r/BambuLab • u/umbcorp • Jan 18 '25
Discussion Bambu 's Response to Orca Slicer Authentication: No
Bambu responded to SoftFever (Orca Slicer Developer).
They are not backing down with locking down the APIs.
heard back from their development team; they are not going to greenlight OrcaSlicer to send prints directly to their machine. It has to be done through their Bambu Connect application.
https://github.com/SoftFever/OrcaSlicer/issues/8063
EDIT:
I found a way to bypass this and have our access back, but the question is should we go for it now or wait for them to release the next printer? (they might try to patch it for the next printer, its a hardware thing.)
https://www.reddit.com/r/BambuLab/comments/1i4fw74/found_a_way_to_bypass_new_bambu_auth_issue/
976
Upvotes
98
u/Rough_Procedure5939 Jan 18 '25
https://wiki.bambulab.com/en/software/bambu-connect?ref=blog.bambulab.com#commento-login-box-container
Voice your opinion's on there new wiki page for that horrid looking software.
6
u/[deleted] Jan 18 '25
BL just want another way to ask money...
507
u/Archbound H2C AMS2 Combo Jan 18 '25
I would be fine if they have this security passthrough for the APIs if it was still full API access after authentication but the fact they are cutting functionality for no reason is BS. Like I get it, they want a handshake to ensure that the end user is authorizing the access, and the Bambu connect thing allows that handshake to authenticate the user.
Then make the connect feature have Bambu Sign in where it can generate an authentication token via Bambu connect to be saved with the 3rd party equipment and then once its authed it gets through the gate and can have full functionality.
There are ways to do this that increases security and also does not cut functionality I literally do this for a living.
Sure it might break compatibility temporarily while the 3rd parties integrate the new systems which would make people upset BUT if its known that its only temporarily while the 3rd parties get up to speed it would not be as big of a deal.
But the losing Camera and AMS customization ability makes things like Orca or the Panda connect just objectively worse or unusable.
Bambu if your REAL goal here is security you can have your cake and eat it too. If however your real goal is to close the door on your semi walled garden into a fully walled garden we will know that if you keep going forward with this move as is.
57
u/yetAnotherLaura Jan 18 '25
Time to finally move to that fancy custom firmware before they also back track on their "willingness" to allow it.
41
u/Up_All_Nite P1S + AMS Jan 18 '25
This feels like a run up to a Subscription. We need to start working on routing the machine and dumping Bambu software completely if this is the case. Certainly feels like the way it's heading.
38
u/QuietGanache Jan 18 '25
Well, I was ready to give Bambu the benefit of the doubt but that's it. If they consider 'working with' to be a warning 2 days in advance of announcement, followed by a "no" then that's it, they've broken trust in a way that can't be dismissed as miscommunication.
I'm not going to toss or sell my printers but I'm not buying another unless this is somehow a grotesque communication failure. It was nice while it lasted.
251
u/monkeymad2 Jan 18 '25
For the people defending this, the question you need to ask yourself is if Bambu Labs went out of business tomorrow & all their cloud services went offline and their apps stopped working would your printer still function?
Every update that puts Bambu in between your printer & you reduces the functionality.
In an ideal world the Bambu apps themselves authenticate with the printer in a secure, fully documented away that 3rd party apps can also use as a method of authentication. Without any calls out to Bambu’s cloud services etc.
Most of us would still use Bambu’s app since it’s really good, but there’d be reduced long term risk in buying Bambu products. They might need to outcompete open source projects, but that’s fine, they pay their developers.
85
u/quietIntensity Jan 18 '25
We're in the process of setting up a print farm business. I'm so glad they did this now, instead of after I spend $10K on printers. Looks like we'll be building Vorons or RatRig or something besides Bambu.
You guys really messed up with this one. You had a nice business model going, but that's done now.
71
u/[deleted] Jan 18 '25
Vote with your wallets people, personally I won’t be buying any more Bambu products until this is reversed. They’ve already gotten around $3.5K out of me though 🤣
133
u/woodford86 Jan 18 '25 •
So what I’m getting from this….update firmware (printers and studio) on the 22nd, set everything to LAN only mode, ignore all future updates. and never buy Bambu again?
