News for hackers. Stuff that matters.

A comment on Reverse Engineering Bambu Connect. Parent comment

Re:Reverse Engineering Bambu Connect by lvturner on Sunday January 19, 2025 @10:58PM (#42764842)
From their blog post: https://blog.bambulab.com/firmware-update-introducing-new-au...

"Critical Operations That Require Authorization

The following printer operations will require authorization controls:

    Binding and unbinding the printer.
    Initiating remote video access.
    Performing firmware upgrades.
    Initiating a print job (via LAN or cloud mode).
    Controlling motion system, temperature, fans, AMS settings, calibrations, etc."
Now, PERHAPS, I can do that authentication locally... but given the plugin required for OrcaSlicer it doesn't seem likely
[ Parent | on HN ]
Re:Reverse Engineering Bambu Connect by c0nsumer on Sunday January 19, 2025 @11:09PM (#42764892)
Yep -- I read that, but that doesn't spell out auth back to BBL's servers, just auth.

And keep in mind that OrcaSlicer already used Bambu Network Plugin to communicate with their printers. (It prompted you to download this on install of OrcaSlicer if you picked one of their printers.)

The move to Connect means that OrcaSlicer needs to send the print data to Connect via a protocol handler instead of to the plugin. Connect will then send it on to the printer itself, and from what I've seen it'll do that over LAN. (But I can't test because my printer doesn't support this yet.) I see this as akin to a print driver vs. printer-specific support built into an app. Not a bad thing at all, if done right.

The plugin already did (very minimal) auth via the Access Code and can do it with the printer and Bambu Network Plugin completely isolated from the internet. (I've done this.) So I'd like to know specifics of what's changing here.

[ Parent | on HN ]
Re:Reverse Engineering Bambu Connect by ghostpepper on Sunday January 19, 2025 @11:14PM (#42764926)
what else would it be auth'ing against if not Bambu servers?
[ Parent | on HN ]
Re:Reverse Engineering Bambu Connect by c0nsumer on Sunday January 19, 2025 @11:20PM (#42764953)
Perhaps some... other or better way of authenticating to the printer? Previously there was just a single, essentially fixed, numeric string that gave complete access to the printer, and communication was via TLS with a self-signed cert.

I don't want to hypothesize about what it could be doing, I want to see what it's actually doing (or see some actual info from folks about what they've seen) so I can decide if I'm comfortable with that or not.

[ Parent | on HN ]
Re:Reverse Engineering Bambu Connect by hatsunearu on Monday January 20, 2025 @12:18AM (#42765218)
The bambu cloud service has a very low value-add and they are trying to make it mandatory. the speculation is that they are trying to add a subscription model for print farms, which 3rd party slicers enable.
[ Parent | on HN ]
Re:Reverse Engineering Bambu Connect by jillyboel on Monday January 20, 2025 @06:19AM (#42767499)
the printer itself?
[ Parent | on HN ]
Re:Reverse Engineering Bambu Connect by lvturner on Monday January 20, 2025 @03:21AM (#42766207)
"Operation Guide for Bambu Connect

Start by logging in to the Bambu Lab account or click Discover to find LAN mode printers."

https://wiki.bambulab.com/en/software/bambu-connect

At the very least - it looks like you'd need to log-in to the cloud account to print on the LAN, which really begs the question.... why?

[ Parent | on HN ]
Re:Reverse Engineering Bambu Connect by krisoft on Monday January 20, 2025 @04:46AM (#42766857)
> it looks like you'd need to log-in to the cloud account to print on the LAN

The text you quoted directly contradicts what you are saying. It says login OR discover to find LAN mode printers.

[ Parent | on HN ]
Re:Reverse Engineering Bambu Connect by lvturner on Monday January 20, 2025 @06:21AM (#42767513)
You’re right! Sorry obviously I was one coffee short of comprehension!
[ Parent | on HN ]