Open-source community mobilises against Bambu Lab over code dispute

The open-source 3D printing community has launched a coordinated campaign against Bambu Lab following a dispute with developer Paweł Jarczak over code that enabled remote control of the company’s printers without proprietary software. The conflict escalated after Bambu Lab sent a private message to Jarczak requesting the removal of his work, which the community interpreted as a threat. Jarczak subsequently removed his code from GitHub, prompting a backlash from prominent figures including Louis Rossmann and GamersNexus, who have pledged funds to support legal action and fork the code.

The Software Freedom Conservancy has initiated a project to reverse-engineer the software, citing alleged violations of the AGPL open-source licence. Bradley Kühn, a policy fellow at the Conservancy and father of the AGPL licence, argues that Bambu Lab’s proprietary networking plugin constitutes a violation because it shares intimate data communication with the open-source core. The Conservancy is hosting a project to serve as a watchdog and is attempting to raise funds to hire staff to address what it describes as AGPLv3 violations.

Bambu Lab has defended its actions, asserting that its proprietary networking plugin is separate from the open-source core and citing security concerns. The company stated that it does not agree the plugin is part of the “Corresponding Source” under the AGPLv3 license, describing it as a separately delivered optional component. Bambu Lab also claimed that Jarczak’s code impersonated its systems, potentially jeopardising cloud security, although it has not provided evidence of malicious activity or litigation to date.

Legal experts note that the interpretation of the AGPL licence remains uncertain, particularly regarding cloud services and dynamically linked subprograms. Kyle Mitchell, an independent tech lawyer, indicated that the AGPL does not clearly mandate sharing all web or cloud service code when a program is modified to work with such services. However, Heather Meeker, a prominent open-source licensing attorney, suggested that a plugin would generally be considered part of the corresponding source, highlighting the lack of definitive court precedent on these specific technical separations.

The standoff has drawn significant financial support from the community, with Rossmann and GamersNexus each pledging $10,000 to defend Jarczak and fork the code. The Software Freedom Conservancy aims to raise over $250,000 to support its efforts, while other advocates have halted purchases of Bambu Lab hardware. Jarczak has stated he did not attack the infrastructure and that the issue relates to server-side authorization rather than malicious intent, urging the company to address security vulnerabilities directly rather than threatening developers.