You should blame anycubic for their mqtt server which allows any valid credential to connect and control your printer via the matt API. Let's just hope anycubic fixes their mqtt server.
Well that's smart...
this post was submitted on 29 Feb 2024
118 points (98.4% liked)
Technology
59697 readers
5159 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
I'm by no means a security specialist. But shit like this is the first thing I look for when I implement something. And then I organize a penetration test.
Buying a proprietary 3D printer with internet connectivity. What could possibly go wrong?
Going by the linked forum post, Anycubic has been aware of it for two months. Any competent FOSS project would have nipped that in the bud on the same day it was discovered. Incredible.
And bad actors could really do some damage if they can put a gcode file that is then printed
Maybe it crashes the head to damage it… or runs the extruder or bed at high temps outside what should be safely printed
'You can basically call me a printer god now'
Loving this.