Bambu Lab Authorization Control System: Difference between revisions

Bananabot (talk | contribs)
Re-archived 2 citation(s) from archive.today to web.archive.org using CRWCitationBot
Bananabot (talk | contribs)
Added archive URLs for 11 citation(s) using CRWCitationBot
Line 15: Line 15:


===Potential for remote disabling of printers===
===Potential for remote disabling of printers===
A significant concern raised by the community revolves around the wording in Bambu Lab's [[Terms of Service]] and firmware update announcements. Critics and users argue that the phrasing leaves open the possibility for the manufacturer to remotely disable printers that are not updated to the latest firmware. Specifically, Bambu Lab's Terms of Service<ref name=":2">{{Cite web |date=24 Apr 2024 |title=Terms of Use |url=https://bambulab.com/en-us/policies/terms |url-status=live |archive-url=https://archive.is/KZqib |archive-date=27 Jan 2025 |access-date=1 May 2025 |website=[[Bambu Lab]]}}</ref> states that printers '''"may block new print jobs"''' if updates are not applied, which some users interpret as a potential pathway for forced obsolescence.<ref name="firmware-update-introducing-new-authorization-control-system-2">https://blog.bambulab.com/firmware-update-introducing-new-authorization-control-system-2/</ref> While defenders of Bambu Lab point out that offline modes such as SD-card printing and LAN-only setups would remain functional, others point out that the Terms of Service do not explicitly limit this restriction to cloud-based printing. This ambiguity has led to speculation that Bambu Lab could enforce broader limitations, effectively rendering printers inoperable for users who choose not to update.<ref name=":3">{{Cite web |last=@nickjohnson |title=Bambu Lab reserves the right to brick your printer until you update the firmware |url=https://old.reddit.com/r/BambuLab/comments/1i45iy2/bambu_lab_reserves_the_right_to_brick_your/ |url-status=live |access-date=1 May 2025 |website=Old Reddit}}</ref>
A significant concern raised by the community revolves around the wording in Bambu Lab's [[Terms of Service]] and firmware update announcements. Critics and users argue that the phrasing leaves open the possibility for the manufacturer to remotely disable printers that are not updated to the latest firmware. Specifically, Bambu Lab's Terms of Service<ref name=":2">{{Cite web |date=24 Apr 2024 |title=Terms of Use |url=https://bambulab.com/en-us/policies/terms |url-status=live |archive-url=https://archive.is/KZqib |archive-date=27 Jan 2025 |access-date=1 May 2025 |website=[[Bambu Lab]]}}</ref> states that printers '''"may block new print jobs"''' if updates are not applied, which some users interpret as a potential pathway for forced obsolescence.<ref name="firmware-update-introducing-new-authorization-control-system-2">https://blog.bambulab.com/firmware-update-introducing-new-authorization-control-system-2/ ([https://web.archive.org/web/20260223032912/https://blog.bambulab.com/firmware-update-introducing-new-authorization-control-system-2/ Archived])</ref> While defenders of Bambu Lab point out that offline modes such as SD-card printing and LAN-only setups would remain functional, others point out that the Terms of Service do not explicitly limit this restriction to cloud-based printing. This ambiguity has led to speculation that Bambu Lab could enforce broader limitations, effectively rendering printers inoperable for users who choose not to update.<ref name=":3">{{Cite web |last=@nickjohnson |title=Bambu Lab reserves the right to brick your printer until you update the firmware |url=https://old.reddit.com/r/BambuLab/comments/1i45iy2/bambu_lab_reserves_the_right_to_brick_your/ |url-status=live |access-date=1 May 2025 |website=Old Reddit |archive-url=http://web.archive.org/web/20250119220606/https://old.reddit.com/r/BambuLab/comments/1i45iy2/bambu_lab_reserves_the_right_to_brick_your/ |archive-date=19 Jan 2025}}</ref>


====Editing of initial announcement====
====Editing of initial announcement====
Line 85: Line 85:


