this post was submitted on 18 Dec 2023
21 points (92.0% liked)

3DPrinting

15606 readers
200 users here now

3DPrinting is a place where makers of all skill levels and walks of life can learn about and discuss 3D printing and development of 3D printed parts and devices.

The r/functionalprint community is now located at: !functionalprint@kbin.social or !functionalprint@fedia.io

There are CAD communities available at: !cad@lemmy.world or !freecad@lemmy.ml

Rules

If you need an easy way to host pictures, https://catbox.moe/ may be an option. Be ethical about what you post and donate if you are able or use this a lot. It is just an individual hosting content, not a company. The image embedding syntax for Lemmy is ![](URL)

Moderation policy: Light, mostly invisible

founded 1 year ago
MODERATORS
 

Apparently some group has broken Bambus encryption.

Apparently, as he claims, the logs reveal not only (further) licensing issues with Bambu, they also apparently send the complete Model you want to print to Bambu, which would be a huge issue for any companies using them.

What do you think?
Anyone ever checked on the size of the logs? Does it make sense that they actually send the whole Model?

/e: clarification, apparently the logs do not get sent to bambu by default on every print (even while in LAN-Mode) as it can be understood here, but all of this info is in the logs you can manually choose to send to Bambu (i.e. in the case of an issue with a print(/er) bambu is reasonably likely to ask for this).

top 15 comments
sorted by: hot top controversial new old
[–] ERPAdvocate@sh.itjust.works 7 points 11 months ago (1 children)

Man you guys think this is bad? My partner bought a Cricut because they thought it would be good for quilting (fancy vinyl cutter) and its a locked down nightmare.

Proprietary software with no alternative, cloud upload required to print anything, even over USB connection... Oh and repair-ability, total nightmare with very little access to replacement parts, with Cricut regularly bricking older models as they reach EoL.

Sorry rant over lol

[–] charles@lemmy.ca 5 points 11 months ago (1 children)

As much as I love the projects I'm able to make with my Cricut, I know I won't be getting another one when it eventually dies. Cricut's software and approach to the customers is so awful.

Wish I'd heard about Silhouette before getting my machine but I've definitely learned my lesson now.

[–] Cris_Color@lemmy.world 5 points 11 months ago

Thanks for mentioning silhouette, I'll keep them in mind if I ever decide a vinyl cutter is something I ought to get :)

[–] AnonStoleMyPants@sopuli.xyz 6 points 11 months ago (1 children)

Yeah after reading about this I feel like this is nothing. Is it weird that the logs include stuff like sensor data of your printer? Or that they send the model? Isn't that the entire point of the help function and logging.

The open-source copyright violations are an issue though, should those be factual.

[–] TheYang@lemmy.world 1 points 11 months ago (1 children)

I don't think it's necesarrily nothing, as sending all of that data is so comprehensive it should be communicated clearly by bambu, and it seems (but I don't know!) That it isn't.
Sometimes you might want/need help and don't want to send everything.

For a lot of stuff partial gcode / sensor data around the issue should suffice for example.

But it sounded way worse before the clarification, when I understood that it was sending those logs all the time.

The open source license issues will be interesting, but probably irrelevant. We already can be rather sure that they already are in violation with BambuStudio and no one wants to spend the money to do anything about it.

[–] AnonStoleMyPants@sopuli.xyz 1 points 11 months ago

Sure yes I agree that it is shady and weird that they just don't say what data is being sent. Not really sure why they don't.

It's not that the data being sent is like too much or too in detail (though maybe WiFi ssid is unnecessary), it's just that the company is weirdly not being upfront about this.

[–] arc@lemm.ee 3 points 11 months ago (1 children)

I have a P1S and I don't really follow why it is necessary at all to send prints off to the cloud. Yes, it could be useful if printer and PC / app are on separate networks. But if they're on the same network then they should directly communicate.

[–] TheYang@lemmy.world 3 points 11 months ago (2 children)

It's not necessary.
At best it's because this way they don't have to differentiate between networks, and make the system a bit easier for Bambi themselves.
At worst they want to lock you into an ecosystem they want to build and steal a ton of models people make.

[–] arc@lemm.ee 2 points 11 months ago

I'm sure it's easier for them in a sense. I write software to control cloud based devices that are not adjacent to the caller and they use message based comms. But it's also an unnecessary overhead to upload a 70Mb file to the cloud and back down again. If I were writing this software I'd consider some shortcut mechanism where the send file action could be sent to the printer directly and only fallback to cloud if that was not possible. If for no other reason that saving myself money and general responsiveness. I'm sure it would be achievable by doing a UPnP scan of the local network and allowing the PC to talk to the printer if it possesses and sends an API key - much like Octoprint works. Also, local network probably helps for the camera which could just blast a feed out on UDP.

I'm not sure it helps them "steal" models because they probably have 100,000s of models passing through their system every day. It would be a wall of noise and random junk. And these aren't models in the CAD sense, but some STL meshes and print settings. It does give Bambu information about what filaments people are using and in what quantity, the frequency they print as well as geographic location. That might be useful for marketing. If a government was interested in a particular user, they could also see in retrospect what they were printing. e.g. if someone were printing gun parts then maybe there would be evidence of that in the cloud.

[–] dual_sport_dork@lemmy.world 2 points 11 months ago

And/or have the ability to tattle on users printing "naughty" items, once 3D printing technology inevitably starts getting regulated or banned by those types of people. You know which ones.

[–] tagginator@utter.online 2 points 11 months ago

New Lemmy Post: Making Awesome 166 - Bambu Lab, Segment about Bambu and decrypted Bambu Logs. (https://lemmy.world/post/9708925)
Tagging: #3dprinting

(Replying in the OP of this thread (NOT THIS BOT!) will appear as a comment in the lemmy discussion.)

I am a FOSS bot. Check my README: https://github.com/db0/lemmy-tagginator/blob/main/README.md

[–] KillerTofu@lemmy.world 2 points 11 months ago (1 children)

Don’t use the cloud print option if this is a concern.

[–] 0xd34d@sh.itjust.works 9 points 11 months ago (1 children)

What about the fact that LAN only mode also allegedly still sends logs and data?

[–] DoomBot5@lemmy.world 3 points 11 months ago

Clarification says it still logs, but doesn't send off the logs in LAN only mode.

[–] Mossheart@lemmy.ca 1 points 10 months ago

Video is private now. Anyone got a mirror?