The Bambu Lab X1-Carbon 3D printer at the center of the firmware controversy
Shenzhen-based 3D printer manufacturer Bambu Lab finds itself at the center of a heated debate following the announcement of a new firmware update for its X1 Series printers. The optional security update, which introduces authorization and authentication controls for key operations, has sparked intense discussion within the 3D printing community about the balance between security and openness.
Community Concerns
The announcement has drawn criticism from prominent figures in the 3D printing industry, including Josef Prusa, CEO of Prusa Research, who expressed concerns about the direction of the industry on LinkedIn. "Quite scary where the 3DP industry is moving – control of your data," Prusa stated, highlighting broader concerns about manufacturer control over user devices.
Nick Sonnentag, founder of concrete 3D printing firm Sunnyday Technologies, voiced similar concerns, particularly regarding the impact on third-party integration. "This is no small problem," Sonnentag noted on LinkedIn. "The capability to remotely monitor and stop the print not only saves money in wasted material but potentially ruined equipment."
Security vs. Openness
The controversy touches on a fundamental tension within the 3D printing community. Since Dr. Adrian Bowyer's RepRap project, open-source principles have been central to desktop 3D printing's development. This philosophy enabled companies like Prusa Research, UltiMaker, and MakerBot to emerge and innovate freely.
Bambu Lab maintains that the update serves legitimate security needs, citing previous incidents of remote hacking and printer exposure issues. The company has actively refuted what it calls "unfortunate misinformation," addressing various claims about printer disablement, restricted functionality, and mandatory subscriptions.
The Technical Details
The new firmware introduces authorization controls for several key operations:
- Firmware upgrades
- Printer binding and unbinding
- Remote video access
- Print job initiation via LAN or cloud mode
- Control of key printer parameters
To maintain third-party compatibility, Bambu Lab has introduced Bambu Connect, a new tool designed to integrate external software with updated printers. The company is actively collaborating with developers, including Orca Slicer, to ensure smooth integration.
Developer Response
The community's reaction has extended beyond criticism to active resistance. As reported by Hackaday, Reddit user hWuxH successfully extracted Bambu Connect's X.509 certificate and private key, demonstrating the community's determination to maintain open access to their hardware.
In response to print farm operators' concerns, Bambu Lab has introduced an optional LAN 'Developer Mode.' This feature allows users to maintain open MQTT channels, video live streams, and File Transfer Protocol (FTP) access, though at the cost of official support.
Geopolitical Context
The controversy has also sparked discussion about Bambu Lab's ties to Chinese investor IDG Capital, previously listed on the US Department of Defense's list of companies with Chinese military ties before being removed in December 2024. Some community members, including Prusa, have raised questions about these connections and their implications for user privacy.
Looking Forward
As the beta testing phase continues, the 3D printing community remains divided. While Bambu Lab emphasizes that the update is optional and designed to enhance security while maintaining third-party support, the incident highlights ongoing tensions between security requirements and open-source principles in modern manufacturing.
For many, the situation reflects broader industry challenges as 3D printing evolves from its hobbyist roots to a mature manufacturing technology. The resolution of this controversy may set important precedents for how future manufacturers balance security needs with the community's desire for open, hackable hardware.
"The capability to modify and control your own hardware remains central to the 3D printing community," notes Sonnentag. "Finding the right balance between security and openness will be crucial for the industry's future."