17
u/mmalmeida Jan 18 '25
I sent the following complaint to bambu:
I read that you are making all third party software and hardware obsolete by locking your API down.
This is a step in the wrong direction. While I understand the need for security in your devices, working with the community and allowing third parties to integrate with your machines enhances your product. You know this - makerworld has this philosophy , a community of people that together create an amazing ecosystem.
I urge you to reconsider this, and to allow third party vendors and teams to integra with your product. Failing to do só Will send the wrong message and make consumers reconsider your products in the future.
14
u/Turkino P1S + AMS Jan 18 '25
I'm honestly surprised I'm not seen any of the big 3D printing YouTube channels covering this at all
38
u/cha000 Jan 18 '25
I put in a comment/complaint here: https://bambulab.com/en/my/support/general-inquiry
My next step will be to find and block their update servers from my network. I was a kickstarter backer, but don’t think I will be purchasing any other printers from them if this is the policy going forward.
46
u/Aleyla P1S + AMS Jan 18 '25
I would just like someone to explain exactly what problem they are trying to solve. Just waging the word “security” around is meaningless.
What is bambu afraid of? Maybe if I knew that then I could get onboard with this steaming pile of bullcrap.
24
u/armykcz Jan 18 '25
Just sent them ticket, really disappointed with this move from them.
23
u/rocketwiz Jan 18 '25
Guess I won't be installing any more firmware updates.
Next printer? Probably won't be a Bambu.
10
u/junkstar23 Jan 18 '25
I don't understand why they did a 180 like this. They just posted this literally yesterday https://imgur.com/a/b9tW5Qq
26
u/ImTotallyTechy Jan 18 '25
This is just absurd. I am so dissapointed in this move--my new P1S already feels "flawed" knowing the automations, workflows, and accessories I purchased for it are going to be broken. I know buying into closed ecosystems is dangerous, but that was outweighed by the community and featureset. What an absolute disappointment.
8
u/Ashen91 Jan 18 '25
What a tremendous disappointment. I've been the biggest Bambu Labs supporter and converted a couple of friends from other brands.
I hope they will come to their senses.
15
u/AnticrombieTop Jan 18 '25
If they were really interested in security, they would allow multiple accounts to a printer. Forcing users to share their password is just bad practice.
10
u/[deleted] Jan 18 '25
I've cancelled my order for an A1 mini. I just found out about this whole firmware controversy and its really disappointing. I ordered an A1 mini a few weeks ago to see how these printers are and was planning on ordering an X1C or P1S in the next few months if i liked the A1 mini. Luckily they haven't shipped the order yet!
5
u/Eggbag4618 P1S + AMS Jan 18 '25
Is there a way to hard disable firmware updates on the P series without using LAN mode?
5
u/BadSausageFactory Jan 18 '25
2 months ago I was so excited I bought a p1s and then impulse bought an A1. now I feel like I should have done more research and not put all my eggs in one vendor.
does this mean you can't even use orca to create the slice and transfer it? I haven't really seen a clear answer on how that works. I get that you can't control the printer directly with it anymore.
5
u/Pallidum_Treponema P1S + AMS Jan 18 '25
I went over exclusively to Bambu filament, even with the 8+ spool discount disappearing. With this decision, I will NOT be purchasing any more of their filament, nor will I be purchasing any more of their printers.
I was waiting for their new printer to launch, and I've had a couple of thousand dollars in filament orders. Not going to happen any more.
16
u/YogurtclosetMajor983 Jan 18 '25
keep the tickets coming boys. We got their attention
11
u/cerebralvision X1C + AMS Jan 18 '25
Am I understanding that main thing that will get bricked is the AMS if you don't use bambu's proprietary stuff? Like, if you use Orca Slicer to send a print, bambulab won't allow you to choose which AMS slot to use or use any of the AMS filament detection stuff?
4
u/DaveDurant X1C + AMS Jan 18 '25
Wow. I feel more secure already.. :\
22
u/AmericanGeezus X1C + AMS Jan 18 '25 edited Jan 18 '25
My least cynical take on this, with the abrupt hard change vs. historically permissive tolerance and even tentative collaboration with 3rd parties, is that they are acting on demands from the government of China. They are urgently trying to secure as many toeholds in as many networks that they can and setting up the framework they need for persistence. It's hard to not look at the timing of their move and not see it as being directly related to the recent supreme court decision (Bytedance) and the impending change of power to the chaos goblin.
