Bambu Connect’s Authentication X.509 Certificate And Private Key Extracted
Hot on the heels of Bambu Lab’s announcement that it would be locking down all network access to its X1-series 3D printers with new firmware, the X.509 certificate and private key from the Ba…
Pretty solid how to by Louis:
https://wiki.rossmanngroup.com/wiki/Reverse_Engineering_Bambu_Connect
You gotta love how quickly Bambu Lab got their ass handed to them.
Also, they're really testing the Streisand effect with this one: talk about bad publicity when even people who don't know the first thing about 3D printing knows you're a shitty 3D printer maker...
Pretty solid how to by James TDG 😉 Louis shouldn't be given the credit here
Being willing to host the platform that will rub manufacturers the wrong way and will absolutely net a lawsuit or two is worth giving some credit for.
The person who researches and identifies the key deserves some. The person who writes the guide to publish it on the site deserves some.
Everyone involved deserves credit for their part.
And there’s the issue with embedded security stuff.
And this simple security flaw was humorously left alone until they clamped down on sane use of customers printers.
It reminds me of what happened to the PS3. Sony shipped them with an option called "other OS" that was a full Linux install. Tons of enthusiasts and orgs, including Universities and the USAF, used this to turn hundreds of PS3 into computer clusters for research or to do other interesting things.
Well, about 3 years in, Sony decided to just disable that feature out of the blue. They were of course sued and lost millions because of it, but the fun part is that up to that point, for literally 3 years, they had no piracy on the console. It had a semi novel protection scheme that no one had hacked, a point they touted proudly. Well, about a week after that, geohot, a hardware hacker, broke this scheme specifically because they disabled "Other OS," which allowed piracy on the console.
Its almost like pissing off your deeply technical user base in the name of enshittification can backfire.
LETS GO! this is why i love makers and open source
Not enough to buy from them tho.
(Mod) Posts will remain pinned for ~1 week, lest OP requests otherwise.
Fine by me.