this post was submitted on 18 Jan 2025
48 points (92.9% liked)

3DPrinting

15954 readers
417 users here now

3DPrinting is a place where makers of all skill levels and walks of life can learn about and discuss 3D printing and development of 3D printed parts and devices.

The r/functionalprint community is now located at: or !functionalprint@fedia.io

There are CAD communities available at: !cad@lemmy.world or !freecad@lemmy.ml

Rules

If you need an easy way to host pictures, https://catbox.moe/ may be an option. Be ethical about what you post and donate if you are able or use this a lot. It is just an individual hosting content, not a company. The image embedding syntax for Lemmy is ![](URL)

Moderation policy: Light, mostly invisible

founded 2 years ago
MODERATORS
andypiper@lemmy.world
henry_rowengartner@lemmy.world
j4k3@lemmy.world
GrayBackgroundMusic@lemm.ee
48
Is anyone else concerned about internet-connected 3D printers? (lemmy.ml)
submitted 17 hours ago by jokeyrhyme@lemmy.ml to c/3dprinting@lemmy.world
16 comments fedilink hide all child comments
 

Howdy, folks!

I'm teetering on the brink of connecting my Sovol3D S06 ACE to my wireless network, but I'm pausing because this device can make physical real-world actions like:

  • record photos and videos using its built-in camera
  • shaking so much that it manages to knock itself on the floor
  • melting so much plastic that it dribbles all over itself and then all over everything around and beneath it
  • consume lots of electricity and cost me a fortune on my utilities bill
  • burn the house down

None of this happens in normal usage, of course, but watching it self-calibrate did make me wonder:

  • how safe the firmware is?
  • is it retrieving instructions from Sovol3D or some other party by itself?
  • is it sending records of my print jobs to a 3rd party?
  • is it sending photos and videos to a 3rd party?
  • how safe the firmware is once its receiving arbitrary network traffic?

All IPv4 traffic from the internet goes through a NAT/firewall that I conceivable control, but my devices all get public-facing IPv6 addresses, and the default SSH password on all of these printers is publicly-documented

It looks like the Sovol3D S06 ACE firmware is https://www.klipper3d.org/ + https://www.obico.io/ + some unknown amount of stuff that Sovol3D adds on top, and it doesn't seem like they've kept the public source code up-to-date: https://github.com/Sovol3d/SV06-ACE

I do already self-host https://www.home-assistant.io/ and plan to integrate the 3D printer with it, avoiding any cloud behaviour as much as possible, but I'm wondering if anyone else has already done this and has any advice on what to avoid?

Cheers! <3

you are viewing a single comment's thread
view the rest of the comments
[–] mlg@lemmy.world 4 points 16 hours ago* (last edited 16 hours ago) (1 children)

I thought the default firewall rule for IPv6 is to block all incoming traffic? At least it is on my hardware out of box.

Public facing IPv6 doesn't means its externally reachable, its just how IPv6 works because there is no need for NATing. You can quickly test it by trying to SSH to it to make sure its not reachable. Otherwise just add a firewall rule that block all incoming IPv6.

Anyway if you want to make sure it also doesn't connect to the internet, you could just do the inverse and MAC ban outgoing traffic or put it on a VLAN.

[–] muntedcrocodile@lemm.ee 2 points 13 hours ago (1 children)

The blockage of incoming traffic isn't particularly meaningful. The printer can connect out then establish a reverse connection from that.

[–] 4am@lemm.ee 1 points 5 hours ago* (last edited 5 hours ago)

That is no different from IPv4

EDIT: Also,

The blockage of incoming traffic isn't particularly meaningful.

lol. lmao, even.