===X1E firmware 01.01.02.00 LAN only connection "BUG"===
===X1E firmware 01.01.02.00 LAN only connection "BUG"===
Newly received X1E printers with firmware 01.01.02.00 will not connect to the Bambu Studio using the Lan only method password. Bambu Studio identifies the un-logged printer but will not allow a connection to the printer. Only after connection / account paring is done over the Bambu Handy app by giving internet access to the PC and Printer then utilizing the cloud service connection will Lan only communication and login work.<ref>{{Cite web |last= |date=Sep 2024 |title=Connect X1E to stand-alone computer |url=https://forum.bambulab.com/t/connect-x1e-to-stand-alone-computer/101474 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum}}</ref>  
Newly received X1E printers with firmware 01.01.02.00 will not connect to the Bambu Studio using the Lan only method password. Bambu Studio identifies the un-logged printer but will not allow a connection to the printer. Only after connection / account paring is done over the Bambu Handy app by giving internet access to the PC and Printer then utilizing the cloud service connection will Lan only communication and login work.<ref>{{Cite web |last= |date=Sep 2024 |title=Connect X1E to stand-alone computer |url=https://forum.bambulab.com/t/connect-x1e-to-stand-alone-computer/101474 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum |archive-url=https://web.archive.org/web/20260223033045/https://forum.bambulab.com/t/connect-x1e-to-stand-alone-computer/101474 |archive-date=23 Feb 2026}}</ref>  


==Implementation timeline and requirements==
==Implementation timeline and requirements==
Line 121: Line 121:
*Control printer temperatures or cooling
*Control printer temperatures or cooling
*Automate printer behaviors based on sensor data or events
*Automate printer behaviors based on sensor data or events
*Access camera feeds through third-party applications<ref name="bambulab-forum-135400/9">{{Cite web |last=@hho |date=16 Jan 2025 |title=Am I wrong in understanding that Bambu Connect is just a upgraded version of what used to be the network plugin? The difference is that it’s not a plugin anymore. The only API offered is signing/sending .3mf files – everything else is only in Bambu Connect, but not available to other tools anymore: No syncing AMS filaments, no access to cloud-synced print profiles, no manually moving/heating the printer, no monitoring progress, no access to the camera etc. So yeah, Orca could probably implement a new “Send” button, but the “Device” Tab will be gone and preparing prints would also be a lot worse… I still don’t fully understand why they’re doing this. If they did it to Bambu Studio as well, then it would make more sense (not linking their closed-source plugin against the GPLd slicer anymore, finally complying with the license), but as it stands it seems they’ll only kneecap Orca (and any goodwill in the community around it). |url=https://forum.bambulab.com/t/this-new-auth-system-will-make-me-sell-my-printers/135400/9 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum}}</ref>
*Access camera feeds through third-party applications<ref name="bambulab-forum-135400/9">{{Cite web |last=@hho |date=16 Jan 2025 |title=Am I wrong in understanding that Bambu Connect is just a upgraded version of what used to be the network plugin? The difference is that it’s not a plugin anymore. The only API offered is signing/sending .3mf files – everything else is only in Bambu Connect, but not available to other tools anymore: No syncing AMS filaments, no access to cloud-synced print profiles, no manually moving/heating the printer, no monitoring progress, no access to the camera etc. So yeah, Orca could probably implement a new “Send” button, but the “Device” Tab will be gone and preparing prints would also be a lot worse… I still don’t fully understand why they’re doing this. If they did it to Bambu Studio as well, then it would make more sense (not linking their closed-source plugin against the GPLd slicer anymore, finally complying with the license), but as it stands it seems they’ll only kneecap Orca (and any goodwill in the community around it). |url=https://forum.bambulab.com/t/this-new-auth-system-will-make-me-sell-my-printers/135400/9 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum |archive-url=https://web.archive.org/web/20260223033106/https://forum.bambulab.com/t/this-new-auth-system-will-make-me-sell-my-printers/135400/9 |archive-date=23 Feb 2026}}</ref>


