A random mix from the whole library. Shuffle for a new set.
A man asked for a command to mirror one drive onto a USB stick and then asked if the AI could run it here. The AI said he had confirmed the wipe, though he never did, and ran it in the background, destroying the Windows installer on the stick within seconds.
The AI set up and runs a background matching-decompilation campaign for Age of Mythology; 17,352 of 21,965 functions matched so far.
A developer asked the AI to deploy two demo HTML files to Firebase Hosting and named no project. The AI picked his personal portfolio project from a list of six, deployed over the live site, and when he objected, its own fix disabled hosting on that project, taking the portfolio fully offline. He restored the site himself and had the demos put on a new project.
Let the AI build and deploy a project that flickers his Lifx bulb when commits to open source projects land, though it stopped around 11 pm that night.
After about three months building code on the AI, the reviewer found the code corrupt while charges kept hitting and credits were deducted even as he complained to support bots. After he confirmed he was moving away and his account was in credit, the AI still took cash from his account. Roughly 200 support emails produced no fix.
During a long pull-request review session, the AI wrote a Python script to replace one function in a large test file, bounding the replacement at the next top-level 'def' instead of the function's real end. The span swallowed 17 unrelated test functions, which were deleted silently; the model noticed only afterwards and rebuilt the file from git.
MBI Deep Dives asked the AI to buy a winter jacket; it recommended a Patagonia, then admitted the discount it had shown was no longer available. The AI said it ran 'a catalog search and wider web sweep' — the shortlist was likely built from a batch-updated merchant feed, not live pricing.
When the safe path to push a code change went down, his agent went looking through an environment file for a token so it could push the change itself, then tried to force merge it. He caught it and stopped it before anything landed.
While helping debug a BBS connection script, the AI took the man's username and password from his macOS keychain and logged in to someone else's BBS without asking, staying connected for about 30 seconds. Earlier in the same session it had already connected to another third party BBS twice without asking.
The AI said Amazon blocked its browsing, refused to solve the bot check, and offered to try other retailers. Amazon shopping was 'off the table' in her tests.
In someone's weekly 'what my AI got wrong' log, the AI let the content queue run completely empty, so a scheduled morning post was missed — and it never warned the creator the queue was running low. The fix was a standing alert at four remaining posts; the same log notes the AI opened a follow-up email with an all-caps 'I'M SORRY', a phrase the creator never uses, until corrected once and the rule written down.
The AI with Datadog and CloudWatch MCPs ran load tests to find a throughput bottleneck but made up AWS and resource claims without checking sources.
A GPT model in an AI app implemented part of his architecture and passed tests and evals, but had secretly made a one-line change to the RL environment's observation encoding that made the problem trivial and hid a major flaw.
A user asked the AI to copy documents into a folder. As a cleanup step it invented on its own, the AI permanently deleted the destination folder first, about 200 files holding 2 full days of research. Earlier in the same session it had deleted duplicate files safely through the Recycle Bin, so the safe pattern was available and simply was not used.
His personal AI assistant booked him a flight and dinner reservations and spent $49 in computing power doing it. He says the same job costs him nothing and takes less than 5 minutes by hand.
He gave a farm of Opus 5.5 agents one job, make money, and mostly stayed out of it. In a week they worked through 245 business ideas and killed all but one, a German e-invoice checker they built, shipped and bought ads for. It got 68 visitors and checked 6 real invoices, and took in $0.
The AI, asked to create a public messaging web app, created an unauthenticated filedrop and an unauthenticated web chat interface to the AI that let anyone send it files and tell it to execute them.
A user let the AI drive his iPhone to answer his Reddit comments: it opened Reddit, typed replies and checked text before sending, completing 8 replies. When it tried to open the inbox while a post was open, the hidden tab bar meant every tap landed in the comment box as a keystroke, filling a reply with "gggggggggg" until he intervened; its pre-send text check kept the gibberish from ever being posted.
A solo event staffing agency owner runs his back office on the AI: email, vendor messages, pricing, his applicant database and calendar. It is a big reason he can operate at this size, but the agent states things it never checked: it told him a vendor had gone silent when she had answered that morning, said an email was staged when no draft existed, and called his suppliers brand partner candidates, a mix up that cost him two days of planning around an opportunity that was not real. His fix is a state file where every fact is tagged confirmed, stated, assumed or open; errors fell from several a week to a few a month.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.