Bambu private keys leaked less than 24 hours after announcement

2025-02-07T16:49:12Z

Alex: Created page with "In January 2025, Bambu Lab [https://blog.bambulab.com/firmware-update-introducing-new-authorization-control-system-2/? introduced an authorization control system] for its X1-series 3D printers, aiming to enhance security by restricting critical operations to authorized applications, notably their own "Bambu Connect" app. Shortly after this implementation, security researcher [hWuxH] successfully extracted the X.509 certificate and private key from the Bambu Connect ap..."

In January 2025, Bambu Lab [https://blog.bambulab.com/firmware-update-introducing-new-authorization-control-system-2/? introduced an authorization control system] for its X1-series 3D printers, aiming to enhance security by restricting critical operations to authorized applications, notably their own "Bambu Connect" app.

Shortly after this implementation, security researcher [hWuxH] successfully extracted the X.509 certificate and private key from the Bambu Connect application. The application, built on the Electron framework, employed obfuscation techniques to protect its code. However, these measures proved insufficient, allowing the de-obfuscation of the main.js file and the exposure of sensitive cryptographic materials. [https://hackaday.com/2025/01/19/bambu-connects-authentication-x-509-certificate-and-private-key-extracted/]

The swift extraction of these security credentials raised concerns within the 3D printing community regarding the effectiveness of Bambu Lab's security measures and the potential implications for user autonomy. In response to the backlash, Bambu Lab clarified that the firmware update was optional and emphasized their commitment to maintaining an open ecosystem. They [https://www.theverge.com/2025/1/21/24349031/bambu-3d-printer-update-authentication-filament-subscription-lock-answers introduced] a "Developer Mode" to facilitate continued use of third-party applications, acknowledging the community's desire for flexibility while balancing security considerations.

Filmora lifetime licenses terminated

2025-02-06T22:29:44Z

Alex: /* [Incident] */

''Wondershare, the company behind '''Filmora''', changed its licensing policy, causing controversy among users. Originally, '''lifetime licenses''' promised unlimited access to future updates. However, Wondershare later restricted these licenses, requiring users to pay for major updates instead.''

==Background==
''Information about the product/service history to provide the neccessary context surrounding the incident''

==''[Incident]''==
''In 2022, Wondershare altered its licensing terms, effectively invalidating the '''lifetime''' nature of these licenses. Instead of providing continuous updates, Wondershare restricted major upgrades (e.g., from '''Filmora 9 to Filmora 10''') to users with '''subscription-based''' plans or those willing to pay an '''additional upgrade fee'''. This decision led to a significant backlash from customers who had purchased a '''lifetime license''', believing they were entitled to all future versions at no extra cost.''

''Wondershare initially justified the change by claiming that the lifetime license only covered updates within the same major version (e.g., all updates within '''Filmora 9.x''' but not Filmora 10). However, this contradicted the original understanding many users had when purchasing the product.''

===[Company]'s response===
[https://x.com/Filmora_Editor/status/1609180413188096005 -]

[https://www.youtube.com/watch?v=OMIIwQZMFLE copyright strike] [https://www.youtube.com/watch?v=Xy1HiWGchMg&t=0s 2]

''If applicable add the proposed solution to the issues by the company.''

==Lawsuit==
''If applicable add any information regarding litigation around the incident here.''

=== Consumer Response ===

* '''Deceptive Advertising:''' Numerous users accused Wondershare of false advertising regarding the lifetime licenses.
* '''Erosion of Trust:''' Previous trust in Wondershare's products evaporated, leaving customers wary of future purchases from the company.
* '''Refund Requests:''' There was a significant demand for refunds from those who held "lifetime" licenses, claiming the product did not meet the expectations set by its marketing.

===Rebuttal===
''The response of the company or counterclaims.''
===Outcome===
''The outcome, if any, of the suit.''

==Consumer response==
''Summary and key issues of prevailing sentiment from the consumers and commentators that can be documented via articles, emails to support, reviews and forum posts.''

==References==
[https://www.youtube.com/watch?v=eKX0LjGBBqo Filmora/Wondershare is a bad company for more reasons than you think - YouTube]
[https://www.youtube.com/watch?v=bm90xW40c3A Filmora Just CANCELLED our Lifetime Licenses.]
[[Category:''Name of associated product, service, website, software, product line or company goes here'']]

Consumer Rights Wiki - User contributions [en]

Bambu private keys leaked less than 24 hours after announcement

Filmora lifetime licenses terminated