Bambu Lab - Setting the Record Straight About Our Security Update

Re:Bambu Lab - Setting the Record Straight About Our Securit... by Maskawanian on Monday January 20, 2025 @06:17PM (#42774315)

Nah, you made an absolute statement that MQTT was insecure, that was demonstrated to be incorrect. If HTTP can be made secure by relying on a secure transport, then MQTT can as well.

Additionally, MQTT does allow for authentication. I've personally set up brokers many times that will not allow anonymous connections.

Misconfiguration of services, does not constitute an error in the protocol itself.

[ Parent | on HN ]

Re:Bambu Lab - Setting the Record Straight About Our Securit... by parasubvert on Monday January 20, 2025 @06:28PM (#42774412)

OK, please continue deploying MQTT ports on the public internet. I'm sure it's super common and completely safe.

[ Parent | on HN ]

Re:Bambu Lab - Setting the Record Straight About Our Securit... by sho_hn on Monday January 20, 2025 @06:32PM (#42774452)

Neither Bambu nor the parent poster did this. I'm not sure what you're talking about.

[ Parent | on HN ]