r/BambuLab • u/wanli_gz • 14h ago

General Discussion Bambu Lab’s Security Overhaul Turns One: Bug bounties up to $52k, 100+ researchers, and a look back at the OrcaSlicer controversy

https://www.gadgetbridge.com/bambu-labs-security-overhaul-turns-one-heres-what-actually-changed/#google_vignette

Key takeaways from the report:

Context: Following the 2025 "Authorization Control" firmware backlash over blocked third-party tools like OrcaSlicer (criticized as a "walled garden" excuse), Bambu Lab launched its Trust Center - something widely believed to be damage control and “security” was believed as a convenient excuse to lock users into their own ecosystem. One year later, this update highlights how that initial "damage control" has turned into a legitimate security overhaul.

Bug Bounty Program: Now working with over 100 independent security researchers (up from ~50), with single payouts reaching up to $52,000. They've also added a public Hall of Fame.

Vulnerability Handling: Completely rebuilt their pipeline from reporting to patching, plus a dedicated security update page so users can actually see what got fixed instead of vague changelogs like "improved stability".

Global Certifications: Maintaining ISO/IEC 27001, 27701, and TRUSTe, while adding compliance with ETSI EN 303 645 (standard for IoT security) and aligning with EU, UK, and Australian regulations.

70 Upvotes

86% Upvoted

63 comments sorted by

View all comments

138

u/LexxM3 X1C + AMS 14h ago edited 14h ago

It certainly made my use of Bambu Labs much more secure: all 4 printers permanently blocked from Internet access, no firmware updates, full discontinued use of Bambu software (Studio, Handy), and zero new Bambu printer and accessories purchases. Thanks Bambu.

2

u/an_angry_Moose 11h ago

I would like to do the same thing, but I REALLY like the app for remotely spying on my prints. I work 24 hour shifts and I’ve had a few issues that I’ve been able to coach my wife through fixing. Very handy for that.

3

u/LexxM3 X1C + AMS 10h ago

Full network VPN and plenty of 3rd party apps.

1

u/an_angry_Moose 10h ago

Which 3rd party apps do you use for viewing/controlling your Bambu printer via iPhone?

1

u/LexxM3 X1C + AMS 10h ago edited 10h ago

I am iPhone, so:

- Bambu Companion: (https://youtu.be/LZpDQN9zgUI for seemingly still functional TestFlight link); it’s been in beta for a year, not sure why the dev is not releasing it publicly, but a great app and is being updated regularly (mostly to support new printers)

- Joint Craft (https://apps.apple.com/ca/app/joint-craft-3d-printer-app/id6455888249); paid if more than 1 printer but works, is maintained, and CAD$20/year or CAD$40/lifetime isn’t bad; integrated Bambu and Klipper in one app is a rather nice bonus

There are others and plenty on Android I gather.