Open Source Licensing and Alleged Violations
The 3D printing community is currently embroiled in a heated debate following Bambu Lab's decision to pursue legal action against an independent OrcaSlicer developer. In the center of this discourse is Josef Prusa, CEO and founder of Prusa Research, who has long championed open-source development. Prusa contends that major 3D printing manufacturers, including Bambu Lab, have been violating the PrusaSlicer AGPL-3.0 license since their inception.
The AGPL-3.0 is a robust “copyleft” license designed to ensure that derivative works remain open-source. Prusa argues that while Bambu Lab’s fork of his software is technically permitted, the inclusion of a proprietary, closed-source networking plugin constitutes a direct violation. “You take from the community, you give back to the community. That's the social contract,” Prusa stated, emphasizing that the networking component is essential to the software's functionality, thereby making the entire package subject to the license.
The “Black Box” Security Concern
Prusa’s criticism extends beyond legal compliance into the realm of cybersecurity. He warns that the Bambu Studio networking plugin acts as an un-auditable “black box.” Unlike the core open-source software, this plugin is downloaded via a content delivery network (CDN) and can be updated remotely without user intervention. Prusa highlights the danger of this architecture, noting that the software resides on computers used for sensitive R&D, prototype development, and defense-related projects.
Geopolitical Risks and Data Privacy
The core of Prusa's warning relates to the regulatory environment in China. He points to a series of five laws enacted between 2017 and 2023 that mandate citizen cooperation with intelligence gathering and require the disclosure of encryption keys to the state. According to Prusa, this framework creates a system where companies are legally bound to assist government agencies, potentially exposing industrial data to surveillance.
«Together they describe a system with no neutral exits. Cooperation is required, encryption is real, but the spare keys live at the ministry, jurisdiction follows the company across borders, industrial data is in scope, and discovered vulnerabilities flow to an intelligence agency,» Prusa explained.
Strategic Importance of 3D Printing
Prusa believes that the Chinese government has a strategic interest in the 3D printing sector because of where these machines are deployed. He points out that they are frequently found in locations where intellectual property is generated, such as university labs, hardware startups, and defense contractor facilities. Because the slicer software must interact with the user’s computer to process files, it gains significant access to sensitive project data. Prusa suggests that these concerns are not limited to 3D printing, but may also apply to other technologies, including AI coding models, cameras, and connected vehicles.