Orca Slicer or die!

People are free to do whatever they want. It’s probably most of those that came from other printers, expecting I don’t know what, and keep switching brands. But there are more Bambu users who never had a printer before Bambu and never cared about tinkering or open source. They consider their 3d printer an appliance or a tool, not something to tinker with, not considering a print farm and what not. Just something usable. This number is increasing because of companies like Bambu. If they keep things easy and the quality high, it’s a no brainer for most people. They will still sell printers, it’s just not for everyone. Look at other than FDM printers. Nobody cares about open source and people still use them for personal use.

I found no difference in prints so far. Even the interface is basically almost the same. Orca doesn’t have the MakerWorld integration into the program. Some people claim they found some difference in some prints. Orca may add features in the future releases that might not be present in Bambu studio but for now it’s the same. It’s not less capable.

Just a brief look at calibration options available in orca proves you wrong. Studio is less capable in this manner.

It’s a bit like comparing cars - Sedan is no less able to drive you from point a to point b than a pickup, right? But there are features pickup users would miss greatly in a sedan…

Regarding “may add features”… Oh they’re adding some goodies:

Those are just confirmed goodies that are in the next release that interest ME. There’s more there and there are features being worked on still (like eg bricklayer/staggered perimeter)

1 Like

Can we please use some of this “Orca community” rallying to sort out the problem with the “Official” Orca download problem. How has this been allowed to go on for so long?

:rotating_light::rotating_light::rotating_light: Important Security Alert :rotating_light::rotating_light::rotating_light:

Please be aware that “orcaslicer.net”, “orcaslicer.co” or “orca-slicer.com” are NOT an official website for OrcaSlicer and may be potentially malicious. These sites appear to use AI-generated content, lacking genuine context and seems to exist solely to profit from advertisements. Worse, it may redirect download links to harmful sources. For your safety, avoid downloading OrcaSlicer from this site as the links may be compromised.

If you see the above sites in your searches, report them as spam or unsafe to the search engine. This small action will assist everyone.

The only official platforms for OrcaSlicer are our GitHub project page and the official Discord channel .

We deeply value our OrcaSlicer community and appreciate all the social groups that support us. However, it is crucial to address the risk posed by any group that falsely claims to be official or misleads its members. If you encounter such a group or are part of one, please assist by encouraging the group owner to add a clear disclaimer or by alerting its members.

Thank you for your vigilance and support in keeping our community safe!

4 Likes

What do you mean by that?

It’s anounced, present in official comms, the wording is very clear and me (and probably multiple others) have reported those sites and have them blocked.

There’s no “download problem” since it’s clearly stated that the only source is github repo.

2 Likes

I mean that what Orca developers are doing is not currently effective as the .net/.co/.com links are often linked to on this forum. This directly shows that the general population isn’t aware of this problem.

Look at the current google results.

2 of the top 3 results are “nefarious” according to Orca developers.

Going to the github release page is not where people that are interested in trying Orca are going to do. They will never see the “Important Security Alert”.

Is the Orca community just okay with this “serious security” flaw? How is there not more pushback on the people “hosting” the .com/.net/.co sites?

3 Likes

Sir, this is arguing in bad faith.

According to domain registration policies anybody can register a domain and host almost any content they want. I mean - dis you: https://www.jonraymond.com/ ? You do hair styling, right?

There IS a pushback and anywhere someone posts wrong link is corrected.

Side note: I use uBlock Origin (and I recommend everybody to use it, internet without ads is possible!) and trying to enter any non-official orca site here’s what I see:

4 Likes

Hopefully, BBL will be fair enough to keep themselves in a closed garden and develop similar features on their own, not taking again from open source developers.
Of course, they will do a botched-up job of that.

To all BBL lovers who do not see any wrong doing in BB actions and direction they set the course. Let’s say all these developers making slicers or mechanical upgrades: Slicer, Orca, Prusa - all of them open source, free for use to all users, not expecting anything in return in the end - decide it is not worth it - their work, development, pushing the boundaries of 3D printing - all this getting shamelessly taken by big companies, stuffed in “their” slicer, calling it “their” development - then go even further, saying to the developers “piss off, you have no place on our printers” - Yeah, really neat.
Allowing them to do so, other companies will follow… These companies need a reminder to know how they came about, who their customer is, and where they got the knowledge.
I do not see consumer-grade printers made by a company which actually made the groundwork from zero to the end product which works.
All started by absorbing knowledge available on the internet in 3D printer communities and upgrading it. Make no mistake, this was mostly gathered from the “crybabies” & “tinkerers” as some BBL users like to call them now and above-mentioned developers of the software.

All this out cry is well deserved for BBL and should also be applied to any other company heading in BBL direction !

2 Likes

But there isn’t ENOUGH push back. Just because you know not to use those links and have blocked them, doesn’t mean that the general population now know this.

I really don’t understand why you are pushing back on this request. How is asking people that are vehemently defending their right to use Orca to also spread the word about the “nefarious” release sites?

If Orca truly wants to be legitimized as a secure and “Go to” slicer they need to deal with how their releases are presented to the world.

2 Likes

I do have to agree on this one. I downloaded it from github but this is not how I like to download my stuff. Official webpage with a download button for the latest release is what I prefer. And so does Google apparently. Having a URL that says Orca Slicer has a higher ranking than a GitHub page called Orca Slicer and I can’t blame them.

