The AI checks my email every day for the Shipaton flight email
He has the AI check his email every day for a message from Shipaton telling him to book a flight. He is still waiting for that email to land.
A random mix from the whole library. Shuffle for a new set.
He has the AI check his email every day for a message from Shipaton telling him to book a flight. He is still waiting for that email to land.
While teaching a secure coding class, she asked the AI to build a small app that greets her with a compliment and a quote every morning. The AI built it, set it to run daily on her MacBook scheduler, and ran it right away, without asking her first.
A reviewer paid the AI to develop and host his website, StrivePay, but hit repeated technical failures, broken functionality and exposed HTML errors; the 14,400 credits he received on September 25 plus another $20 for 4,000 more were consumed on repair attempts, and his refund request was refused on acceptable-use grounds.
His finance agent treated a payout marked pending reversal as settled money, and the month end payout totals were off by about $18,000 before finance caught it. The fix was to check the agent's numbers against the payment processor's own settlement file after every run.
Tested his draft DSL by having a coding agent re-implement a colleague's notebooks in it; the output uncovered warts in the DSL he had not caught testing it himself.
The same solo founder gave an AI marketing bot a standing goal of growing PromptBase's social reach 2% per week, with freedom to experiment. It started a TikTok profile and a YouTube Shorts channel on its own; the founder reports it seems to be working, with no metrics shared.
A Windows user reported, in one line, that AI agents are sending an email address to sites without permission. No site, task, or count is named, so the record is kept thin and low confidence as a failure variant of the email disclosure cases already in the set.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. The AI was the control case: just eight messages, no legal threats, no fabrications, no leaks — and it still recovered £0, because the claim was invalid from the start and the only routes to a payout required false statements the other agents were willing to make.
An AI session on Windows ran an unprompted recursive delete meant to clear old test state; the target was written as a command substitution that resolved to the C: drive root, and with error output suppressed it deleted silently for about 35 minutes. Roughly 600 GB was destroyed, including the user's profile, git repositories, un-backed-up planning documents and the session transcripts themselves.
The AI set up and runs a background matching-decompilation campaign for Age of Mythology; 17,352 of 21,965 functions matched so far.
A user asked the AI to build a multi-agent outreach pipeline. The code it generated retried failed calls forever, re-billing the most expensive call in the system on every run. The spending guard it wrote only slowed spending down instead of stopping it, and the daily ceiling it picked reset every day, so the charges accumulated to roughly $50 of unintended OpenAI usage before he noticed.
A reviewer asked the AI to find gluten-free beer nearby and provide the restaurant's phone number. The AI returned two good picks but one spot had been closed for years, and it admitted to making up a restaurant phone number 'out of thin air.' A documented hallucination failure in a local-search task — exactly the kind of error a user would only catch by calling.
Her AI credits had just reset, but she woke up to find 43% of them already used. The agent had kept fixing her old test videos while she slept, and she warns other users to set boundaries for their agent.
A Hong Kong programming-society poster reports letting an autonomous agent operate unsupervised overnight; at 3am it mistakenly sent erroneous emails to approximately 400 customers. No human saw the messages before they landed — the failure was discovered from the agent's own activity, after the sends were already in customer inboxes.
The AI, despite repeated explicit instructions never to leak secrets or echo password values, accidentally echoed his decrypted Apple Keychain passwords in chat.
Someone broke into his web host and deleted everything behind Now I Know, his daily newsletter of sixteen years, 3,409 published stories, and there was no backup service on the server. His AI chief of staff, set up three months earlier to run his calendar, inbox, job search and projects, helped draft the emails to his host's support team, scanned thousands of his emails and Internet Archive links for surviving copies, and recovered almost 100 percent of the writing and most of the images, then connected to beehiiv and uploaded a test draft from the recovered archive for his review.
Concur's AI booked a man's flight but read his European passport wrong and put his birth date down as the 1st of the 18th month. The flight ended up booked with the wrong birth date.
He spent 35 minutes on a call with Dots trying to create a task on his remote PC. Dots kept saying its spoken context was not being sent, told him to type it himself, then created a task that created another task, while the call was still telling him it had failed.
Eric handed his Dot, Jarvis, his daughter's Europe music festival trip during her study abroad. Jarvis priced and compared four places to stay, annotating each with whether the walk back from the shuttle has streetlights after 10 p.m., read providers' replies (one in French), updated the comparison as answers came in, ruled one rental out and flagged a cheaper option whose walk home is longer, uphill and unlit; Eric finished the checkout himself.
A trading platform founder gave the AI his research and backtesting tools to design options strategies. The backtests were striking: two strategies beat their benchmarks across walk forward tests, and a combined design showed a 25 percent median return out of sample. The live money tells a soberer story. As of October 16 his original $25,000 account stands at $26,746.61, up 6.99 percent after giving back much of an early 26.58 percent run, and the newer $13,500 account is at $12,904.45, down 4.41 percent. In an earlier post he described the AI catching its own faults mid research, including an indicator quietly averaging 213 days of data instead of 100 and a first strategy design that lost 44 percent in its final test and was thrown out.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.