Mastodon Feed
...and less than 24 hours later, the BambuConnect app has been de-obfuscated, including Bambu's private key to sign HTTP requests.
https://hastebin.skyra.pw/pufugimoye.js
So much for their laughable security claims.
Mastodon FeedMastodon Feed