Reverse engineering Bambu Connect: Difference between revisions

to remove or not to remove the key, that is the question
claude rewording
Line 2: Line 2:
Bambu Connect is an [[Help:Electron|Electron]] App with [[Security Through Obscurity]] principles, hence it is inherently insecure.<noinclude>
Bambu Connect is an [[Help:Electron|Electron]] App with [[Security Through Obscurity]] principles, hence it is inherently insecure.<noinclude>
{{GuideNotice}}
{{GuideNotice}}
The purpose of this guide is to describe how easy it is to disprove Bambu Lab's argument that the reason for Bambu Connect's existence is due to security concerns, by showing people how easy it is to reverse-engineer the application and retrieve the keys used for communicating with the device.
The purpose of this guide is to demonstrate the trivial process of extracting the ''"private keys"'' used for communicating with Bambu devices to examine the technical basis for Bambu Lab's security justification of Bambu Connect.


To read the main.js for further analysis or extracting the private key stored by Bambu in the app:
To read the main.js for further analysis or extracting the private key stored by Bambu in the app: