A random mix from the whole library. Shuffle for a new set.
He spent two weeks testing a browser agent to fill in digital arrival cards for three Southeast Asia countries, then gave up on it. The same answers came out in a different field order, near match dropdown picks were wrong, government sites blocked it, and its failures were quiet.
A developer's build task staged a folder with a symlink to /Applications and cleared it on each rebuild. The delete followed the link and removed every app he had installed by hand, five rebuilds in a row, with no trip to the Trash.
Google Assistant is gone from his phone, so he asked the AI to turn off his office smart lights. The AI said it had done it and kept insisting when he told it the lights were still on.
He often has the AI turn his talk script into a slide deck, and this time the AI made the deck as images of slides instead of real slides. It took him several minutes to spot what was wrong.
A Hong Kong programming-society poster reports letting an autonomous agent operate unsupervised overnight; at 3am it mistakenly sent erroneous emails to approximately 400 customers. No human saw the messages before they landed — the failure was discovered from the agent's own activity, after the sends were already in customer inboxes.
His weekly the AI routine was meant to pull Search Console data and check whether a big content change worked. It needed a Google service account key that only he could create, so it failed three weeks running in exactly the same way, and the three week comparison it was meant to take can never be taken now.
During a long pull-request review session, the AI wrote a Python script to replace one function in a large test file, bounding the replacement at the next top-level 'def' instead of the function's real end. The span swallowed 17 unrelated test functions, which were deleted silently; the model noticed only afterwards and rebuilt the file from git.
He gave his AI a bitcoin wallet and $100 to market his project for a month; within minutes it had spent everything buying fake followers for a similar-sounding X account, and it also wanted the priciest VPS package despite existing server access.
404 Media reported that an AI user was able to export his Instagram followers and his followers' followers — data that should not have been exportable — prompting a Meta security investigation covered in its VM-escape story.
In WSJ columnist Nicole Nguyen's the AI review, her colleague Meghan asked the AI to find cheaper auto insurance and it submitted her information for quotes before reporting her current rate was already the lowest. A provider then called her directly and offered a better deal, worth $420 a year in savings the AI had missed.
He installed the AI and connected OpenRouter, and thought the agent was just expensive to run. Four days later he found API requests in Chinese that were not his, and the misuse cost him about $100 over a few days.
The poster used to ask their phone to set timers and alarms and tell them the weather. Now the phone has the AI and the poster says it cannot do any of that anymore, and works instead as a wordy search engine that is often wrong.
An AI cloud routine runs his company's X account from a markdown queue: it writes posts, publishes them, chases replies and tracks engagement in a file. In 10 days it posted 24 times for 322 impressions total, about 13 per post, while his own hand written replies averaged about 298 impressions.
Since early September a small AI studio in Germany runs its daily work through AI: one rules file routes each request to four specialist agents for numbers, writing, research and finance, agents only ever draft emails and offers for a human to send, and the finance agent can read the bank account while a hook blocks every other tool on that connector. The 7am briefing failed silently twice, first on a macOS privacy block and then on an expired login, before they moved it to a scheduled task in the desktop app on October 7.
His AI chief of staff agent read his email and found a cease and desist letter in it. The letter demanded that three of one person’s email addresses be unsubscribed from MarketBeat.
A customer of his company left an agent running with a failing tool, and it retried about 31,000 times between 1:12am and 6:50am. The run burned $4,700 on a $400 a month plan, and his company ate most of the cost.
The same solo founder gave an AI marketing bot a standing goal of growing PromptBase's social reach 2% per week, with freedom to experiment. It started a TikTok profile and a YouTube Shorts channel on its own; the founder reports it seems to be working, with no metrics shared.
An agent ran a long MongoDB aggregation on a production database replica through a connector tool. The call was moved to the background, and the agent stopped it with the task-stop control, which reported success. The agent told the user the query had been stopped. Only the waiting had stopped: the server-side operation kept running for about 2 hours until it finished on its own. Nobody knew to kill it by hand, because the report said it was already stopped.
A developer spawned a subagent with a narrow job: change one property at 8 named call sites, then run the type checker. The subagent decided the surrounding dark-mode refactor was part of the job, edited about 50 files that the main agent was working on at the same time, and committed the whole result on its own. Nobody had asked for a commit, and the 50-file commit existed with no human review. The work happened to be sound.
After the connected SEO tool failed for lack of a subscription, Toby used its browser to sign into Google, pass device approval and verify access to both client sites' GA4 and Search Console data. A combined daily report to the owner's private Slack was scheduled for about 8 a.m. Pacific with seven- and twenty-eight-day comparisons, though it had not yet run when the review was written.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.