Bambu Studio 1.10.2 Public Beta

ZiggyP · January 17, 2025, 2:32pm

When it comes to security and user privacy Bambu are complete idiots.

They force PIA 2FA by email authentication on me to log into Makerworld then tell me I can mitigate that PIA by keeping their cookies. Log in status cookies which are easier to steal than my password, last for 12 months and completely bypass password and 2FA. To avoid the pain of 2FA by email they suggest I make my account less secure than it is without 2FA.

This authorization and authentication protection mechanism sounds like more of the same will be forced on me if I ever update the printer firmware or buy a new one. My printer can access DNS and NTP on the internet. All else is blocked by my router firewall because I don’t trust Bambu. I do trust my LAN and don’t need their stupid extra security to be forced on me. How hard would it be to let me turn it off?

The good news is Creality, Anycubic, etc are catching up so I might well have options to avoid this ■■■■.

ProtoSpyre · January 17, 2025, 2:52pm

@SupportAssistant The community has spoken and is currently voicing negative views towards this new requirement.

When can we expect an official response from the CEO?

SupportAssistant · January 17, 2025, 3:19pm

The official information is present in the blog post shared below:

We also included some frequently asked questions at the bottom of the article, to clarify some of the details.

Stijn1337 · January 17, 2025, 3:39pm

I will sell my printer if it needs internet access.

drakko · January 17, 2025, 3:54pm

Actually, the main reason you guys are invoking is your cloud security problems, not the users’ . No one attacks a 3d printer through a local properly managed LAN, and no self-respecting hacker will lose his time targeting a 3d printer… so all that mumbo-jumbo added to your article (including the FAQ) are just a smoke screen.
I rather stick with my current firmware and use my printer as i see fit (OrcaSlicer including), and take my chances with a hacker potentially and successfully gaining unauthorized access to my personal network… to use my printer… Ridiculous argument, but if that’s how you want to play it, so be it; I’ll play my cards the way I see fit, and not how you want me to play it.

RyanDe1 · January 17, 2025, 3:58pm

This isn’t good enough. do better.

JhonnyD · January 17, 2025, 5:49pm

I get a unknown error in hms after updating to the beta firmware.

drakko · January 17, 2025, 6:20pm

LOL… that’s strike one…
… let them come, people, let them come.

Johnny_Bit · January 17, 2025, 7:42pm

I’ve read them and they’re silly to say the least.

Let’s go over them:

Why is this change needed?

There are 2 reasons stated:

one is local printer safety - which gets nullified immediately since OctoPrint exists and they have had guide on securing remotely-accessible printers for years: OctoPrint.org - A Guide To Safe Remote Access of OctoPrint
2nd is Bambu’s cloud safety - which is your problem that you could very well fix without messing with people’s access. You could’ve hired cloud safety expert(s) who could help you fix that for fraction of the costs and none of negative blowback.

Point validity: 0.5/2 (i’ll give you 0.5 because cloud security isn’t simple)

Why does it need to be enabled in LAN mode as well?

Which tries and fails to explain this silliness on LAN mode. If someone has trojan on their local net, 3d printer is least of concerns. And if it is - then on LAN there’s instance of Bambu Studio that can be then used to do all those shenenigans you claim to protect people against.

Point validity: 0/1

Does this mean I won’t be able to use Orca Slicer in the future?

This fails to mention that the connectivity is essentially gone, so the AMS functionality is gone too. No nice filament selection… I’ll go over that connect later on but I gotta say - this is totally wrong idea and it cannot be even called “integration”. Nothing about that is “smooth” and “hassle free”

Point validity: 0/1

Can Orca Slicer access or read printer information? What functionalities does Orca Slicer have without Bambu Connect?

TL;DR: nothing useful will work. And “import-file” via url scheme? REALLY? Tons of ways to do inter-process communications and you went with url scheme?

So - there’s no point here and for url scheme I give -10 points out of 1

I am using Home Assistant to control my printers. Will this still work?

TL;DR: Not really, no.

I wonder how much THAT will anger people since I’ve seen a lot of drama when bambu was blocking MQTT back in june 2024…

so again - 0/1

What happens if I never upgrade to this firmware?

This point basically says: if you want your printer to work with orca slicer or anything external do not upgrade ever.

0/1 points again

Will aftermarket accessories stop working?