That said, it is not Orca’s problem or the communities problem that these websites exist. If bambu-lab.com sold 3D printers or was in the business of scamming people Bambu would also have a hard time taking them down. They would because they have the funds. And they don’t have to because Google just pops up with bambulab.com on the top row because of traffic and stuff. But you can’t blame Orca Slicer or the community for malicious people

2 Likes

Well, yes and no. The Orca project isn’t without some financial funds - i.e. there are a bunch of people sponsoring through GitHub, as well as other avenues. So why weren’t some of these domain names at least parked with a cheap hosting provider, if not redirected to the GitHub site? In the initial instance I can understand and sympathise with the problem, but as time goes on, and the issue gets worse, I would apportion the blame more on the Orca community for not doing something about it. In other words, they need to be prodded into pushing back against this issue more :wink:

1 Like

Those sites are a problem, but I think stopping that is easier said than done, especially for a decentralized OSS project. I don’t understand what you all expect them to do, hire lawyers to sue the owners of those domains and take control of them? There’s some unusual domains in there and lots more to move to… where does that end?

And let’s say they do get control of those domains, it’s still not trivial for a “free” team to keep that locked down. Sometimes life throws trash at people, and they disappear for a few months (or for good); what happens when the one(s) who were managing that registrar account don’t keep on top of it for whatever reason? Stuff like that takes time and effort to manage, it adds up.

Rather than putting it on the little guys, I’d much rather put the responsibility on the uber-monopoly megacorps running the search engines listing these malware sites.

Isn’t there a way to file a complaint to Google, MS, etc. to get them to delist or derank this trash malware?

Also… since I think the reason @JonRaymond brought this topic up is because we’re getting those malware links posted: can the text of those domains be added to the forum software’s dirty word list so it at least blocks them automatically?

Yes this would be a good idea. Unfortunately I don’t have access to any of the admin functions of the forum.

Side note - I’m sure someone will complain that “Bambu is blocking Orca downloads!!” :slight_smile:

1 Like

Haha yes maybe that complaint would happen. But then I and I’m sure all the others here will be happy to help you let them know what’s really going on!

Do you have a preference for who that someone might be? I’m always willing to give a helpful hand, if i can…:wink:

1 Like

uBlock Origin is great, and thankfully the malware list is one that is enabled by default (unlike with Brave Browsers implementation of uBlock, but it does mean you trust the managers of the lists. I’d like to think when people hit once of those blocks, they then also report it to the search engines, making it more likely the browsers that use the safe browsing lists will automagically block those sites eventually… making the squatters/scammers move on.

Most definitely. But that does not absolve the “little guys” from not trying to do something about it. I do know exactly what you mean about “free” teams, and trying to keep up with everything… it gets quite chaotic at times… that’s where organisation/teamwork and communication is crucial. My point is simply that they have a part to play, a responsibility to act, not just say things.

You can report domains/sites with malware to Google and Microsoft, and I seem to remember something about search result priority with one of Googles other services - not sure if it was analytics, adsense, sites or something.

i.e. It would be interesting to see if through some verification of authenticity, SoftFever (as the project “lead”) could do something to shut down these three fake domains… i.e. with an formal email stating they are nothing to do with the project, and have the potential to spread malware. Unless something like this has already been tried - I haven’t looked around to see if it has.

orcaslicer.com  - exp 2025-03-15 - http://www.dnsexit.com   - support@dnsexit.com
orcaslicer.net  - exp 2025-06-17 - http://www.namecheap.com - abuse@namecheap.com
orcaslicer.info - exp 2025-08-21 - http://www.hostinger.com - abuse-tracker@hostinger.com
1 Like

There could be more, feel free to chip in :slight_smile:

I’ve been researching this in order to have a good reply to @JonRaymond - basically Orca started as a simple fork of studio, wasn’t even called orca. It slowly grew, got renamed and by the time someone thought “oh, it would be a good idea to have something in place” the names were snatched/squated (just a fun note: .cn name is up for grabs with €300000 pricetag).

There are individual that then hopped on and squated available other tlds just to have something for the right time. Maybe the right time came, check issue #8229 on orca’s github

I have some experience in domain business - it’s EXTREMALLY expensive if the site isn’t outright malicious.

The actual malicious ones got taken down and delisted. those that stay up currently do “nothing wrong” in the eyes of those since all they do for now is show ads and host currently not modified installers (but can become malicious)

3 Likes

This is so worrying, I love the trouble-less printing of my P1S but just the controversy of this is putting me off.

4 Likes

You still can’t explain the code, even though you repeatedly claim to be able to do so. You seem to be one who has invested time and energy into Bambu Lab and MakerWorld yet are quite intent on siding with those who wish to tear it all down for reasons that you don’t seem to be able to articulate.

It has become all too familiar over the past several years. A message is sent around to the so-called influencers who take to the airwaves, YouTube, Facebook, Reddit, and elsewhere, to spread the gospel. The next day, all across the country and around the world, hordes of irate posters are rage posting all over the internet, again all in lock step fashion. Oh no, once again the sky is falling… It is really strange, as the issue at hand doesn’t seem to matter so much, as the mechanics and the results are always the same.

One would think that more people would be able to see through the silliness. But sadly that is not the case.

3 Likes

You called it C++ code (it’s JS actually) proving yourself to know too little. I simply chose to not engage, because arguing with a fool is a fool’s errand. @zwerko explained it quite well in Orca Slicer or die! - #235 by zwerko yet you ignored his response and chose to attack me. On top of @zwerko’s explaination I’d like to highight the fact that the Connect simply signs the gcode doing no safety checking on it what so ever so it doesn’t (currently) increase anybody’s safety/security. Same thing with MQTT commands: it simply signs them. Do I need to explain how that means absolutely nothing in terms of claimed security when such app is ran on same potentially vulnerable PC as the “oh noes wrong slicer”?

4 Likes

I have one better… thinking this can fly :rofl:

3 Likes