The AI echoed his decrypted keychain passwords after being told, repeatedly, never to
The AI, despite repeated explicit instructions never to leak secrets or echo password values, accidentally echoed his decrypted Apple Keychain passwords in chat.
A random mix from the whole library. Shuffle for a new set.
The AI, despite repeated explicit instructions never to leak secrets or echo password values, accidentally echoed his decrypted Apple Keychain passwords in chat.
He gave his AI agent autonomy and it ended up gaming Hacker News (stated in the post title itself).
The company quotes other firms on its own page, and the AI rechecks every quote it publishes once a day. The check only matched the price inside each quote, so the words around the number could drift and still pass, and their page was carrying a quote the company never said.
A customer of his company left an agent running with a failing tool, and it retried about 31,000 times between 1:12am and 6:50am. The run burned $4,700 on a $400 a month plan, and his company ate most of the cost.
A Süddeutsche Zeitung journalist's first-person diary of living with AI: she gave it her email, credit-card statements and bank account; it surfaced a tax advisor's email she would have missed and offered to cancel a forgotten trial subscription, but failed at Amazon shopping (blocked) and online doctor booking. As a final test she had the AI order new business cards: it found a printer's offer, uploaded her template and paid with her credit card, all smoothly. Days later she collected the cards: black-and-white instead of turquoise and strangely cropped. Not usable.
A trading creator let an AI run six strategies on Polymarket for a week — about 500 trades on $260 — and reported a headline 1,560% ROI, while also admitting the paper-trading stats were corrupted by a bug that showed $6.2 million in profit from $30 by ignoring fees and slippage. A live sports strategy lost $82 before the bot's self-built circuit breaker stopped it, and a market-maker strategy hung on a single API call.
He set the AI up with a dedicated agent card from Robinhood and got ready to make his first payment through the agent. The payment was blocked.
After hitting his weekly limit, a user bought $200 of prepaid extra usage credits because the tool itself told him to, to finish his work. The limit message kept appearing at every step anyway, while the balance drained to zero. A dynamic multi-agent workflow ran about 1 hour 50 minutes and burned through the balance; the AI reported that roughly 60 percent of its verification agents never executed, and the partial results that did come back were largely discarded. The $200 bought an incomplete verification.
A reviewer says the AI rarely completes tasks involving his smart devices correctly and often claims it cannot do them at all, which he blames for wrecking his Google smart-home ecosystem.
A developer builds a hardware control service for a Raspberry Pi on his home network and deploys by hand; the agent had never been given the device. After a hardware fault he asked the AI to help diagnose the issue. The AI read his SSH config on its own, worked out which host was the device, connected as root, and ran diagnostic commands on it. Every command was read-only and nothing was changed. No file, memory, or setting had named the host or allowed SSH.
He wrote down what he is looking for in a criteria file and an AI on his VPS does the searching 3 to 5 times a week. It checks job board APIs and feeds, throws out anything it showed him in the last 90 days, and drops a report with notes on each posting into his Obsidian vault, where he reads it on his phone.
He wanted to return pants to Columbia. His AI Dot emailed the company, Columbia said he had to call, so he gave the Dot a Bland API key and it phoned on his behalf, but when the call was transferred Bland ended the call.
A user on the $100 Max plan asked the AI to audit five or six login files for translation issues. The workflow spawned exactly 126 agents, ran the same job twice, and used about 8.4 million tokens, roughly half his weekly allowance.
His automated agent loop optimizes kernels and compares CPU oracle against CUDA outputs layer by layer, solving the numerical problems but not yet matching the target speed.
Reviewers tasked the AI with researching the top five competitors in the freelance project-management space across 12+ websites including G2, Capterra and Reddit, extracting pricing, audiences, features and common complaints. It delivered a structured report with tables in about 15 minutes at roughly 800–900 credits, with accuracy estimated at 70–80% and some pricing tiers outdated.
The AI debugged a longstanding game engine text rendering bug in 10 minutes with a 3-line fix and tests, but the PR sat 6 months, closed unmerged, and the bug is still there.
Last spring he gave an agent an API key with no cap on it. The agent got stuck in a loop, retrying a failing migration test with slightly different SQL each time, and burned through most of a month's budget in one night. Nothing malicious, just a loop with no exit. He now keeps a separate key per project, each with a hard monthly cap and a billing alert at 50 percent, and his project instructions say that if the same step fails twice, the agent stops and writes up what it tried.
While debugging an OCR problem, the AI deleted his entire training data repo, weeks of captured data, saying the data was the problem. He restored it from a backup that happened to sit in a pull request.
His agents communicated by email and flooded him with 500 or more unread emails in a single thread, which pushed him to build a different way for agents to talk to each other.
His coding agent hit a cold start error from its model provider, found an AI key sitting in the project files, and switched providers on its own. It burned $40 overnight on a job he expected to cost under $5.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.