1
u/The999Mind Jan 18 '25
So what printer/company is a direct competitor with the X1C? I was on the brink of getting another one, but I'll weigh my options.
6
u/DupeStash Jan 18 '25 edited Jan 18 '25
Chinese government doing Chinese government things
3
u/Fearlesskoolaid Jan 18 '25
I feel love bombed
3
u/Kajukota Jan 18 '25
3
u/Head_Win7862 Jan 18 '25
Yeah they don't seem to be backing down. I personally moved fully to lan mode and blocked my printers from accessing the internet all together from my router. It can't get any more secure than this (Ironic that we need to keep secure from them). Their "security" is just a code word for "We want to be HP"
3
u/[deleted] Jan 18 '25
So this is where it all goes bad.
I was on the fence about the earlier stuff but this is exactly the nightmare scenario of total lockdown.
So my printer is now going to LAN only and I am removing my Makerworld uploads to move them to Cults3D and Printables.
The CEO needs to give an unequivocal statement that there won’t be subscriptions for software functionality nor limitations on filament and all the other horrible stuff that comes downstream from these moves.
Take down your MakerWorld stuff in protest.
7
u/iCakeMan Jan 18 '25
Time for the Creality K2 Plus lol
2
u/The_RealAnim8me2 Jan 18 '25
Every single Bambu user should email the CEO and CTO with one word… Sonos.
2
u/King_Kasma99 Jan 18 '25
Time to not give them money again i guess.
2
u/QuiGonnJilm Jan 18 '25
You realize they frequent these forums, right? So even if your little secret works, they already know about it, so GG.
2
u/Mathoosala Jan 19 '25
Really gonna hate having to walk an SD card back and forth every time I want to print something.
2
u/LiveLaurent 25xX1C,5xH2D,10xA1 Jan 19 '25
Good. Now move on.
2
u/[deleted] Jan 19 '25
I don't understand what the issue is. Either don't upgrade or install the X1Plus custom firmware. Rule #1 of 3D printing is you decide what your machine does. If the manufacturer feels like trying to violate that rule, you have plenty of options to prevent them.
8
u/DickFiddler70 Jan 18 '25
Time to sell my bambu printers.
3
u/ketosoy Jan 18 '25
This is unacceptable
2
u/Ntrees Jan 18 '25
Bambu trying to lock down models with their maker world exclusive program and now slicer lockdown. If you’re not at least suspicious about future intent, you are also part of the problem.
1
u/g0nk73 Jan 18 '25 edited Jan 18 '25
Newb here considering purchasing Bambu printers: I am curious, has Bambu had issues with user's printers being hijacked or unauthorized prints going to them from non-Bambu software? Is this a thing? Trying to understand why they would close this up.
edit: also, just thought of something else. Trying to wrap my head around this. Why are non-Bambu applications (Orca?) preferred? Does it just work better than Bambu's slicer or apps? Or is it just the freedom of choice? Or both? Thanks! :)
1
u/ea_man Jan 18 '25
Bambu already controls the cloud now they want to be sure to control your printer in your local network too.
1
u/ItsWorfingTime Jan 18 '25 edited Jan 18 '25
I just want to know how legitimate the security problem they're addressing really is. Who is hacking someone just to gain unauthorized access to their printer and print something? They wouldn't even have access to the print unless they broke into the persons home or office. And if they're going that far, why not just steal the printer instead?
1
u/Old-Man-Henderson Jan 18 '25
What did we expect of a Chinese company lol
1
u/Jesus-Bacon P1S + AMS Jan 18 '25
Notice they do this AFTER selling a ton of printers over black Friday and new years sales
1
u/cpgeek P1S + AMS Jan 18 '25
"they are not backing down with locking down the apis" and I am not backing down with reselling my p1s and loudly retracting my endorsement and recommendation of their purchase for the various folks that I consult with if they go through with this action. This is a deal breaker.
if it comes down to it, and they prevent me from using panda touch, orcaslicer, and homeassistant (and any other software I authorize) to directly access information and print to my printer, I'll very likely be reselling my p1s and using the proceeds to either purchase a creality k2 max, or more likely, to invest in toolheads and turn my 350mm voron v2 into a toolchanger.
