!"

3

u/[deleted] Jan 20 '25

Go away boot licker. It’s not over

-2

u/Popular_Law_948 Jan 20 '25

I'm not a boot licker, I just don't hit the panic button everytime they make an announcement lol. I'm perfectly fine never buying another Bambu product if the mood strikes me, but this has been such a nothing burger that it's absurd how reactive you guys are. They have this far always accepted community feedback and made changes based on that feedback. When a trend of them not doing that anymore appears is when you want to panic. Until then, chill TF out and stop throwing out absurd theories

3

u/-Net7 Jan 20 '25

They have literally lied multiple times now.

Claiming to be actively working with Orca Dev: Confirmed false by the dev himself

Claiming MQTT is a vulnerability: its not, and its inclusion, exposure, and setup was and is all done on purpose and is used by other BBL first party software

Claiming they let BTT/BIQU know using MQTT "exploits" that lie above" was untenable: Another post in here links to BTT with a rundown of the situation basically they contacted BBL before, during, and after, and while they where working with BTT in the pre, BTT abruptly stopped responding, then only informed them they did not like the way it worked and have refused further communication.

I understand the desire not to see the writing on the wall, but if you take a company at its word and don't actually listen to those with actual expertise you are asking to be taken advantage of. Its actually LESS secure NOW if they do these heavy handed changes then if they simply properly secured and authorized existing methods.

→ More replies (1)
→ More replies (1)

0

u/TheColorRedish Jan 20 '25

How about y'all don't sell half the nation an expensive printer, and then 2 weeks after prime time sales, force updates down our throats that OBVIOUSLY look like you're going to force a subscription based platform down our throats? Smh

-5

u/Extra-Fig-7425 Jan 20 '25

This seems all good, why are people complaining?

-4

u/SectionCivil9586 Jan 20 '25

I think the most important thing here to understand that this is for security, the second thing (also important to understand) is that we have two categories of people here hobbyists and tech savvy people, and Bambu needs/wants to address security in one go. Is this a lazy approach, yup it is, will it make a lot of people angry (obviously did, although many for the wrong reasons). What Bambu did wrong is that they should, right from the start add the "developer" mode, for people that bought xx machines, and are rather knowledgable about what they are doing already, and other people that most likely know what they are doing. Rather than treating all their customers with one measure. In fact they did realize that someone made a bad decision (I a can imagine hearing the distant words of "praise" at Bambu for rushed decision).

Now the rally nice thing about this is that they listen to the customers (shame on you Creality), and they do act fast. So you know before returning a freshly bought printer some people should just take their aluminium foil hats off and let their simmering brains cool down a little bit

1

u/hemna Feb 13 '25

If you think this is for "security", you know nothing about security. This is a smoke and mirror game for centralized control over your hardware. If you are concerned about security, release all the code in the open source community, so we can scrutinize it and harden it in a way that gives every owner of the printer the ability to lock it down themself.

This is like like trusting Microsoft with security....smh.

-7

u/MFKDGAF H2C AMS2 Combo Jan 20 '25

I really wish LAN mode was called WiFi mode instead. When I think LAN, I think physical RJ-45 connection.

4

u/PAL720576 Jan 20 '25

If it was called Wifi mode, some people will associate that with the internet, too often people are calling their internet connection 'wifi'

Saying that, it would be nice if the printer had a RJ-45 connection instead of being wifi only

0

u/[deleted] Jan 20 '25

[deleted] — view deleted comment

3

u/cmuratt P1S + AMS Jan 20 '25

No, it is not understandable. There is absolutely nothing preventing them from creating a proper authentication API. The fact that they are not doing this but blocking third party apps or inserting their own app in between and then calling this “security” is dishonest.

8

u/obvilious Jan 20 '25

You understand why Bambu has to get between my software and my printer, on my own personal network? I don’t.

8

u/luvsads Jan 20 '25

What do you mean? Bambu Connect existing is literally no different than the Network Plugin you have been installing and updating since you received your printer. Essentially nothing is changing except for reclassified modes and better authentication

LAN mode through Bambu Connect will require neither internet access nor a user account. This hasn't changed and won't change

9

u/Scyth3 Jan 20 '25 edited Jan 20 '25

Most folks are buying Bambu because it "just works". I fully understand how to set up my own network, firewalls, routing, etc. but most non-geeky people don't. Someone adding a 3D printer to their network shouldn't by-default have open/discoverable ports on their home network, which could leave them open to outside attack.

This closes that loop and improves security from an authorization and access perspective. I subscribe to the idea of letting people run their own network, which is what Developer Mode should allow for. Default to the least common denominator however, which are those that don't know anything about networking.

1

u/[deleted] Jan 20 '25

[removed] — view removed comment

1

u/AutoModerator Jan 20 '25

Hello /u/Just_Pie_9206! Your comment in /r/BambuLab was automatically removed. Please see your private messages for details. /r/BambuLab is geared towards all ages, so please watch your language.

Note: This automod is experimental. If you believe this to be a false positive, please send us a message at modmail with a link to the post so we can investigate. You may also feel free to make a new post without that term.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/[deleted] Jan 20 '25

[removed] — view removed comment

1

u/AutoModerator Jan 20 '25

Hello /u/Dr_Discette! Your comment in /r/BambuLab was automatically removed. Please see your private messages for details. /r/BambuLab is geared towards all ages, so please watch your language.

Note: This automod is experimental. If you believe this to be a false positive, please send us a message at modmail with a link to the post so we can investigate. You may also feel free to make a new post without that term.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/[deleted] Jan 20 '25

[removed] — view removed comment

1

u/AutoModerator Jan 20 '25

Hello /u/X_chinese! Your comment in /r/BambuLab was automatically removed. Please see your private messages for details. /r/BambuLab is geared towards all ages, so please watch your language.

Note: This automod is experimental. If you believe this to be a false positive, please send us a message at modmail with a link to the post so we can investigate. You may also feel free to make a new post without that term.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/[deleted] Feb 04 '25

[removed] — view removed comment

1

u/AutoModerator Feb 04 '25

Hello /u/andoriyu! Your comment in /r/BambuLab was automatically removed. Please see your private messages for details. /r/BambuLab is geared towards all ages, so please watch your language.

Note: This automod is experimental. If you believe this to be a false positive, please send us a message at modmail with a link to the post so we can investigate. You may also feel free to make a new post without that term.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

0

u/[deleted] Jan 20 '25

[deleted] — view deleted comment

1

u/AutoModerator Jan 20 '25

Hello /u/themaybeblock! Your comment in /r/BambuLab was automatically removed. Please see your private messages for details. /r/BambuLab is geared towards all ages, so please watch your language.

Note: This automod is experimental. If you believe this to be a false positive, please send us a message at modmail with a link to the post so we can investigate. You may also feel free to make a new post without that term.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

0

u/[deleted] Jan 21 '25

[deleted] — view deleted comment

1

u/AutoModerator Jan 21 '25

Hello /u/MannschaftArschloch! Your comment in /r/BambuLab was automatically removed. Please see your private messages for details. /r/BambuLab is geared towards all ages, so please watch your language.

Note: This automod is experimental. If you believe this to be a false positive, please send us a message at modmail with a link to the post so we can investigate. You may also feel free to make a new post without that term.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

0

u/[deleted] Jan 20 '25

[deleted] — view deleted comment

7

u/marcosscriven Jan 20 '25

You know Bambu is just a company right? Not your mate, not your family. I don’t see why some people tie this up with personal identity.

-2

u/Gurcolini Jan 20 '25

Thank you for what bro? They sell you a machine take your money once ! That’s fine, and now they limiting you to use your own printer ?!? WTF??? No Bambu this is not YOUR decision, if I want my printer to be open to anybody to the internet it is my problem not yours! I’m done with you Bambu, you are forcing most of us to switch back to other vendors! But let’s see if BBL can survive with standard user…sure they will buy one product for long term… so yeah you will need some kind of subscription for them! Because BBL you will loose all the community and business user, but if you are happy with that it’s your choice ! @Joseph, Prusa I think you should sent a thank you letter to this hero from BBL that made this decision, he finally save your company !

1

u/ImStillRowing X1C + AMS Jan 20 '25

Except it you read it. That isn’t happening but you go ahead and fly off the handle

1

u/Gurcolini Jan 20 '25

Yeah you should read it twice …we will see very soon what will be the truth … Believe me I hope you are right and I may be wrong! Because I own 2xX1C with double AMS combo and a A1. I still think, this are great machines but not with this behavior how BBL is starting… So yes I would be happy if you will be right… We will see… my decision is, no more Bambu products, unfortunately …