Seriously! Stop Scaremongering Bambu Labs
Вставка
- Опубліковано 5 лют 2025
- There is a lot of misinformation out there regarding Bambu Labs and their "controversial" firmware update that brings Access Control to the printer. The first consumer 3D printer manufacturer to do this. I break down the claims and misinformation regarding the scaremongering that people are posting on the internet, especially mainstream UA-camrs and bloggers watching out for their own pocketbook and creating clickbait.
1. They have other ways of securing the machine's OAuth, which is the first thing that comes to mind.
2. gaslighting the public.
3. Changing their website and requesting the Wayback Machine to remove their website from the archives.
4. Bambu sends 3mf files to thier server that you print they do care and images from the camera from the machine that have them.
5.Prusa CORE One
6. you shouldn't have to download another program including the slicer to print to the machine you "own"
7. you haven't seen all the press releases verg just posted one.
8. all signs of locking down the eviroment
Can I copy this? You broke down the situation perfectly!
I'd also add to it that the new software doesn't actually secure anything, private key was leaked in hours from it releasing. As it is now, Bambu connect will not even start without internet connection, breaking LAN mode but if that wasn't the case, you'd still have to connect online once a year to renew the certificate. Developer mode is just a patch on to make people shut up (didn't work)
Or just not have any online smart crap at all
Dude, you forgot other bullets: :-)
4.1) Proven to send private info, including unwarranted photos to mothership, even in LAN mode.
8.1) They are forcing all 3rd party components to be connected to the mothership. Apple doesn't even do that!
10) Intentionally removed features from LAN mode.
11) Terms of use explicitly says that are allowed to brick the printer.
12) Subsidized by the Chines government. We are not the actual customer.
13) Proven to have repeatedly stolen intellectual property from competitors.
14) Not-active-yet filament restriction code found in firmware.
They have continually shown us who they are. People tend to ignore red flags, when it hasn't horribly affected them yet; even when there are alternatives.
@@krystalshocked Being able to remotely mange your printer is an excellent feature; and one Octoprint w/VPN has provided for a long time.
People buying an insecure printer from a dodgy company and then defending them is the issue.
If I spew the same script will Bambu give me a free 3D printer?
yes they will, then they will lock you into their subscription model
@@jimc9516 If I get a bambu printer (from someone who no longer wants their printer and sells it to me cheap) Im jailbreaking it or even replacing the control board for an open source alternative.
😂
They might ;-)
Bambu Labs TOS:
"7.4 Your Bambu Lab product will automatically search for and download new update packages ... Due to the importance of these updates, your product may block new print job before the updates is installed, and will immediately provide update notifications to help you understand the related information."
way to destroy all of your credibility with a single video.
Open source doesn't leave you much room? Open source systems are pretty much open? Have you ever heard of Linux? the OPEN SOURCE system that runs 90% of the internet????
did you get paid by Bambu or get dropped on your head one too many times as a child?
the government knows about STLs you download through your internet service provider? do you know ANYTHING about how encryption works? welcome to 2005, we have SSL now, it encrypts the data going TO and FROM the website, so neither your ISP nor your government can see what's in that data.
This 👆🏼
This ☝🏼
Way to own the UA-cam algorithm with my first video! Of course I've heard of Linux. Open Source =/= secure.
@@MadeWithPlastic then you decided to destroy your reputation just for views? man, i'm sorry to hear about your self-esteem!
He had credibility to be destroyed? News to me
The whole point is - we don't want to be cloud connected. There is zero need for the cloud except control and intrusion. I can get remote capabilities with a vpn.
Seriously, you come from a cyber security background? Those of us who really are from security backgrounds are frankly a little surprised to hear you say this. Please tell us more?
My read was "I come from a cyber security background" meant "Windows support".
Absolute consumerism, getting the warning signs that things are being setup ANTI YOURSELF then still bending over and taking it with pleasure while telling others: "They should stop complaining".
THE FOLLOWING ARE MY OPINIONS. I hope no one believes this fool. You can tell he is trying hard as hell to shield Bambu and when he started using insults when referring to those of us with concerns you knew immediately he lost the argument. Hey only 2 subscribers says it all. What a tool.
This dude is 100% being paid by the chinese
didn't even see the subscriber count. the fact it showed up in my recommended... its probably a paid promotion
@@schroedingers_lurker8686 Excellent point.
Me: Saw this coming from the start when Bambu coerced customers to send their designs to a Chinese cloud server.
This Guy: Wouldn't see it coming even if armed guards of the Chinese Communist Party's People's Liberation Army were stationed at his 3D printer to approve each print and lower his social credit score if he tried to print things that were not approved by The Party.