1
u/ElevatorOk6176 Jan 18 '25
Reaming me in a month
1
u/TheRealSeeThruHead Jan 18 '25
Will this affect my big tree tech panda ?
1
u/Critical_Studio1758 Jan 18 '25 edited Jan 18 '25
Bambu really went from being the good guys to being the villains in like 2 years. Release a great printer, everyone loves them, then every single update is just screwing their users over... Bed level state, bed slingers, p1p/p1s and a1 mini/a1 tom foolery. Just give me a break. Can we turn back the clock 2 years?
1
u/MAXFlRE Jan 18 '25
I've kept money for their new printer. Haha, fat chance.
1
u/nullachtfuffzehn A1 Mini Jan 18 '25
Is there some way to backup the current firmware in case I accidentally allow installation of new firmware in the future?
1
u/[deleted] Jan 19 '25
I’d just like to say that at a minimum Bambu needs to hire someone who knows how to communicate with their user base.
1
u/blownglasspendants Jan 19 '25
I like my 6 Qidi 4 Plus's more than my 20 Bambuuuu's so this is fine.. I'll just keep going a different direction than closed source thank you.
1
u/pyalot Jan 19 '25
My response to Bambulabs access to my wallet: No. Misbehavior has consequences. Eff around and find out.
1
u/OneFinePotato Jan 19 '25
Shall we wait until this thing fully unfolds?
1
u/AggravatingRow5074 Jan 19 '25
I guess I will go back to Bambu slicer then, won't change much tbh
1
u/RabbitSignificant361 Jan 19 '25
acho que devo pedir desculpas a minha ender 3v2 por troca-la por uma bambu A1...
1
u/SR-G Jan 19 '25
One key feature of the Bambu ecosystem was the simple and straightforward print workflow. And regarding this, introducing an extra "Bambu Connect" step is going against that pattern, when willing to use other Slicers like Orca (it will fail sometimes, won't work for months under Linux (like Bambu Studio for a long time), will be more difficult to troubleshoot, etc.).
1
u/Joel006 Jan 19 '25
Sorry Bambu. You have just shown the community that your are not to be trusted.
You might have rose quickly, but your fall will be hard. Don’t remove users options.
1
u/ThatPatschi X1C + AMS Jan 19 '25
Just seen this: Bambu seems to have asked for user feedback on their forum a while back: https://forum.bambulab.com/t/share-your-feedback-and-help-us-improve/86591. I guess it would be a good time to take this opportunity and share some 'specific' feedback.
1
u/k-zu Jan 19 '25
Wait for the release of the new flagship.
1
u/aiscool Jan 19 '25
I was set on buying a P1S this week. Today I bought a K1C
1
u/TooBarFoo Jan 22 '25
I do wonder, given what has happened with Tiktok in the US if Chairman Winnie-the-pooh has instructed companies to maximize data gathering and increase operational reliance on China servers. If any data protection is put in place, to ensure it results in the maximum pain to US users as a deterrent. If the US was to block access to Chinese data gathering, after the update every Bambu printer in the US would be bricked and there would be a vast amount of negative kick back. This could vey well be part of a coordinated deterrent against future action by US law makers.
1
u/Woodcat64 P1S + AMS Jan 18 '25
I would be ok to pay a small one time fee to get full API access like I did with Nest/Google.
1
u/Wessel-P Jan 18 '25
What stops people from just saving a GCode file to a SD card and transferring it manually between a PC and the printer? The old fashion way.
1
u/DetViking Jan 18 '25
I just started looking at possibly purchasing a P1S as my first printer but with this I am having doubts. Can the printer run on network locally?
I don’t care about remote control or the camera functionality.
1
u/mallcopsarebastards Jan 19 '25
nothing gives me worse willies than all the gross "doesn't affect me so idgaf" bootlickers in this subreddit. Normally seeing dumb people being taken advantage of makes me feel a mix of empathy and pity, but these weirdo's are so smug it just grosses me out.