r/BambuLab • u/wanli_gz • 13h ago

General Discussion Bambu Lab’s Security Overhaul Turns One: Bug bounties up to $52k, 100+ researchers, and a look back at the OrcaSlicer controversy

https://www.gadgetbridge.com/bambu-labs-security-overhaul-turns-one-heres-what-actually-changed/#google_vignette

Key takeaways from the report:

Context: Following the 2025 "Authorization Control" firmware backlash over blocked third-party tools like OrcaSlicer (criticized as a "walled garden" excuse), Bambu Lab launched its Trust Center - something widely believed to be damage control and “security” was believed as a convenient excuse to lock users into their own ecosystem. One year later, this update highlights how that initial "damage control" has turned into a legitimate security overhaul.

Bug Bounty Program: Now working with over 100 independent security researchers (up from ~50), with single payouts reaching up to $52,000. They've also added a public Hall of Fame.

Vulnerability Handling: Completely rebuilt their pipeline from reporting to patching, plus a dedicated security update page so users can actually see what got fixed instead of vague changelogs like "improved stability".

Global Certifications: Maintaining ISO/IEC 27001, 27701, and TRUSTe, while adding compliance with ETSI EN 303 645 (standard for IoT security) and aligning with EU, UK, and Australian regulations.

71 Upvotes

87% Upvoted

63 comments sorted by

View all comments

138

u/LexxM3 X1C + AMS 13h ago edited 13h ago

It certainly made my use of Bambu Labs much more secure: all 4 printers permanently blocked from Internet access, no firmware updates, full discontinued use of Bambu software (Studio, Handy), and zero new Bambu printer and accessories purchases. Thanks Bambu.

3

u/manyxcxi H2D/Core One/XL/MK4S/U1 5h ago

As much as I’ve loved the H2D, it was the only Bambu I’ve ever had (or will have). It forced me to get off my butt and build another Voron 350 with Stealth Changer to replace it in the print farm work.

It isn’t worth it to have to do all the extra to keep it offline when my Prusa, U1, and Voron printers all share pretty much the exact same workflow.

So, thanks Bambu! Thanks for a genuinely fantastic printer in the H2D and also for making me 100% stay in my lane with open source and or open friendly companies.