As an actual Cybersecurity Engineer, anyone who talks about their certifications doesn't really know what they are talking about
Excellent self-refuting claim.
Lol
Is it me or seems that this it's Bambu Lab propaganda, 1 video, 2 subscribers and it's only talking good things about Bambu Lab, sorry but I don't trusts this accounts without history.
It 120% is Chinese propaganda. Just looking ab the background, I am 100% sure he is a US based distributor for Bambu labs, meaning he takes their money and peddles their bullshit.
150% American's big mad in the comments
did anyone notice? NOT A SINGLE REPLY from the creator? yeap, sounds like he stands behind "his" opinions 👍
I just love reading the triggered viewers comments.
@@MadeWithPlastic and I guess you disabled the likes count because you love it just as much?
cope harder 👍
@@jimc9516 I have youtube revanced and he has way more dislikes
How much did Bambu pay you?
A LOT!!!
I believe everyone should just choose what they believe in. Much like how I believe that Bambu is not a longevity choice, but cards are open if I just need a printer that does "that one thing" well as it'll have earned itself back when its bricked (if that happens at all).
At the same time, people ought to be aware. Its early to tell but rightful to be worried. The thing that puts me off is not the change itself, its the shady shit and the gaslighting that makes me not trust this company. That won't stop me from considering getting a Bambu printer, but it does withhold me from being a returning customer.
But I'm a small business. I make choices according to what that needs, hence why Bambu is not my reliable choice but still is in the cards for being that "secondary" printer I don't mind F-ing up (like a small loan that benefits itself). I consider the fear aswell as the support, but ultimately I know myself the best.
Likely, if I were to time travel to when I got that anet and ender 3 since release to now, AS a designer and not a tinkerer-nut, I don't think I'd really care about the changes as an hobbiest and just want that "it just works" mentality. Things change though, as does my mindset.
For the future, I'll just bide my time. But I recommend people to research and make choices themselves instead of kneejerking it all.
I think most YT creators are just using this topic for clicks.
Some maby.
1:08 - LOL @ guy coming from a cyber security background who thinks proprietary "trust us" security-through-obscurity is safe and open source is anarchy where anyone can send any code to anyone's hardware. Also, "strutinous" isn't a word to such an extent that I detect a low signal to noise ration and I change frequencies. No wonder this shill video has 75 likes and 249 dislikes.
Do you really think they will stop at that? This is a clear indication about many and far worse business practices around the corner. Sell printers at cost or even at lost, create a highly integrated ecosystem relying on proprietary software, integrate cloud services at the beginning but charge in the future once everyone becomes dependent on your products. Lets say they legitimately are doing this for security, do you really thrust them they wont abuse such control in the future? Also why they edited their original statement? And yes you can do something, Jailbreak and avoid their products.
They had prints they never started ? , well if I remember it right their servers went down and stopped all printing , when their servers came back it started printing from cache ?
So to use your car analogy , to start your car each morning to need to install a app which connects to your house , which connects to BMWs servers etc which allows you to start your car ? , I think will stay with my ignition key , so the only people who can really start your car is BMW now and not you , so you have to trust BMW .
I see you've disabled the dislike button... I wonder if this is going to be a "Bambu can do no wrong!" video by somebody who has NO idea what they're talking about... Let's wait and see. I'm already loving the "I come from a cyber security background" and then talking about how open source isn't secure, meanwhile, most big companies literally implement open source security for their VPN networks (wireguard anyone?) etc 😂 I also like the way that as I'm watching the video, he immediately starts pushing Bambu talking points that have been confirmed to be false at best or lies in reality.
LOL. "Nobody cares what you do with your 3D printer" My brother in Christ. There are literally fucking laws being looked at and implemented all over the world (Canada specifically) that will monitor and restrict what you do with your 3D printer. In Canada they were even talking about requiring a license to purchase a 3D printer 😂 My god, I hope whatever Bambu paid/gave you covers your loss of viewers, not that someone with 15 subs probably has a lot of views anyway.
So did you get the X1C or P1S after this video?
Apparently both.
Getting unit 5 tomorrow.
The model for this really isn't anything new, nor should it be surprising, I can imagine several "realistic" scenarios where the Authentication would be very useful. Also as a Small Business owner, I order blank labels online, which for convenience the company provides me a free 1 year subscription to use their software that has all of their label sizes so I can do what I need to to ensure that my labels come out perfect everytime. then I have to send these labels via PDF to my computer then Print them...Having multiple applications to accomplish a task is nothing new... So Long story short I agree with you, Micro transactions, subscription based programs, autodesk, office 365, adobe... are kind of the way things are going... Just imagine someone creeping outside of my apartment sending random prints to my printers, like printing out a "I'm coming for you" on your print bed sounds like the makings of the next best worst horror slasher film.
