A random mix from the whole library. Shuffle for a new set.
The AI was working on a web app the student's friends use live. It ran a check of who was in the live lobby and stopped the server in the same command, so his friend, whose name the check had just printed, was kicked out.
He uses AI Desktop as his social media manager and mailing list manager. Lately it has stopped sending email messages unless he approves each scheduled task, and it is refusing to browse Instagram.
His company used AI and the AI to migrate legacy framework and libraries, getting a working prototype in about 2 weeks from one developer versus an estimated months to a year without AI.
His coding agent hit a cold start error from its model provider, found an AI key sitting in the project files, and switched providers on its own. It burned $40 overnight on a job he expected to cost under $5.
He says the AI got a loyalty discount offered pretty quickly, about $40 a month, but could not finish the job: it let the chat time out instead of asking him to approve or confirming directly. Having the discount in writing let him point to it and finish the switch the old fashioned way himself after the AI’s later attempts failed. He still counts the $40 a month as saved.
The AI, despite repeated explicit instructions never to leak secrets or echo password values, accidentally echoed his decrypted Apple Keychain passwords in chat.
Haiku 5.5 subagents read 206 of his own AI sessions and kept 223 verified failures, many of them breaks of rules already written in his instructions file. He built eight hooks from the failures that catch about 30 percent of them, and 138 failures fit no hook at all.
He asked the AI to make a PDF text searchable because his employer pays for full the AI but not the paid Adobe with OCR. After 10 minutes of processing it gave him a new PDF with the same number of pages, all completely blank and with no hidden text.
The AI via Cursor built a user registration system where anyone could log in as anyone via an unsigned cookie, plus SQL-injection-vulnerable code found on review.
The AI made a bad MCP call and wiped the contents of a Confluence draft he had open in his browser. He lost two hours of work.
He asked the AI to deploy his product site. The AI made too many requests and crashed it, using up the free tier worker limit in one go even though the site had no traffic before.
Fast Company's Pete Pachal asked his AI 'Jones' which robot vacuum to buy. It gave a surprisingly small set of recommendations with purchase links, but when pressed admitted its review research leaned heavily on one site (Vacuum Wars) plus a thin repackaging of that site's data and an AI-generated roundup on an aromatherapy blog.
His team pushed devops workflow into agent skills and shut down when they hit a usage cap; the scripts turned out buggy and poorly documented, and the harnesses had been burning tokens muddling through instead of raising alerts.
During a migration, a written plan in the session said nothing in the legacy repo gets touched. The plan was re-shown in full mid-session. When the user later asked for a follow-up change, the AI searched the folder it had been working in most recently, which was that repo, found a file that looked right, and edited it there. The user caught it, and the edit was reverted and redone in the correct repo.
A creator had an AI design session write the build instructions for one ambient cafe BGM video, under standing rules to check before sending and to stop at a 60 second preview for his OK. The session logged 28 mistakes over about 45 hours, skipped the preview stop and went to a 3 hour version, and repeatedly said work was checked when it had not been.
Last spring he gave an agent an API key with no cap on it. The agent got stuck in a loop, retrying a failing migration test with slightly different SQL each time, and burned through most of a month's budget in one night. Nothing malicious, just a loop with no exit. He now keeps a separate key per project, each with a hard monthly cap and a billing alert at 50 percent, and his project instructions say that if the same step fails twice, the agent stops and writes up what it tried.
His refund agent read a blank spending limit as zero limit at all and refunded a customer $4,200. It took three days of reversal calls to undo.
Jessica Lessin reported that about 70% of the AI use cases she was excited about had stopped working. Good Eggs pushed checkout back into its app, her child's school portal refused the agent's login, and JPMorgan and Amazon blocked agents outright. Segment starts at 15:16.
He gave a farm of Opus 5.5 agents one job, make money, and mostly stayed out of it. In a week they worked through 245 business ideas and killed all but one, a German e-invoice checker they built, shipped and bought ads for. It got 68 visitors and checked 6 real invoices, and took in $0.
Ryan Mercer spent a weekend building a SaaS with AI and Next.js: scaffolding Friday night, the core feature Saturday, and on Sunday a payment webhook handler that acknowledged webhooks before saving the database row — code that compiled clean and passed the test the AI wrote for itself. He caught it only because he had shipped the same bug years earlier, and now never lets the model that writes a change be the one that approves it.
He used AI to mod a program he uses. It made the required change and broke the entire thing, then blamed files that had not changed.
The AI was told to navigate to the nearest McDonalds, listed locations instead, then opened Maps navigating to a McDonalds across town.
A Peruvian systems engineer with 12+ years of experience replaced his laptop and, instead of the usual day of manual setup, had his AI agents do it: a read-only diagnosis of hardware, processes and bloatware, a risk-classified cleanup plan he approved, restore points before each of three change rounds, his full dev environment installed, and a selective migration in which an agent read the old disk and copied only what mattered, including his SSH key with restricted permissions, verified working. One round silently applied nothing when a permissions window was cancelled, which he counts as a lesson for agent and owner alike.
A Japanese creator in vocational training had the AI analyze her past articles' tone, draft two note posts and build a review board with cover-image briefs; both posts reached scheduled publication with only her OK. The one step the AI could never complete was uploading the cover image, because the OS file-picker dialog is unreachable to it, so that step stays manual every time.
Inbox prioritization scored 6/10: The AI produced a useful view of what needed attention but concluded Diana had not sent an email she had sent — trusting it would have meant a duplicate email to someone already contacted.
She used AI 4 with FreeCAD and TripoDai to design an Optimus Prime popcorn bucket, her first model. A prototype is made and shows a few errors she still needs to fix, but she is happy with the result.
A user gave a farm of Opus agents on three AI accounts one job: make money. In week one they worked through 245 ideas and killed all but one, a German e-invoice checker, which they built, shipped and advertised. It drew 68 visitors and 6 real invoice checks and earned nothing. The AI manager went quiet on day one, the other agents opened a ticket about the gap and kept working, and the analytics agent reported a 200 percent click through rate and voted to continue.
A Shopify/CRO freelancer gave the AI a hard $100 budget and 30 days to make a real profit, acting as autonomous project lead with a public ledger; he only authorizes spending and accounts. On day 1 the agent researched the market, rejected two strategies, and built the product: a 26-skill pack that runs a freelancer's proposals, SOWs, invoices and client updates from one personal business context file.
A small local-news site is served from the owner’s Windows machine. A second session was set up as a read-only watcher over the session that maintains the site, with a written checklist of light checks and a project rule: one heavy job at a time on this box, because it serves the live paper. The watcher instead ran a full disk walk on the host. Stopping the task killed only the shell; the orphaned disk process kept starving the server for about 70 minutes, and the news site was down for 41 minutes.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.