Imagine how people who already spent the 2k feel right now.
9 Likes
Bonjour,
Je réponds en français car les mots viennent plus simplement.
Prenez le temps de lire l’article au complet, j’ai l’impression que tout le monde pleure en lisant trois mots
Sécurisation, Home assistant non impacté et pour Orca, passage obligatoire par Bambu Connect, un billet du créateur de Orca stipule même leur travail avec BambuLab en ce moment.
Ce n’est un cloisonnage mais une sécurisation des données
S’il vous plait, lisez l’article en premier : https*://blog.bambulab.com/firmware-update-introducing-new-authorization-control-system-2/
4 Likes
It just may be that those who use Orcaslicer and other 3rd party add-ons tend to have more issues with their printers than those who use Bambu Studio, cause more problems, more headaches for Bambu Labs. Is that not the issue at hand, 3rd party efforts corrupting individual printers and the system?
Just an observation, but it seems to me that those who spend a lot of time on this forum complaining about Bambu Lab and Bambu Lab printers tend to tout their allegiance to Orcaslicer.
1 Like
I also don’t understand why people care so much about not connecting to the cloud, I don’t think Bambu or anyone else really cares what you print, what data are they going to take from you, your print settings?
2 Likes
That’s a fair question, as 99% of laymen may not fully appreciate its importance. Let me put it in a nutshell.
Whenever we connect local hardware to a foreign network, there is an inherent risk. However, when logging into a cloud resource, an additional risk arises: you not only identify yourself but also create a potential bridge back to other computers on the network. Companies like Google and Microsoft implement robust security measures to protect users, constantly monitoring for threats.
Now, consider an untrustworthy adversary like the PRC, under whose ultimate control Bambu operates. You have a vendor—Bambu—that has shown questionable competence in cybersecurity from the start and appears almost “flippant” about its importance. Not only do they actively degrade security by forcing users into a non-optional scenario, but their PRC overlords add another layer of risk. This creates a perfect storm of exploitable IoT devices inside the homes of unsuspecting and unprepared Western citizens.
_______________________________
An unrelated scenario of how lax cyber security can play a role.
This is a true story that, thankfully, never made the papers.
I was volunteering to provide computer networking support for a friend’s church. Though I wasn’t a member of the congregation, my friend was their Technology Deacon, and as a volunteer, he had no formal training in cybersecurity. He asked for my professional opinion on their network topology. At the time, I worked in the field, but as a manager, not an engineer. Still, in the land of the blind…
What I found was a network completely open to the internet—no firewalls, no security measures. His pastor, who was not technical, didn’t see the need. His reasoning was, “We’re a church; there’s nothing to steal.” I explained that every computer on their network was a potential asset to a cybercriminal. They didn’t heed our warning.
Within a year, law enforcement came knocking. Their servers had been hijacked and were being used as a torrent node for people trafficking in child porn. My friend said the pastor was devastated upon hearing the news and felt violated.
That’s an extreme example of the real-world consequences of the innocent being preyed upon.
11 Likes
so much this, omg
3 Likes
The old saying, comes to mind wrt ‘don’t put all your eggs in one basket’.
1 Like
I don’t think one can specify causation based on effects. I have transitioned to OrcaSlicer because of the limitations and bugs with BambuStudio, especially as it relates to custom filament profiles, and I suspect others use Orca to overcome shortcomings with BambuStudio as well.
It’s not as simple as that. Consider that we have purchased hardware with the expectation of owning the hardware and being able to retain full access to it at our own discretion, not at the discretion of the BambuLab. By being forced to use their cloud servers to print (even if they are completely secure), we are tied to their service. If anything happens politically and they decide to shut down access for western customers (let’s say conflict breaks out), we effectively have $1000-paperweights. This is very akin to the John Deere debacle, where JD locked out its customers from doing their own repairs on their hardware by digitally locking down machines and forcing only authorized service partners to complete repairs.
We have the expectation of the right of possession to the hardware we purchase, and Bambu is denying us that right and seemingly moving in a direction counter to that.
12 Likes
Take an old Bambu roll. Slice off the RFID. Tape to new roll. Outside the roll works as well as inside on the AMS.
That’s why they won’t bother with trying to stop other rolls from being used.
Also they don’t have Apple’s fan-base’s loyalty. Loyalty here is based on cost and features, not a logo. (Let the hate flow through you).
8 Likes
Well, let me tell you about HP printer ink serial numbers and how they can blacklist cartridges after a certain amount of prints so that aren’t DIY refillable.
7 Likes
Time to switch to X1Plus firmware I guess, companies really never learn, do they?
Bad move @BambuLab
6 Likes
This is 100% about local control for me. I lost internet for a day recently and wasn’t able to send a print to the printer. I did fall back to using the SD card and it wasn’t the end of the world, but it’s nuts I can’t just send a job to the printer locally.
I also learned that changing the wifi network (tried to connect to my phone hotspot) required deleting the existing network -and- the account binding and all that had to be setup again.
6 Likes
Just out of curiosity, really.
Does anyone think that saying “I won’t buy…” or “I’m done unless…” really means anything? Does anyone think there are enough users who can push them to not do what they want? Does anyone think that BL did NOT think this through? Does anyone think that they can’t afford the few users out off ALL BL printers sold?
I mean really? Did you not realize it was a walled garden? Did you not forsee that BL could (and most likely would) lock things down?
Does anyone not see that the newest model(s) may have some bearing on this decision?
