Episode 6: Bambu-zled

What we cover

• Breaking down the recent controversy involving Bambu Lab and an OrcaSlicer fork, and the ramifications Bambu's actions.
• The CopyFail and DirtyFrag kernel vulnerabilities and the merits of responsible disclosure in an era when AI can discover vulnerabilities faster than they can be patched.
• Adam shares his experience at a fully off-grid compound in California and the crew draws parallels between off-grid living and self-hosting.

First up, a fired-up Geoff provides details on the recent kerfuffle between Bambu Lab and the open source community. We also go into some of the background of how this is not Bambu's first such controversy. We discuss what exactly the developer of the open source fork of OrcaSlicer did, Bambu's completely off-the-mark handling of the situation, and the open source world's fierce backlash in response.

Next, we talk about the CopyFail (CVE-2026-31431) and DirtyFrag (CVE-2026-43284/43500) Linux kernel privilege escalation vulnerabilities that were recently discovered in part by AI. That discussion leads to a more general discussion about the responsible disclosure model in a world where vulnerabilities are being found and reverse-engineered faster than ever.

Finally, Adam chats with us about his experience at an off-grid, solar-powered compound in California. We discuss the parallels between off-grid living and self-hosting software and owning your own infrastructure, and whether HomeAssistant is up to the task of managing critical off-grid systems.

Topics: 3D printing, Bambu Lab, OrcaSlicer, open-source licensing, Linux kernel CVEs, AI security research, responsible disclosure, off-grid living, self-hosting, HomeAssistant.

Links

• Bambu/OrcaSlicer:
  • https://github.com/jarczakpawel/OrcaSlicer-bambulab
  • https://blog.bambulab.com/setting-the-record-straight-on-cloud-access-and-community/
  • https://www.youtube.com/watch?v=jIbpQtoz6hs
  • https://www.jeffgeerling.com/blog/2026/bambu-lab-abusing-open-source-social-contract/
  • https://gamersnexus.net/fk-you-bambu-lab
• CopyFail/Dirty Frag:
  • https://en.wikipedia.org/wiki/Copy_Fail
  • https://blog.mozilla.org/en/privacy-security/ai-security-zero-day-vulnerabilities/
  • https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/
  • https://arstechnica.com/security/2026/05/linux-bitten-by-second-severe-vulnerability-in-as-many-weeks/
  • https://thehackernews.com/2026/05/linux-kernel-dirty-frag-lpe-exploit.html
• https://tailscale.com/events-webinars/toronto-tech-week-tailscale-meetup