Bambu Lab is accused of abusing the open source social contract by repackaging closed-source components as open-source modules and exploiting loopholes in licensing agreements.
Overview
The issue arose when a developer created a fork of OrcaSlicer, called OrcaSlicer-bambulab, which allowed users to use their printer's features without routing prints through Bambu's cloud. Bambu Lab threatened the developer with legal action, claiming the fork used an impersonation attack.
What it does
The OrcaSlicer-bambulab fork worked by injecting falsified identity metadata into network communication, pretending to be the official Bambu Studio client when communicating with Bambu's servers. Bambu Lab claims this creates a structural vulnerability, allowing thousands of clients to simultaneously hit their servers while impersonating the official client.
Tradeoffs
The developer of the OrcaSlicer-bambulab fork rejects Bambu Lab's characterization, stating that they used Bambu Studio's upstream code verbatim. The incident has sparked criticism of Bambu Lab's approach to open source software development and their treatment of power users. In conclusion, the incident highlights the importance of transparency and trust in open source software development. Bambu Lab's actions have eroded trust among some users, who may consider alternative options. As one commentator suggested, spending a little more for a printer from another company might be a better option.