6 things to do with all those Benchy models you’ve 3D printed


The humble Benchy has become a rite of passage for many new 3D printer owners, even though benchmarking modern 3D printers isn’t strictly necessary. But let’s say you’ve assembled a small armada of these toy boats, and now you’re wondering what to do with them.

Here are some ideas.

Benchy Shipping Co board game

Or use Benchy in other board games

Benchy Shipping Co is a “whimsical yet strategic” board game for two to four players, with each player requiring 30 Benchy pieces. Though it feels like a solution to the problem of having too many toy boats, for many it will require more Benchy models than you’ve probably accrued.

It will also need to be obvious which Benchy pieces belong to which player. Since your boats are probably different colors and filaments, you could use a system of stickers or something similar to achieve this. Once you’ve printed the board game with its 20 port city destinations, you’ll need to roll a dice to collect boats and then place these boats onto the map to form a shipping route.

The game is inspired by other route-building games, but you could also turn your Benchy into a player piece for other board games like pawns in chess or Monopoly pieces. If you need a dice, you could create a press and recycle your old PLA.

Keyrings

Benchy is keyring-ready

The Benchy keyring in hand. Credit: Tim Brookes / How-To Geek

Did you know that the hole at the bow of a Benchy (that’s boat lingo for front) has a hole that perfectly accommodates a keyring? I didn’t until I tried it, but it works surprisingly well for keys that mostly remain in the same static location (since Benchy makes for quite a large keyring).

Did I scratch the hull a bit putting the keyring on? Sure. But you’re probably more careful than me.

Practice sanding

Make your Benchy silky smooth

Benchy and sandpaper. Credit: Tim Brookes / How-To Geek

Did you know you can sand your 3D printed models? Doing so is a great way to reduce the visibility of layer lines, and Benchy is a particularly good model on which to practice given its focus on unsightly stepped top layers and potential for ghosting on the hull.

Practicing on an item like this before you commit sandpaper to filament on a “real” print gives you a chance to make mistakes and get comfortable. The general consensus on sanding 3D prints is to start with a moderately coarse grit (around 80) and then move on to fine grits (120) through to very fine (220) to get a smooth finish.

Just be careful that you wear a mask and avoid sanding filaments that contain carbon fiber.

Experiment with priming and painting

Not just paint but technique

Rust-oleun self-etching spray primer. Credit: Rust-oleum

3D printers are a popular way to produce figurines, models, and miniatures. PLA also happens to be very paint-friendly, but for best results you should use a primer first. A popular choice is spray-on automotive primer, which can also help fill and hide layer lines.

Once you’ve primed, you should be good to paint with cheap acrylics (including sprays) or fancier model paints. Experiment with techniques to get your models looking exactly how you want, especially if building a miniature army is one of your main reasons for owning a printer.

If you’re terrible at painting miniatures (like I am), this is a great opportunity to try things out and follow community paint guides for achieving specific looks (like weathered and battle-worn tabletop units). When you’re done, you’ll have a much more interesting Benchy to sit on your desk.

Turn them into a Mecha Benchy

What do you call six Benchys in a trench coat?

Mecha-benchy by Garfield on MakerWorld. Credit: Garfield / MakerWorld

It’s not exactly practical, and it’ll cost you another 36g of filament (which is like, one whole Benchy), but the combined robot Benchy is a pretty fun idea. It uses the “existing holes, protrusions, and recesses of the Benchy bodies” to bring everything together in the form of one big robot.

If all you’re doing is leaving your toy boats on the desk, or littering the space directly next to your 3D printer, this is a much more fun way to collect dust. Benchy is a standard print and so all the parts should fit (with tight tolerances, according to the uploader). That said, your mileage may vary depending on print settings and filament, so a thin layer of tape can help close the gap if things aren’t as snug as you’d like.

