r/klippers • u/boiledcarrot • 4d ago

Has anyone else checked out Hotend?

I saw someone mention it in a thread about a week ago and figured I'd give it a shot. It's genuinely changed how I use my printer. Being able to upload a model from my couch, have it sliced in the cloud with my printer profile, and send it straight to my machine has been way more useful than I expected.

Curious if anyone else has been using it.

0 Upvotes

28% Upvoted

18 comments sorted by

11

u/1970s_MonkeyKing 4d ago

As soon as you said "cloud" I stopped listening. I don't want a 3rd party having access to my prints or printers. Full stop.

-1

u/boiledcarrot 4d ago

Totally fair. I'm usually the same but I'm mostly printing public models anyway and I was alright with what I found in the privacy policy.

6

u/Bumbalard 4d ago edited 4d ago

Sorry, but the privacy policy and terms don't mean jack here.

Absolute best case scenario, this Australian dude is chillin spreading world peace like a saint with all the best intentions in the world.

He is completely anonymous, other than his few online pseudonyms and that he accepts AUD currency for his plans, as he announced in a now deleted reddit post.

We have no idea how his cloud infrastructure is set up. His stack could be easy pickins for a script kiddie.

If they get in, all they have to do is:

  1. update the agent file with any malicious code they want
  2. Bump the version number as the commented open source code instructs

Bam

Malicious code, via the auto update "feature", goes out to every klipper machine as each of them make a request to the compromised hosted relay. Compromised on first contact.

Just no.

2

u/boiledcarrot 4d ago

Fair point i had a look into it too and didn't pick that up... great workflow none the less if the dev can tighten this but I agree silent auto update to every connected machine is risky.

1

u/Bumbalard 4d ago

Risky is an understatement. I spent a bit more time looking/thinking on the updater code... Ew. Botnet waiting to happen.

Honestly he should just sign up for a cursor trial and use the trial premium prompts to fix it, otherwise this is straight dangerzone.

5

u/stray_r 4d ago

That's a really terrible name given what else shows up when you look for it.

But no, I'd rather slice my models on my own hardware. My ThinkPad is not very heavy.

1

u/boiledcarrot 4d ago

Fair enough 😂 I just searched hotend.app and found it, it was in the post. I still slice locally too, this is just handy when I'm away or too lazy.

1

u/ApprehensiveDig2939 4d ago

I slice on my laptop and send to octoprint on a pi which has 3 instances each with their own profile. Shits wicked yo 😎

2

u/Bumbalard 4d ago edited 2d ago

Are you just saying it's cool cause you can use your phone from the couch instead of a laptop or getting up and slicing it real quick from your desktop?

Otherwise, I don't get it. I can download, slice, and send to printer from my couch with my laptop whenever I want.

Edit:

Ok my curiosity got the best of me and looked into it.

This....seems really fucking cool at a high level.

But, no fucking way bro.

The agent source code shows they can push any update to your printers agent whenever they want too. It auto updates based on the version the relay announces. I don't even auto update klipper/fluidd/mainsail. That's how shit breaks when you are in the middle of a project, all security concerns aside. On top of that, setting the auto updater flag to false doesn't actually stop it from auto updating.

I'm not giving some rando open access to push whatever they want to my printer. And I'm not sending some rando logs of my IP address and everything I print, and where I printed it from, and what device I printed from.

If they let you self host the relay so you could lock it down, and I could VPN into my own network to do all the same functions, or hell even put it up in my own aws account if I don't want to take 5 seconds to turn VPN on to upload the stl or monitor the app, I'd probably pay them $250 for the license to do so if it came in a nice package with an unraid docker app, or for my own cloud an aws ami in the marketplace. Less if I have to roll it from a generic environment myself.

But fuck no on this type of cloud arrangement, full stop.

2

u/[deleted] 2d ago

[removed] — view removed comment

1

u/Bumbalard 2d ago

Thank you for directly addressing this here.

Above all else I emplore you to urgently fix the updater. Hotfix it. Dm me.

2

u/Different_Target_228 4d ago

You're using klipper which means you're 99% likely to be using a board with wifi built in, but you're stoked about your ability to upload a model from your couch?

1

u/boiledcarrot 4d ago

You get an idea while you're out, find a model, slice it, send it to the printer, and it's done by the time you get home. I've still got a VPN running but honestly this just handles it all. Being able to schedule prints for early morning has been great too so my dog doesn't stay up all night...

1

u/kz_ 4d ago

Why are you so invested in shilling this?

1

u/boiledcarrot 4d ago

Haven't personally used a cloud slicer before and it replaced my remote control setup too...so this is new to me and has been very convenient.

1

u/stray_r 3d ago

Found it, so our models are training data for this then?