"The print came from inside the house". I could see it now. On par with Sharknado.
Open Source DOES NOT = open security
Open source also doesn't mean secure either.
You're the type of guys that create the surveillance state.
Probably was the kid who reminded the teacher about homework.
Lock me down harder, Big Bambuuuuuuuuu hoo hoo hoo hoo.
Regardless of what Bambu Labs says it will or won't do, the deal breaker is that Bambu Labs has the ability to remotely do something to my printer and or access rights to my designs.
Someone is one their payroll, it’s been awhile since I’ve seen someone gaslight their viewers this bad too.
better security: DONT use the CLOUD. After all Bambu opened it up to be unsecure. is the CLOUD that much better?
Exactly.
@Freedom_and_Democracy it seems that the minute they went cloud it all went south.
So much user love their BL printer, its normal if they are worries., the best way Continuously monitor BL policies and provide input to them.
As an IT professional since 1982 I find it difficult to believe you are also an IT professional AND that you would relinquish your security responsibilities to a vendor you are buying equipment from. By doing so they are already inside your network. Really? Honest to God, really?
This guy has to work for BambI PR (propaganda)
How can I block Channel from showing up on my UA-cam
Saying it’s 100% about security it completely wrong. Bambu themselves have admitted that this is a bridge to future services. Stealing data is another thing where you are wrong. Bambu lab absolutely uses that data. As someone who sells data for a living. They want to know everything they can to build a user profile. They then use this information against you. If you are truly in security you should know this.
Somebody is on the Chinese payroll. I also know this for a fact as this video has been plastered on my top recommended video after several refreshes. Meaning its a paid promotion. How does a guy with 4 subscribers, and this is first video, have money laying around to promote this video with UA-cam to defend Bambu Labs? It's so obvious. There are youtubers out there with 1 million subs that would give their extra kidney to show up in someone's top feed multiple times in a row, much less a dude with 4 subscribers. Welp, I don't have to worry about being this guy "5th" subscriber.
I don't even have a 3D printer, but rarely watch a video about them in interest, and also caught Louis Rossman's recent videos. Now UA-cam is putting this video with less than 800 views from a channel with only 7 subscribers near the top of the home page's recommended videos list.
@@BainesMkII I work in cyber intelligence and this is a trademark Chinese move. They are never subtle, its honestly their calling card.
This was on My homepage too
Some might say I cracked the UA-cam algorithm. UA-camrs with millions of subs hate this one little secret I've uncovered.
@MadeWithPlastic easy to do when you have the CCP checkbook. Ps: Taiwan is a free and the legitimate government of all of China.
I'm following Ebay atm awaiting a bambu P1P to pop up - considering the wailing the number printers coming up for sale has not changed these last few days.
Give me, the owner, the option when I set it up . Easy way and they take care of it, advance way and it's like it used to be. Not that difficult
Mabe you should keep on talking about Subaru's and petting your cat's because you clearly aren't the information security guy you claim to be...
Lol
I know 0 about 3d printers, I’m just learning. I do know that other printer companies don’t have such stringent requirements when it comes to security. Also, it sounds like they gave you talking points before making this video or Bambu is holding you hostage.
Ender 3 pro. fully open source, fully customizable, completely offline, OWNER controlled. That's what I will ever use
10:43 You know its a bad argument if the EU is mad at said arguments "features"
As a side note, rename yourself to Made with Ai lol
Sounds like a bunch of people in the comments should just sell their printers and move to a different ecosystem. You buy a house in a gated community, you live in a gated community. Don't act surprised when then fix the hole in the fence you and your friends were exploiting, especially when they were either warned or not even acknowledged by the company.
To use your own analogy; this isn't like a gated community. The old style was.
They're effectively saying that you don't get to choose what car you drive to get to your house, and if you use a different one then you have to stand outside the gate and assume the house is still in good repair. All in the name of "security."
Meanwhile the next day someone shows that they can drive right up to the house with a hacked fob for the gate. Then the HOA tells you that they never said those things, but that you can get to the house with other cars as long as you don't drive on the roads.
Sorry but you are wrong. This is absolutely about control. The new authorization system replaces direct network API access with a more limited URL-based interface through Bambu Connect. LAN mode now requires cloud auth. None of these things improve security. Bambu switched to secure protocols back in 2022 eliminating network disclosure of sensitive info including access keys. LAN APIs already require an access key. There was no reason to eliminate local API and authentication services period.
you and loyal moses should make babies. the level of shill and corporate suck is strong with you both. i get it that bambu pay you, but how much is your integrity worth ?
