Howdy, folks!

I’m teetering on the brink of connecting my Sovol3D S06 ACE to my wireless network, but I’m pausing because this device can make physical real-world actions like:

  • record photos and videos using its built-in camera
  • shaking so much that it manages to knock itself on the floor
  • melting so much plastic that it dribbles all over itself and then all over everything around and beneath it
  • consume lots of electricity and cost me a fortune on my utilities bill
  • burn the house down

None of this happens in normal usage, of course, but watching it self-calibrate did make me wonder:

  • how safe the firmware is?
  • is it retrieving instructions from Sovol3D or some other party by itself?
  • is it sending records of my print jobs to a 3rd party?
  • is it sending photos and videos to a 3rd party?
  • how safe the firmware is once its receiving arbitrary network traffic?

All IPv4 traffic from the internet goes through a NAT/firewall that I conceivable control, but my devices all get public-facing IPv6 addresses, and the default SSH password on all of these printers is publicly-documented

It looks like the Sovol3D S06 ACE firmware is https://www.klipper3d.org/ + https://www.obico.io/ + some unknown amount of stuff that Sovol3D adds on top, and it doesn’t seem like they’ve kept the public source code up-to-date: https://github.com/Sovol3d/SV06-ACE

I do already self-host https://www.home-assistant.io/ and plan to integrate the 3D printer with it, avoiding any cloud behaviour as much as possible, but I’m wondering if anyone else has already done this and has any advice on what to avoid?

Cheers! <3

  • sic_semper_tyrannis
    link
    fedilink
    English
    arrow-up
    1
    ·
    15 hours ago

    It’s not always illegal to make your own firearm (country depending), you just have to be aware of how to register or serialize it.