TL;DR: Yes, quite so. Turn panda touch into $60 brick.

0/1 points made

So to sum up: No real benefits to the end-users, all external improvements get rendered quite useless. And valid points made: -9.5/8. (I gave negative 10 for url scheme calls. talk about insecure way to pass data… if we skip that there’s 0.5/8 validity)

I’d say that’s a very bad idea.

Square3D · January 17, 2025, 7:52pm

I got out of my simrig just to read this. Spot on. I use HA and depend on certain automations for my printers and it sucks to have a simple thing as that taken from me.
This is not a resolution for us, the users. This is the start of what they want from the beginning but they were always cautious about it… until now. I smell something fishy here and i think, and it’s only my thought, that this has to do with their next printer launch.

I turned my back long time ago and will keep using my x1 with the x1 plus firmware and that’s it. Sadly it’s not an option for everyone or every printer.

Now on to the sim rig again, gotta do some fast laps

drakko · January 17, 2025, 7:53pm

Add to all the above arguments, this limited time-line firmware/software/security/bugfixes support:

and considering the current circumstances (as laid out before us by Bambu), one might wonder how many users will get to install their final updates…I guess that not that many…

Quack6765 · January 17, 2025, 8:11pm

Yeah no way my next printer will be a Bambu. You’re approaching the problem the wrong way. I get that you want better security for your cloud (I know cause I do this for a living) but disabling access for third party softwares that are running in our LAN to access our printers also on our LAN is NOT the way to go. Fix your cloud security (and if you can’t then hire consultants or external help) and let me thinker with my own printer at home however I like. Stopping updating the firmware is not a valid solution. This goes against the security principle itself. No firmware updates = no security fix.

user_403263467 · January 19, 2025, 5:53am

What a rug pull! This is awful news; I’ve only had my printer for a few months. Hopefully, the obvious customer outrage will convince them not to become 3D HP.

buzzkiller · January 19, 2025, 6:50am

Hello! I recently bought a bambu lab a1 printer and I absolutely love it. I do have some questions though. How do I opt out of your new firmware and take full control of MY printer that I spent $500 on? There are no security threats in the environment that I use my A1 printer in, so I don’t need any authorization and authentication protection mechanisms.
many thanks,
Buzz

drakko · January 19, 2025, 7:01am

Turn your printer settings to LAN only mode, and block your printer access to internet, then you’re safe (at least for the time being)

panicki · January 19, 2025, 9:28am

Introduce authorization and authentication protection mechanism: Bambu Studio now supports signing and encrypting control commands sent to printers when the printer supports authorization and authentication protection. The printer will determine whether the commands can be executed.

You really had to do this, huh? It wasn’t enough that the printer has certain parts locked down, someone at Bambu really thought it’s a great idea to make their users paranoid about their printer turning into an HP one.

I didn’t buy an X1C to be afraid to do firmware updates, or miss out on features. Now I have to, because someone else’s “security” concerns that don’t impact me at all are apparently more important than the principle of “don’t take away from the stuff that I bought more than a year ago, I already bought it and I’d like to do with it as I please.”.

I hope that being on the last firmware before the new horrible one doesn’t mean I’ve already soft-bricked my printer, and that maybe in can get custom firmware or something like that, which is something I had no interest in doing prior to this announcement.

binom · January 19, 2025, 10:35am

everything has already been said. but to add to the voices, let it be known that i too strongly disagree with the new auth system and the general direction highlighted by those changes. by f*cking over your customer base like this, you go against everything the 3D printing community stands for, while also making your devices thoroughly unattractive for people using them in a professional context. be better.

user_2035332987 · January 19, 2025, 3:34pm

If this is pushed out as a forced firmware then I won’t be looking at Bambu printers never again, no matter how cheap they are. I don’t care about the cloud cabability to be honest, but going after LAN mode is really silly.

Alessandro72 · January 19, 2025, 3:44pm

And later we’ll need a subscription to use AMS…I can’t believe I’m considering a Creality instead of the incoming bambu printer I was sooo excited about

manray005 · January 19, 2025, 6:36pm

Activated my forum account just to say that if this ridiculous update that forces us to use aUtHoRiZeD bambu software and pointless cloud connectivity, I will never purchase from Bambu again for any reason.

This quote speaks for me.