News Bambu Lab Security Update will remove OrcaSlicer’s Access

[Admin]

The new Bambu Lab Security update will require users to install the “Bambu Connect” network plugin in order to use 3rd party slicers and accessories.

Bambu Lab Security Update will remove OrcaSlicer’s Access : Read more

 

[USAFRet]

"will remove" is very different than "install this plug-in to continue"

Security updates happen. With everything.

 

[SparklyIO]

Balance between security and freedom is an interesting way to sell it... this smacks of "justification". At least bamboo gave a heads up, unlike Chamberlain last year. Though, avoiding updates isnt exactly a long term strategy. I love controlling my Neptune 4 via Home Assistant, integrating control with smart plugs and other sensors. Is there an open source Bamboo firmware, similar to OpenNeptune?

 

[USAFRet]

Balance between security and freedom is an interesting way to sell it... this smacks of "justification". At least bamboo gave a heads up, unlike Chamberlain last year. Though, avoiding updates isnt exactly a long term strategy. I love controlling my Neptune 4 via Home Assistant, integrating control with smart plugs and other sensors. Is there an open source Bamboo firmware, similar to OpenNeptune?

If they had discovered vulnerabilities with 3rd party software and did NOT do anything about it, there would be an outcry.

 

[palladin9479]

Yeah this is just rent seeking. The giveaway is the LAN blocking.

 

[toffty]

Another manufacturer stealing the freedom of users

View: https://www.youtube.com/watch?v=aIyaDD8onIE

 

[USAFRet]

Another manufacturer stealing the freedom of users

Please describe, in your own words, how this is 'stealing the freedom of users'.

 

[toffty]

Please describe, in your own words, how this is 'stealing the freedom of users'.

The video does it better but in short, this update prevents users from using 3rd part applications on or to use their printers and requires a connection to the bambu servers for every print. We (should) all know how bad that is.

 

[USAFRet]

The video does it better but in short, this update prevents users from using 3rd part applications on or to use their printers and requires a connection to the bambu servers for every print. We (should) all know how bad that is.

prevents, unless they update to the newer firmware.
v1.08.xxxx

And printing via LAN or microSD is always available.

 

[toffty]

Bambu is also not working closely with developers and are flatly refusing to help them by giving them access
https://github.com/SoftFever/OrcaSlicer/issues/8063#issuecomment-2599741800

Looks like the VCs are wanting their money and subscriptions are soon to come. So glad I did not buy one of Bambi's printers. Another company bites the dust.

People need to be aware of this as they are buying / not updating formware

 

[USAFRet]

Not a perfect solution, but Bambu Connect:
https://wiki.bambulab.com/en/software/bambu-connect

 

[SparklyIO]

this smacks of "justification"

Didn't realize the word here was substituted. I tried to say... Platform Decline or crapification. The term Cory Doctorow coined to indicate *decline in quality over time. Initially, vendors create high-quality offerings to attract users, then they degrade those offerings to better serve business customers*

 

[palladin9479]

Please describe, in your own words, how this is 'stealing the freedom of users'.

Generally speaking they are pulling an HP and attempting to block third party accessories. All communication with their device must go through their application, they do not allow third parties access to that application and that application must communicate with mother ship to authorize the communication. Prior to this firmware update third party accessories could speak directly to their device over the local network, provided you configured authentication.

 

[toffty]

Not a perfect solution, but Bambu Connect:
https://wiki.bambulab.com/en/software/bambu-connect

This is the nefarious cloud-based solution bambu is rolling out and locking the printers behind

 

[WonkoTheSaneUK]

Already "jailbroken"

Bambu Connect’s Authentication X.509 Certificate And Private Key Extracted

Hot on the heels of Bambu Lab’s announcement that it would be locking down all network access to its X1-series 3D printers with new firmware, the X.509 certificate and private key from the Ba…

hackaday.com

 

[edzieba]

The current state of play (which will continue if you do not update the printer firmware):
- Install Orca Slicer
- Install the non-open-source Bambu 'Network connect' plugin to Orca Slicer when prompted on first connecting to a Bambu printer
- Slice within Orca Slicer
- Click print
- Gcode sent to network plugin, shows within a new tab within Orca Slicer, with webcam view visible

With the new firmware:
- Install Orca Slicer
- Install the non-open-source 'Bambu Connect' standalone application
- Slice within Orca Slicer
- Click print
- Gcode sent to 'Bambu Connect', shows within a new window, with webcam view not visible

Note that the webcam view is still available via RTP so could be embedded within Orcaslicer still if desired.

A real pain in the arse, but more of an inconvenience than a loss of functionality. Since the 'authentication; is done via a static embedded key rather than a phone-home, even after updating to the newer firmware printing with 3rd party slicers can be done in LAN mode entirely offline, once you have installed Bambu Connect for the first time.

The real problem is:

Already "jailbroken"

Bambu Connect’s Authentication X.509 Certificate And Private Key Extracted

Hot on the heels of Bambu Lab’s announcement that it would be locking down all network access to its X1-series 3D printers with new firmware, the X.509 certificate and private key from the Ba…

hackaday.com

The use of the embedded key is not secure if you already own the host PC. But if you already own the host PC all bets are off anyway, so this could just be a nudge-and-a-wink way to allow end-user hacking and continuing as normal, but allow Bambu to wash their hands of any consequences of such.

::EDIT::
And they'll keep the old LAN-mode functionality (plugin in tab view) anyway.

 

[edwardcrutchley5]

Please describe, in your own words, how this is 'stealing the freedom of users'.

It's LITERALLY stealing users freedom of choice. Once we buy a product, we own and can do whatever we want with it, including hooking up 3rd party slicers or accessories.

 

[USAFRet]

It's LITERALLY stealing users freedom of choice. Once we buy a product, we own and can do whatever we want with it, including hooking up 3rd party slicers or accessories.

And, if you read further, alternate slicers are still available. You just have to go through other hoops to get there.

 

[edwardcrutchley5]

Not a perfect solution, but Bambu Connect:
https://wiki.bambulab.com/en/software/bambu-connect

That's not a solution, that's the problem. We shouldn't be forced to send our models to a server in China. Especially, by updates that remove features it was advertised with. This is breaking all kinds of False Advertisement and Consumer Protection laws.

 

[edwardcrutchley5]

prevents, unless they update to the newer firmware.
v1.08.xxxx

And printing via LAN or microSD is always available.

That wasn't the case, Lan was a backtrack after the outrage. How's that not false advertisement? That's nearly identical to what Sony did removing Linux Other OS from the PS3. They lost a huge class action lawsuit for false advertisement.

 

[USAFRet]

That wasn't the case, Lan was a backtrack after the outrage. How's that not false advertisement? That's nearly identical to what Sony did removing Linux Other OS from the PS3. They lost a huge class action lawsuit for false advertisement.

Printing via LAN or SD card was always an option. From Day 1.