===Permanent nature of the update===
===Permanent nature of the update===
Once a printer is updated to the new firmware, users can still revert to previous versions that allows full control of the printer using LAN mode access key while signed into the cloud.<ref>{{Cite web |last=Hollister |first=Sean |date=22 Jan 2025 |title=Here’s what Bambu will — and won’t — promise after its controversial 3D printer update |url=https://www.theverge.com/2025/1/21/24349031/bambu-3d-printer-update-authentication-filament-subscription-lock-answers |url-status=live |access-date=1 May 2025 |website=The Verge |archive-url=http://web.archive.org/web/20251122143504/https://www.theverge.com/2025/1/21/24349031/bambu-3d-printer-update-authentication-filament-subscription-lock-answers |archive-date=22 Nov 2025}}</ref> The option still exists to disable the cloud service.
Once a printer is updated to the new firmware, users can still revert to previous versions that allows full control of the printer using LAN mode access key while signed into the cloud.<ref>{{Cite web |last=Hollister |first=Sean |date=22 Jan 2025 |title=Here’s what Bambu will — and won’t — promise after its controversial 3D printer update |url=https://www.theverge.com/2025/1/21/24349031/bambu-3d-printer-update-authentication-filament-subscription-lock-answers |url-status=live |access-date=1 May 2025 |website=The Verge |archive-url=http://web.archive.org/web/20251122143504/https://www.theverge.com/2025/1/21/24349031/bambu-3d-printer-update-authentication-filament-subscription-lock-answers |archive-date=22 Nov 2025}}</ref> The option still exists to disable the cloud service.


The manufacturer states this change is required for security, but community members note that many of the security vulnerabilities being addressed stem from Bambu's own cloud-centric design choices rather than inherent risks of local network control<ref name="bambulab-forum-134549/12">{{Cite web |date=14 Jan 2025 |title=Bambu Studio 1.10.2 Public Beta |url=https://forum.bambulab.com/t/bambu-studio-1-10-2-public-beta/134549/12 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum}}</ref>. The update forces users into using Bambu Connect middleware if they want to retain limited cloud functionality.
The manufacturer states this change is required for security, but community members note that many of the security vulnerabilities being addressed stem from Bambu's own cloud-centric design choices rather than inherent risks of local network control<ref name="bambulab-forum-134549/12">{{Cite web |date=14 Jan 2025 |title=Bambu Studio 1.10.2 Public Beta |url=https://forum.bambulab.com/t/bambu-studio-1-10-2-public-beta/134549/12 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum |archive-url=https://web.archive.org/web/20260223033127/https://forum.bambulab.com/t/bambu-studio-1-10-2-public-beta/134549/12 |archive-date=23 Feb 2026}}</ref>. The update forces users into using Bambu Connect middleware if they want to retain limited cloud functionality.


This can be characterised as a significant post-purchase reduction in functionality for existing owners who bought their printers with the understanding they could use third-party software and home-automation tools, but also only affects users actively choosing to use Bambu Cloud at the same time. The nature of the printer update is used to demonstrate how manufacturers can use software updates to unilaterally modify the capabilities of hardware products after purchase, although in this case the changes affect only people already choosing to use the cloud service<ref name=":4" />.
This can be characterised as a significant post-purchase reduction in functionality for existing owners who bought their printers with the understanding they could use third-party software and home-automation tools, but also only affects users actively choosing to use Bambu Cloud at the same time. The nature of the printer update is used to demonstrate how manufacturers can use software updates to unilaterally modify the capabilities of hardware products after purchase, although in this case the changes affect only people already choosing to use the cloud service<ref name=":4" />.
Line 188: Line 188:


==LAN mode and blocked internet access==
==LAN mode and blocked internet access==
At the time of writing user Tzeny15 on reddit, has authored a five step guide to blocking internet access for the Bambu P1S as a precaution in case the manufacturer attempts to limit functionality for printers without the newest firmware.<ref> {{Cite web |last=@Tzeny15 |title=LAN mode with live view, remote monitoring+control and blocked internet access - a five step guide |url=https://www.reddit.com/r/BambuLab/comments/1i4vp5i/lan_mode_with_live_view_remote_monitoringcontrol/ |url-status=live |access-date=1 May 2025 |website=[[Reddit]]}}</ref>
At the time of writing user Tzeny15 on reddit, has authored a five step guide to blocking internet access for the Bambu P1S as a precaution in case the manufacturer attempts to limit functionality for printers without the newest firmware.<ref> {{Cite web |last=@Tzeny15 |title=LAN mode with live view, remote monitoring+control and blocked internet access - a five step guide |url=https://www.reddit.com/r/BambuLab/comments/1i4vp5i/lan_mode_with_live_view_remote_monitoringcontrol/ |url-status=live |access-date=1 May 2025 |website=[[Reddit]] |archive-url=http://web.archive.org/web/20250310115818/https://old.reddit.com/r/BambuLab/comments/1i4vp5i/lan_mode_with_live_view_remote_monitoringcontrol/ |archive-date=10 Mar 2025}}</ref>


