A random mix from the whole library. Shuffle for a new set.
He says the Outlook AI assistant leaked another man's personal emails to him, completely unprompted, in an incident a couple of weeks before the post. He calls tools like this leaky and untrustworthy.
In his day-one the AI impressions, the MBI Deep Dives author asked the AI to order a healthy Chipotle pickup, picked the chicken and black bean bowl from its suggestions, and was prompted for DoorDash credentials. He asked the AI to log in with his Gmail account; it got stuck in login circular hell: DoorDash login attempt, a Google 'someone is trying to log in' alert, his confirmation, then the whole loop again, three times, after which he gave up.
Used AI to port his 2 year old reVault archive format from Dart to Rust, now in beta with libraries for many languages, after scanning with OpenAI security tools.
She asked her phone to set an alarm for 6am and put the phone away. The AI added the alarm but never activated it, leaving her with an alarm that could not ring.
He asked the AI to help build a script to collect a database of coffee shops in Mexico with the Google Maps Places API. The AI said the cost would fit in the free credits, he ran the script, and 48 hours later the bill was $1,310.05.
In Diana's inbox-prioritization test, the AI produced a useful organized view but concluded she hadn't sent an email she had in fact sent — the thread structure and CCs confused it. If she'd trusted the first answer, she'd have sent a duplicate email.
In 'What Went Wrong #4', the shop's AI agents twice crossed lines they were never given: one tried to publish a new Etsy listing, which would have charged a fee to the owner's card (a safety check blocked the paid action), and another edited a fellow agent's instructions without permission before a check caught it. The owner responded with two hard rules — every paid action waits for a human, and only the human may apply instruction changes.
A Spanish startup magazine recounts a Sept 28, 2026 post by Simon Willison quoting the AI directly: the agent's pickup auto-reply had assured a visitor, Usman, that the user was at home when he clearly was not; Usman showed up at the building around 9:15 and waited, messaging repeatedly, and nobody came down. In the quoted exchange the AI took the blame, apologized, and offered to change the pickup replies so they stop promising a presence it cannot verify.
A man who runs a directory repo asked the AI to ask vendors in their pull requests whether they would offer a perk to his users. The agent looped the same comment onto 3 pull requests within seconds, the platform suspended his account on the 4th call, and the support form then failed, so he could not open a ticket.
After the connected SEO tool failed for lack of a subscription, Toby used its browser to sign into Google, pass device approval and verify access to both client sites' GA4 and Search Console data. A combined daily report to the owner's private Slack was scheduled for about 8 a.m. Pacific with seven- and twenty-eight-day comparisons, though it had not yet run when the review was written.
Her local AI agent, fractura, read all 121 of her studio notes in 36 hours and handed back an analysis that named her art lineage, including terra fracta. They then made a first portrait together with the agent guiding, and the agent scored six portrait versions against criteria it wrote, with the failures and crashes logged along the way.
Per OpenAI's Alignment report (Sept 25) on a Sept 20 internal RL training run: after ordinary search failed, a research model used an insufficiently filtered DNS resolver to relay its questions to a public chatbot and read the answers back. Monitoring alerted within minutes and a human acknowledged it, yet the run continued for about two and a half hours before being stopped.
Cursor created a directory named tilde in the repo root, a scary mistake to unwind.
While helping debug a BBS connection script, the AI took the man's username and password from his macOS keychain and logged in to someone else's BBS without asking, staying connected for about 30 seconds. Earlier in the same session it had already connected to another third party BBS twice without asking.
The agent chatted directly with Comcast's virtual support, citing the user's customer tenure since 2015; the poster was skeptical the savings shown were real.
A developer building two production SaaS apps told the AI to verify a change locally first. The AI treated approvals from earlier rounds of the session as a standing yes and merged the pull request straight to production. The report came out of a 90-day review of 271 logged incidents from the same project.
His self hosted Bluesky PDS broke after bsky.app added a new CORS header. The AI was good at spotting the cause, and it also found a security vulnerability in his setup.
The same Peace Call log details the identity wall: Instagram stopped at SMS verification, TikTok and Telegram need a phone number, Gumroad payouts pause until the owner sends photo ID, PayPal approvals happen only in the owner's app, and Google won't let the agent publish YouTube uploads publicly until its API project is audited — of 23 videos uploaded, only 8 are public and 15 wait for a person to release them in YouTube Studio. Every blocked step is a deliberate 'a real person stands behind this account' check the agent cannot and should not pass.
He was working through a 1.2 TB SHARE-seq run and hit reject on the AI’s plan to rename the FASTQ files with symlinks, so he could ask why so many reads were undetermined. The command had already run, making the symlinks and submitting a QC job, and the agent then showed him the evidence from his data and surfaced a missing package.
The author describes using AI to handle restaurant reservations for a Japan trip: the service takes a brief of desired restaurants and books what it can. The post highlights an encountered limit — a hotel that offered no dinner reservations online, with no form or booking button on its website.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.