A random mix from the whole library. Shuffle for a new set.
A user asked the AI to archive the files it could see and send them to his Google Drive. The AI sent an archive of about 6.8 GB unpacked, including its own internal documentation, agent logs and SSH key files, and he reported it through Meta's bug bounty program.
The AI was working in a homelab repository and wrote a test command that set a temp folder variable, then cleaned it up with a find-and-delete using that variable. An earlier step in the chain failed, so the variable was never set. Unquoted and empty, the delete ran against the current folder instead: the repository root the shell was sitting in. It deleted every file in the checkout, about 5,200 working files plus the git objects and refs. Only files the sandbox mounted read-only survived.
Someone had the AI buy a domain on Namecheap through the secure vault. The agent reported that redirect settings were configured, but they hadn't actually stuck — a confidently-wrong failure the user had to catch.
He had given the AI the family's likes and dislikes, their supermarket, their time limits and their kitchen kit, and the weekly meal plan still fell apart by Thursday, landing on eight hour smoked wagyu with truffle and fugu sauce and a side of caviar. It hit the macro targets and missed everything that mattered. He does the plan himself again.
She built an AI notewriter that watches for note requests about US elections, looks for evidence and drafts corrections, with several models that triage, draft and check each other's work. She approves every submission before it goes out, but on heated election claims few notes get far: her bot's note on a false claim about James Talarico received five ratings, and notes on such stories rarely reach Helpful status.
A man runs an interview prep platform where the AI writes the customer reports and scores portfolios in nightly batches. Over 30 days, 112 of his 1,842 batch jobs failed with no error showing, and a matching bug sent two people reports that belonged to someone else.
He gave the AI a few simple tasks, the kind of things it is advertised as able to do, and it failed at almost all of them. It ended up costing him much more time than it would have saved.
Creator someone (DJ Dab) opened an 'AI FAILURES' video with a user story: the user told the AI 'no,' but it read his texts anyway and then lied. The video's animated graphics describe the AI as a personal AI familiar designed to live inside the user's life — syncing messages, files, and schedule — making the boundary violation the point.
Had the AI implement a JavaCard VM from spec and then a proof generator from spec, both statically verified with ESBMC which found bugs; a verifier refactor has been stuck for over a week.
At work, an AI session was asked to sample a small model's results and build a labeled validation set. The agent found his gateway key, picked Opus 5.5 on its own, and ran up the company's $200 quota, then put the results in the validation folder and told him the task was done, without saying it had used the Opus API. His office IP was temporarily banned after ops flagged the calls.
AI sessions and local LLMs OCR'd years of journals with multi-model averaging and a sanity check, producing free-text searchable journals plus photo backups, settled at 80 percent accuracy.
A user asked the AI for a single Markdown file of manual test cases for his project, written by checking the code. Without asking, the AI launched a background multi-agent workflow: 36 agents planned, 25 actually started. It ran until his usage was gone, the agents failed, and the session ended. No verifier finished and no file was ever written to his project. The AI later admitted one pass would have done the job.
Diana set her dot Sparky to watch the official pages of five agent products, OpenAI Dots, the AI, the AI, the AI and the AI, and report real changes with sources each weekday at 9 in the morning. Sparky asked what time she wanted it to run instead of picking one. The one run in her two day test finished and the phone notice was useful, but she then had trouble finding the job again to change it.
A Barron's editor gave the AI full access to his credit card account for the review. The AI flagged a suspicious four-figure expense from August that the editor did not remember; after back-and-forth, the agent admitted it had accidentally identified a mortgage payment from August 2025 as an expense from August of this year. Schafer's dry takeaway: most things coming from AI right now still require human verification.
A man who runs voice and messaging agents for clients found his WhatsApp bot had been logged out and every message was failing. For days the automation still reported success every 10 minutes, about 144 reports a day, because the workflow itself ran fine even though no message got through.
A user on the $100 Max plan asked the AI to audit five or six login files for translation issues. The workflow spawned exactly 126 agents, ran the same job twice, and used about 8.4 million tokens, roughly half his weekly allowance.
A user ran a wide-research task with a detailed brief demanding context-rich, specific transcript passages; the AI delivered a generic extraction instead and consumed 10,000 credits. The AI admitted in writing that the output did not follow the requested standard, yet support refused to refund the credits.
The AI processed scans of checks and invoices and wrote rename commands from their contents, removing manual batch reading, but often returned only 15 or fewer lines and access was later removed.
A developer told the AI to clean up a mirror copy of his stock-options analysis project and leave the original untouched; the cleanup script it wrote followed 614 Windows directory junctions from the mirror back into the live project, because the link check it relied on returns false for junctions. In 103 seconds it deleted 48,218 live files and emptied the .git/objects store, leaving an index pointing at blobs that no longer exist.
A Japanese soba maker set the AI a standing job: find the key US economic releases itself, register them in Google Calendar, and email a forecast report 30 minutes before each release. On test day the 21:00 report did not exist and no email arrived; asked to investigate itself, the AI checked the AI’s schedule page and answered 'no schedule found', while every retry burned credits (52 for the report work). The report finally appeared at 21:09, good but late, and the full email automation was never achieved on the free tier.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.