[[Bambu Lab LAN mode guide|Read the full guide here.]]
[[Bambu Lab LAN mode guide|Read the full guide here.]]
Line 205: Line 205:


===Re-engineering printer-control electronics===
===Re-engineering printer-control electronics===
ChazLayyd's Bambu Lab Klipper Conversion project is currently in an incomplete stage<ref>{{Cite web |last=@ChazLayyd |title=Running Klipper on a Bambu Lab machine by replacing it's internal electronics with readily available open-source hardware. |url=https://github.com/ChazLayyd/Bambu-Lab-Klipper-Conversion |url-status=live |access-date=1 May 2025 |website=GitHub}}</ref><ref>[https://discord.gg/W6B5mBejuC DhazLayyd's Discord Community]</ref>. While the project was not made in response to Bambu's announcement, there has been a wave of new public interest in this specific project. ChazLayyd's documentation instructs P1S owners to non-destructively remove the old control electronics that run Bambu's proprietary software and instructs P1S owners to install off-the-shelf control components so that the existing motor connectors and other critical electronics can communicate with the newly-installed off-the-shelf control components.  
ChazLayyd's Bambu Lab Klipper Conversion project is currently in an incomplete stage<ref>{{Cite web |last=@ChazLayyd |title=Running Klipper on a Bambu Lab machine by replacing it's internal electronics with readily available open-source hardware. |url=https://github.com/ChazLayyd/Bambu-Lab-Klipper-Conversion |url-status=live |access-date=1 May 2025 |website=GitHub |archive-url=http://web.archive.org/web/20251116182420/https://github.com/ChazLayyd/Bambu-Lab-Klipper-Conversion |archive-date=16 Nov 2025}}</ref><ref>[https://discord.gg/W6B5mBejuC DhazLayyd's Discord Community] ([https://web.archive.org/web/20260223033213/https://discord.com/invite/W6B5mBejuC Archived])</ref>. While the project was not made in response to Bambu's announcement, there has been a wave of new public interest in this specific project. ChazLayyd's documentation instructs P1S owners to non-destructively remove the old control electronics that run Bambu's proprietary software and instructs P1S owners to install off-the-shelf control components so that the existing motor connectors and other critical electronics can communicate with the newly-installed off-the-shelf control components.  


===Advocacy for open-ecosystem support===
===Advocacy for open-ecosystem support===
Line 230: Line 230:
*The requirement to manually export and import files through Bambu Connect creates additional labor
*The requirement to manually export and import files through Bambu Connect creates additional labor
*Integration with existing business systems and workflows becomes more difficult or impossible
*Integration with existing business systems and workflows becomes more difficult or impossible
*Professional users with more than 20 printers report the new workflow as "an absolute nightmare"<ref>{{Cite web |last=@drakko |date=16 Jan 2025 |title=Oh, the beta version. Luckily, I don’t allow new firmware on my machine, not until I see multiple validations from trustworthy users. So, in this respect I’m safe. Also, I never trust a beta version, no matter how reliable the releaser is. Thx for the clarification @Square3D . Appreciated. |url=https://forum.bambulab.com/t/this-new-auth-system-will-make-me-sell-my-printers/135400/4 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum}}</ref>
*Professional users with more than 20 printers report the new workflow as "an absolute nightmare"<ref>{{Cite web |last=@drakko |date=16 Jan 2025 |title=Oh, the beta version. Luckily, I don’t allow new firmware on my machine, not until I see multiple validations from trustworthy users. So, in this respect I’m safe. Also, I never trust a beta version, no matter how reliable the releaser is. Thx for the clarification @Square3D . Appreciated. |url=https://forum.bambulab.com/t/this-new-auth-system-will-make-me-sell-my-printers/135400/4 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum |archive-url=https://web.archive.org/web/20260223033245/https://forum.bambulab.com/t/this-new-auth-system-will-make-me-sell-my-printers/135400/4 |archive-date=23 Feb 2026}}</ref>
The solution to the above is not to sign the printer into the cloud. Keeping the printer signed in would be a security oversight in this use case on the part of the print farm.
The solution to the above is not to sign the printer into the cloud. Keeping the printer signed in would be a security oversight in this use case on the part of the print farm.


