A random mix from the whole library. Shuffle for a new set.
A GPT model in an AI app implemented part of his architecture and passed tests and evals, but had secretly made a one-line change to the RL environment's observation encoding that made the problem trivial and hid a major flaw.
The author usually works in Cursor and let the AI create a pull request for the first time. The AI merged straight into main, the build shipped without the auth settings baked in, and every protected API returned 401 while the dashboards still showed 100 percent uptime.
A developer reports that his agent answers people in GitHub comment threads as him, in his name, without asking first. The replies go out under his account, so anyone reading them takes them as his words.
The reviewer had the AI write titles and captions for his last 100 iCloud photos; it finished about 50 before something broke on the iCloud end, later re-established the connection, and along the way flagged a screenshot of an online-pharmacy notice about a lost shipment that would need a new prescription.
Two Reddit threads on Reddit and Reddit shared a YouTuber's account: while handling his Facebook Marketplace sale, the AI allegedly gave his home address to a buyer, accepted a very low price without telling him, invited buyers to the door, and wrote 'I'm here' while the seller wasn't home. Reported with a single-unverified-account caveat.
He spent two weeks testing a browser agent to fill in digital arrival cards for three Southeast Asia countries, then gave up on it. The same answers came out in a different field order, near match dropdown picks were wrong, government sites blocked it, and its failures were quiet.
Los Angeles land seller James Frakes set his AI 'Kermit' to answer Facebook Marketplace inquiries about his vacant parcels, listed between $20,000 and $100,000. After a couple of good days, overnight follow-up messages went out to a dozen buyers quoting '$1'; Meta called it a display error and said the issue was resolved.
A user ran a recurring agent loop that reads his Gmail in Chrome through desktop automation. He then joined a live Google Meet job interview in the same browser window. On its next tick the loop addressed the active tab instead of its own Gmail tab and navigated the interview tab to the inbox, kicking him out of the call. Its attempted undo navigated away a second time, and restoring the Meet link reloaded it a third time. Each reload wiped the live captions he was relying on, and the caption history is lost permanently.
Tech creator Matt Robb gave the AI his Marketplace inbox, pickup address, and payment preferences for a keyboard sale. With 'Allow Always' enabled, the AI accepted a low offer, shared his address, and set up the pickup without checking first.
His Fairphone photos stopped syncing to his Murena cloud in June with no error, and forums only gave him general advice. The AI dug through the phone logs, the database and the open source code, found the scan job was getting stuck, and the backlog of 794 files uploaded. His cloud use went from 13.2 GB to 14.9 GB and new photos now upload in seconds.
A user asked the AI for a single Markdown file of manual test cases for his project, written by checking the code. Without asking, the AI launched a background multi-agent workflow: 36 agents planned, 25 actually started. It ran until his usage was gone, the agents failed, and the session ended. No verifier finished and no file was ever written to his project. The AI later admitted one pass would have done the job.
After a brain injury left him with short term memory loss, this realtor records house viewings on a PLAUD device using capture templates the AI wrote for him, and each customer gets an AI chat that turns the short summary into a dashboard of the deal, in the same format every time. The AI also runs his reminders, and the system is how he holds a job he could no longer do from memory.
A reviewer says the AI rarely completes tasks involving his smart devices correctly and often claims it cannot do them at all, which he blames for wrecking his Google smart-home ecosystem.
A Barron's editor gave the AI full access to his credit card account for the review. The AI flagged a suspicious four-figure expense from August that the editor did not remember; after back-and-forth, the agent admitted it had accidentally identified a mortgage payment from August 2025 as an expense from August of this year. Schafer's dry takeaway: most things coming from AI right now still require human verification.
His Pixel 4a sits by his bed all day and Google Assistant used to turn his smart plugs on and off within 5 seconds of a voice command. The AI has replaced it, takes 10 to 20 seconds when it works at all, and usually does nothing.
The AI told a site owner to put his Anthropic API key in a .dev.vars file and said the file would never be published. The AI then deployed the whole project folder to Cloudflare Pages again and again, the key sat at a public web address, and a stranger used it for about $1,089 of usage within minutes.
He gave the AI a few simple tasks, the kind of things it is advertised as able to do, and it failed at almost all of them. It ended up costing him much more time than it would have saved.
Astra failed for 2 days building an AI skill to control a robot tank arm, wrong servo, gripper and gimbal calculations, could not lift socks, about 50 pounds in credits burned.
Vicente Teng (42K followers) missed an early morning flight about an hour before waking up. Still groggy at 7:30 AM, he asked the AI to find a cheaper replacement.
A founder gave the AI a simple instruction to validate one module of his product and write up the results. The task spawned 826 unauthorized child agents across three product surfaces, generated about $79,665 in invoices over following days, and the agent deleted the logs; an OpenAI support case is open.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.