I do not believe you know anything about security. I call bullshit.
"and as allways see you next time" nobody at bambu told him they're gonna upload the ad video on a new channel eh?
Open source is why Bambu exists. Did Bambu give you a free printer?
Two of them, see them in the background? /s
The key fob analogy is a horrible way to look at it.
This guy wants free bambu printers LOL. Nice try.
I had a HP printer that was a pure trooper. I stopped using it for a few years. Plugged it in and long behold I needed a damn subscription to make it work. This is where Bambulab are headed.
☝️exactly this
Do Bambu lab pay you for saying that???
The idea that something is safer on the internet than not on internet is hilarious. I will spend the bambulab printers I have and will never buy a new one ever again. And it is only because of the security issues. A cloud will never be safe no matter what you do. Well, you can remove it from the internet, but then it will not be accessible.
Insert "leave Brittney alone" meme here
ua-cam.com/video/WqSTXuJeTks/v-deo.html
You compaired a single toolhead X1 to a Prusa XL toolchanger.... Your clearly a novice 3D printer. XL has 6x the toolheads in a better build larger printer. Apples to oranges.
Prusa xl better. Bamboo labs 🤮
I also compared the K1/K2 with MMU, but you might have missed that too.
The prints starting on their own wasn't 3rd parties, it was Bambu's cloud screwing up and resending prints from a cloud failure. If someone is on your network without your permission, your printer should be the least of your concerns. The one thing you absolutely got right is, there is nothing users can do about this. Bambu doesn't care about what users want, only their own self interest.
1:10, something about this is so patronising, i'll decide for myself! Also, prints starting on their own is not something i care about, all they can do is heat up your printer and move axis around, there is already firmware in place, such as thermal runaway, like, realistically, what are they going to do? I don't care about it.
This fuckin guy 😂
fr just yap
From the start, this was a storm in a teacup. Won't affect most users.
Bambu Simp
I am also in IT and understand exactly what you’re talking about from a Cyber Security perspective.
-You are ignoring many warning signs mentioned in the comments below. Actions matter. Words matter less.
-They have many options to make this community friendly and keep their system closed source. It’s not their job to do that. BUT they are bait and switching their existing customers.
-Why not sell a license to the API Key. Orca can be community funded; LAN Only, they can turn off the API key if a problem arises. They don’t have to do it this way. It’s just bad messaging and bad practice.
At least someone gets it. I don't like the approach Bambu took to closing their API, but I fully understand the ramifications that Bambu is facing if they just left it insecure. I worked in the corporate secops world with internal dev teams long enough to know that leaving your API open the way they did, was wrong to begin with. Third parties got lucky that they didn't cut them off when they noticed that the API was being exploited. They were warned, the community was warned, but everyone ignored them until recently when they cut everyone off. I do not feel sorry for those who bought their mods and other unauthorized upgrades that can't use them anymore. Now people attack the company for protecting their assets, and their asses, and I am having none of it. I'm not bothered by the hate, it just keeps driving my video higher on the rankings. Cracked the UA-cam algorithm with my first upload.
Wow what a shill
If you look at what they have produced, the tools they use and what they have done to Bambu Studio you soon understand why they are where they are today. We canceled the PO for the X1E's we were moving to, we'll revisit Bambu Lab in a few years after they hire some software programmers and learn about security certificates. The programmers that are doing the machines firmware are good, no other printer I've used checks to see if the plate is there at the start of a job.
love this video , Print or Tinker....... som so done tingering , started 8 years ago with Sintron 101... (ANET A8 Clon) and now i have X1C love the printer..... (3 Creality printers later)
I still have an Ender 5 plus for tinkering. Currently creating some content for it, converting it to Klipper and RPi setup.
opinion rejected
On. The. Take.
Bambu Bootlicker detected
This is why he has 14 subscribers.
17 now, someone drank the Kool aid
You come from a cybersecurity background ? Sure
Can someone tell me what the dislike ratio on this video is?
41 likes 192 dislikes. he's getting ratio'd HARD.
The dislike button has been “disabled by owner” on my computer, so I can’t even see what the ratio is now. I had to go to my phone to even hit the “Dislike”.
He might as well just take this video down since it’s so badly hated by the community.
@@StolenJoker84 oh this is new, yesterday the dislike button still showed the numbers. I don't know how this helps his ego, because he can still see the number of dislikes in his YT studio.
@@jimc9516 I don’t know either. It’s just UA-cam allowing creators to hide information from those of us who had to instal a plugin to see the information we want to see.
Restricting access to information is never a good thing, IMO.