Give them to kids

At least someone will appreciate the boat

A benchy boat on the print bed of the Elegoo Centauri Carbon. Credit: 

Sydney Louw Butler / How-To Geek

Kids love plastic tat; just look at how popular articulated 3D printed dragon slop is. While the Benchy doesn’t actually float, it might still make a decent distraction for a child. You’ve already created some waste plastic; someone might as well get some enjoyment out of it!

Just be aware that the chimney on the top of your Benchy could pose a choking hazard for very young children if it breaks off. Given the gray area that is PLA safety, you might want to avoid giving it to anyone who might put it anywhere near their mouth too.


Next time you buy a new printer, skip the Benchy and print one of these instead.



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Pierluigi Paganini
May 25, 2026

Threat actors are actively exploiting a security flaw, tracked as CVE-2026-26980, in Ghost CMS that was fixed months ago in real attacks against unpatched websites. According to Qianxin, the campaign has already affected more than 700 sites, including well-known organizations and universities.

The vulnerability is an SQL injection issue in Ghost’s Content API that can let an attacker read data from the database without logging in. In the worst case, this can expose the Admin API key, which can allow attackers to take over the site.

That key matters because it can be used to change published content. In this campaign, attackers used it to edit articles on compromised Ghost sites and insert malicious JavaScript at the end of pages. The goal was not just defacement, but to turn trusted websites into launch points for further malware delivery.

“After an in-depth investigation and analysis, we determined that this was not a targeted intrusion against the customer, but rather a large-scale poisoning campaign by an in-the-wild attack group targeting Ghost CMS. Although CVE-2026-26980 was publicly disclosed as early as February 19, a large number of users did not patch and upgrade in time, providing an opportunity for attackers.” reads the advisory published by Qianxin. “At least two groups are currently actively conducting such poisoning operations, and some sites have even become the target of competition between the two parties, with different malicious code being implanted one after another within a single day.”

The inserted code led visitors through a two-step chain. First, the page loaded a remote script that checked the browser and decided what the visitor should see. Then real victims were redirected to a fake verification page that looked like a normal “I’m human” check.

This is where the ClickFix part began. The page told users to press Windows+R, paste a command, and hit Enter. In practice, that command downloaded and started a malware payload on the victim’s machine. It was a classic social engineering trick: make the user do the dangerous part themselves.

Qianxin says the first signs of this activity appeared in early May. The malicious code found in the campaign had a compilation date of February 16, the same day Ghost announced the fix for CVE-2026-26980. That suggests the attackers moved quickly once they saw how many sites had not been updated.

The affected websites cover a wide range of sectors. Roughly half are personal blogs or independent sites, but the list also includes technology blogs, AI sites, media outlets, crypto projects, and educational institutions. Qianxin researchers say victims include sites linked to Harvard, Oxford, and DuckDuckGo.

The attack chain was also designed to be flexible. The loaders could fetch different payloads depending on the target, and the operators changed infrastructure several times.

“entire attack process has obvious five-stage characteristics of “CMS Takeover → Page Poisoning → Two-stage Loading → Social Engineering Lure (FakeCaptcha/ClickFix) → Malware Delivery”, and the entire process is highly automated: bulk vulnerability scanning → automatic key extraction → bulk injection → dynamic C2 distribution.” states the report.

In some cases, they switched domains after detection, keeping the campaign alive even when part of the chain was blocked.

“Through feature scanning of publicly accessible pages, we have cumulatively identified more than 700 poisoned victim domains, and have proactively contacted the sites for which contact information could be obtained, notifying them of the poisoning.” continues the report.

Qianxin also believes at least two different groups are involved. In some cases, the same site was hit more than once, with one attacker replacing the code left by another. That makes the campaign harder to clean up and shows how attractive compromised Ghost sites have become for abuse.

For site owners, the advice is straightforward. Ghost should be updated immediately, all credentials should be rotated, and site logs should be reviewed for suspicious admin API activity. Any injected scripts should be removed from the database itself, not just from the visual editor. Visitors who may have reached a poisoned site should also be warned.

The report includes Indicators of Compromise (IoCs) for the attacks observed by the researchers.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Ghost CMS)







Source link