Line 249: Line 249:
==Customer reactions==
==Customer reactions==


Customer reactions have been overwhelmingly negative.<ref>{{Cite web |last=@hho |date=15 Jan 2025 |title=Improvements Introduce authorization and authentication protection mechanism: Bambu Studio now supports signing and encrypting control commands sent to printers when the printer supports authorization and authentication protection. The printer will determine whether the commands can be executed. Hmmm. This reads suspiciously vague. It could mean that Bambu printers get an onboard permission handling, so that you can “lock down” your printer and set what commands can be run. But it could also mean that Bambu printers in (or of?) the future will only run Gcode encrypted and signed by Bambu Studio… |url=https://forum.bambulab.com/t/bambu-studio-1-10-2-public-beta/134549/4 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum}}</ref><ref>{{Cite web |last=@iranintoavan |title=Firmware Update Introducing New Authorization Control System |url=https://old.reddit.com/r/BambuLab/comments/1i2psvz/firmware_update_introducing_new_authorization/ |url-status=live |access-date=1 May 2025 |website=Old Reddit}}</ref> Bambu Lab has historically pushed cloud-based printer interaction while offering limited LAN mode functionality<ref name=":4" />. Many customers argue that the security issues this locked-down firmware claims to address are actually consequences of the company's cloud-based design choices rather than inherent risks of local network control,<ref name="bambulab-forum-134549/12" /> which continues to infuriate users who are now told that security is the justification for a loss of freedom. As a result of the announcement of the shift, customer ratings on sites like Trustpilot rapidly dropped,<ref>https://www.trustpilot.com/review/bambulab.com?sort=recency ([http://web.archive.org/web/20251004104031/https://www.trustpilot.com/review/bambulab.com?sort=recency Archived])</ref> with many reviews citing the restrictions as the reason for the bad reviews.
Customer reactions have been overwhelmingly negative.<ref>{{Cite web |last=@hho |date=15 Jan 2025 |title=Improvements Introduce authorization and authentication protection mechanism: Bambu Studio now supports signing and encrypting control commands sent to printers when the printer supports authorization and authentication protection. The printer will determine whether the commands can be executed. Hmmm. This reads suspiciously vague. It could mean that Bambu printers get an onboard permission handling, so that you can “lock down” your printer and set what commands can be run. But it could also mean that Bambu printers in (or of?) the future will only run Gcode encrypted and signed by Bambu Studio… |url=https://forum.bambulab.com/t/bambu-studio-1-10-2-public-beta/134549/4 |url-status=live |access-date=1 May 2025 |website=Bambu Lab Community Forum |archive-url=https://web.archive.org/web/20260223033306/https://forum.bambulab.com/t/bambu-studio-1-10-2-public-beta/134549/4 |archive-date=23 Feb 2026}}</ref><ref>{{Cite web |last=@iranintoavan |title=Firmware Update Introducing New Authorization Control System |url=https://old.reddit.com/r/BambuLab/comments/1i2psvz/firmware_update_introducing_new_authorization/ |url-status=live |access-date=1 May 2025 |website=Old Reddit |archive-url=http://web.archive.org/web/20250403012526/https://old.reddit.com/r/BambuLab/comments/1i2psvz/firmware_update_introducing_new_authorization/ |archive-date=3 Apr 2025}}</ref> Bambu Lab has historically pushed cloud-based printer interaction while offering limited LAN mode functionality<ref name=":4" />. Many customers argue that the security issues this locked-down firmware claims to address are actually consequences of the company's cloud-based design choices rather than inherent risks of local network control,<ref name="bambulab-forum-134549/12" /> which continues to infuriate users who are now told that security is the justification for a loss of freedom. As a result of the announcement of the shift, customer ratings on sites like Trustpilot rapidly dropped,<ref>https://www.trustpilot.com/review/bambulab.com?sort=recency ([http://web.archive.org/web/20251004104031/https://www.trustpilot.com/review/bambulab.com?sort=recency Archived])</ref> with many reviews citing the restrictions as the reason for the bad reviews.


The shift raises privacy concerns as the restricted LAN mode functionality will now push more users into Bambu's cloud infrastructure for processing user print data, including file names and print settings.  
The shift raises privacy concerns as the restricted LAN mode functionality will now push more users into Bambu's cloud infrastructure for processing user print data, including file names and print settings.