- what the key is used for: signing critical operations, most notably print and gcode commands: https://git.devminer.xyz/archive/bambu-connect/src/commit/47ffeb

- what the key is used for: signing critical operations, most notably print and gcode commands: https://git.devminer.xyz/archive/bambu-connect/src/commit/47ffeb55ff45e198f74c69b0ca63ac3fca66c1c5/lib/mqtt-helper.mjs#L58-L76 https://git.devminer.xyz/archive/bambu-connect/src/commit/47..., list of known MQTT commands: https://github.com/Doridian/OpenBambuAPI/blob/main/mqtt.md https://github.com/Doridian/OpenBambuAPI/blob/main/mqtt.md - what the firmware does: verify these operations, meaning it can reject MQTT messages with an invalid/missing signature from third party software - the big flaw with that approach: by extracting the key, third party software can get full access again - improvement to security: none (that obfuscation layer doesn't prevent anything if the printer/cloud were vulnerable) authentication stays the same as before: https://git.devminer.xyz/archive/bambu-connect/src/commit/47ffeb55ff45e198f74c69b0ca63ac3fca66c1c5/lib/lan-mqtt.mjs#L40-L47 https://git.devminer.xyz/archive/bambu-connect/src/commit/47...