Go ahead and sell your printer, go to Prusa, Qidi, whomever, best of luck and I hope it’s all you need in a printer. I’m sure there are other brands that can and will meet your needs.
Be aware though, posting “Goodbye you suck” isn’t the warning shot you may hope it’d be. Toss the what ifs, but ifs, they’ll see, etc. Vent, get it out. Voice your opinion. Just don’t pretend you’ve been wronged or betrayed. Also remember you’re a minority.
Good luck in the future.
12 Likes
I think you missed my point. Given Bambu’s current trajectory of “locking down” features, it’s only a matter of time before they start treating native Bambu spools differently from third-party ones within the slicer. I don’t fault any company for optimizing its own brand for use with its equipment. However, as we’ve seen with Epson, HP, and Keurig, there’s a slippery slope where manufacturers attempt to lock down their products entirely—either forcing customers to use only their products or deliberately degrading the functionality of competing ones. Apple’s USB-C charging cables are a prime example.
There’s growing buzz online that DRM will enter the world of 3D printing sometime in 2025, with influencers pointing to Bambu Lab as the company testing these waters. The speculation is that MakerWorld will be ground zero, with the justification that DRM is necessary to protect model creators and allow them to lock down their uploads. I fully support protecting IP, but Bambu talks out of both sides of its mouth. On one hand, they’ve exploited open source when it suits them, yet on the other, they bully customers into unwanted firmware updates.
9 Likes
A church’s servers used to traffic child porn. How unsurprising,
1 Like
You meant to say “how very orthodox of them”, don’t ya?!? 
The original intent with my post here, was to draw attention to the users like me who enjoy some of the interoperability of using things like HomeAssitant and Orca Slicer.
Maybe you are correct that what we want doesn’t matter to them. But if we don’t voice our opinions and make our thoughts clear, we will certainly not have any influence. I think it’s worth a shot and that’s why I started this thread.
I really do love my P1P, I just don’t want to imagine BL ruining my experience with it.
I want people to sound off here on this post and voice their disapproval of taking tools away from us that we use and enjoy.
I am not opposed to the idea of tightened security. I think it’s a good move on their part.
Make the printers secure by default. It makes sense for all of those people out there printing “flexi-dragons” and “minions”.
But I, and many others here (maybe we’re the minority, maybe not) want the “Advanced Features” mode where we can opt out of the “extra security” to utilize our printer the way we see fit.
I don’t think that is too much to ask, do you?
Can’t we have both sides be happy?
19 Likes
It possible to have security and reliability without locking out all third-party access. They just don’t want you to know that, so they tell you:
reliability = locked down access
But, this is a false choice that we have been slowly sold on by companies all over the world because many of us aren’t nerdy enough to know better.
The truth is, there are many ways to securely lock down access while providing an API style secure key system for users who want to get into that.
I think the telling fact that “security” isn’t the real motivation here is that BBL chose not to provide an access method like this. The emperor has no clothes.
13 Likes
No.
No.
Have you though?
Like I told the cat on FB. If it’s so easy provide said workaround that is secure and submit it. Just saying it’s possible does not make it so. Also doesn’t mean BL or anyone else in said position didn’t implement it “for reasons”.
According to BL, 3 mil hits attempting ddos etc is motivation. Even in not, they’re playground their toys. It’s not like this hasn’t been communicated and forseen.
I get what you’re saying but in the end it doesn’t really matter. You have to face that. If BL wants a walled garden then buy a ticket and stay or go elsewhere. Same with Apple and any other company that does the same. They are saying if you want to play here you have to play by their rules. Take it or leave it.
You can lament this. It can be a point of contention. Doesn’t matter. Accpet it and either buy a different printer or adapt.
All this speculation and comments on what BL is doing and why is just nonsense at this point. Could prove true but really it’s just the internet machine rolling on as usual. Hell, I’d be half of those saying “I’m done” will just keep going, bitching here and there but still using their printer. Even more will come up with an excuse as to why it’s different when a new “hotness” comes out and does the same thing.
Good evening, everyone,
I’ve noticed that many debates are stirring within the community about whether certain options for the X1 series printers should be locked or not. I’d like to share a constructive perspective on this matter.
An unofficial firmware is currently circulating. While it was developed with good intentions, this firmware integrates elements related to cloud functionality, LAN connections, and user security (accounts and content). However, it is far too open to ensure optimal security.
Moreover, you may have noticed that there have been recent cases of stolen protected models. Some of these models have been sold on platforms or shared via suspicious accounts.
Here’s a concrete example: imagine a user installs this unofficial firmware, which contains unpatched vulnerabilities. An attacker could exploit these weaknesses to launch a network attack. In such a scenario, who would bear the responsibility?
Similarly, through an MQTT configuration linked to a poorly secured Home Assistant, it could be possible to push the printer to excessive temperatures, increasing the risk of a fire. Again, who would be held accountable?
These examples highlight the importance of Bambu Lab taking control of security updates. This approach is aimed at protecting all users and, in my opinion, was necessary.
For those using Orca, it’s worth mentioning that Bambu Lab is actively working with them to maintain existing functionality. In the meantime, a tool is already available to transfer G-code files generated by Orca directly to your printers. These efforts demonstrate that some of the criticisms voiced here are unfounded.
I encourage you to take a step back before making judgments.
For more information, I invite you to consult their blog post directly: Firmware Update Introducing New Authorization Control System . Additionally, there are plenty of explanatory videos available on YouTube if you’d like to explore this topic further.
Best regards.
4 Likes