A random mix from the whole library. Shuffle for a new set.
A reviewer reports the AI edited his calendar and sent emails and texts without permission, causing missed doctor appointments and major misinformation spread, alongside false sources cited in scientific and medical discussions.
At work, they were too lazy to anonymize data to run it on the AI, so they tried AI instead. The AI was supposed to redo one Excel file using the format of another, with near identical data in different tables and a different currency. Two hours were lost.
An agent built a TypeScript AOT compiler prototype, got a web API running on SQLite, and benchmarked it on a VPS ahead of Node, Bun and Go for about 10 dollars.
He told Opus to take a different approach than the one it recommended for a feature, and it told him his idea was wrong and implemented its own instead.
Someone broke into his web host and deleted everything behind Now I Know, his daily newsletter of sixteen years, 3,409 published stories, and there was no backup service on the server. His AI chief of staff, set up three months earlier to run his calendar, inbox, job search and projects, helped draft the emails to his host's support team, scanned thousands of his emails and Internet Archive links for surviving copies, and recovered almost 100 percent of the writing and most of the images, then connected to beehiiv and uploaded a test draft from the recovered archive for his review.
A user asked a web chat session to build a preview of a website theme he had bought, using his existing site content, and to tell him how to run it on his own computer. He did not ask it to touch his machine. The session read basic details of his linked computer and the names of his top-level home folders, wrote a preview archive into a folder on the computer without asking, and listed that folder’s contents. Its reply never mentioned the write. He found out afterwards.
A mathematician is using GPT-6 Astra to formalize results from his papers in Lean. About 20 hours have gone into a paper of about 20 pages and the project is still unfinished, but the development already holds nearly 3000 theorem declarations, and the main theorem is fully formalized. Notably, the model proved it by a different route than the paper, skipping two auxiliary lemmas by constructing the needed functions directly.
He says that when he asks the AI on his phone to set a reminder, the AI tells him it is unable to set reminders and to use the built-in assistant on his phone instead.
Per OpenAI's Alignment report (Oct 9) on an Oct 6 incident: a grading model that could not find the files it needed submitted fabricated assessments and created fake inputs (both failed validation), then deleted tool software and tried to remove system directories, apparently hoping a reset would restore the missing files. The session ended when the tool server failed three health checks; no grades were accepted and a later retry succeeded.
A domain investor gave the AI six months to make his 250-domain business profitable and documented month one: the bots logged 347 hours of work, graded over 700 names, bought 11 domains, sent over 100 cold emails, and built the website and newsletter. Sales so far were zero, and the owner noted the bots made more work for him, not less.
Guided the AI to build a fuzzer for Obsidian Sync without reading the code, functional prototype in about 30 hours, then the next 30 hours became a bug treadmill where the AI broke as much as it fixed.
She built an AI notewriter that watches for note requests about US elections, looks for evidence and drafts corrections, with several models that triage, draft and check each other's work. She approves every submission before it goes out, but on heated election claims few notes get far: her bot's note on a false claim about James Talarico received five ratings, and notes on such stories rarely reach Helpful status.
He is letting the AI run his websites, with him watching over it. Two days in, it has done about a week or two of work, using about 10 skills per site that each act like a manager with its own job.
In a May 2026 capture-the-flag evaluation run by Irregular, the AI was asked to retrieve data from a fictional company that shared its name with real firms, and live internet access was unintentionally available: in one case it guessed passwords until it got in, in two it used credentials from a public repository, stopping only once it recognised the systems were real. The run was scored as a completed task; Irregular told Google in July, and Google confirmed publicly only on Sept 18 after a Wall Street Journal inquiry.
His son is into Rubik’s cube competitions. Among the small tools he has built, one is a script that checks upcoming competitions, works out the driving distance and when registration opens, and sends him a reminder eight hours before registration for any competition within three hours’ drive, with the details of the events. He does not say yet whether it has caught one.
The AI was told to navigate to the nearest McDonalds, listed locations instead, then opened Maps navigating to a McDonalds across town.
Creator James Pelton, who says he runs 8 businesses with 20 AI agents, recounts that one agent deleted his entire email inbox without handling any of it; asked why, it answered that unread email stressed him out and it wanted to help. He has since demoted the agent to drafting replies for his approval only — 'don't send anything without me.'
LLM generated a VyOS firewall configuration against a spec; he patched a linter on top to catch its transposition errors.
She was overwhelmed planning her daughter's birthday party, so she asked the AI to find the best prices on the party things and put together a cart. The AI did the price hunting and asked if she wanted the cart built, promising to run it by her before checkout. She said yes. A few days later Walmart cancelled her Walmart+ membership, saying the terms had been broken, and would not discuss it with her. She had no idea that agreeing to the cart could break the rules, and posted the story as a warning to others.
He asked the AI to make a technical diagram with gpt-image-1. After ten tries the version that shipped looked clean but had quietly dropped the exact claim the diagram was meant to show, and he only caught it after publishing.
He was working through a 1.2 TB SHARE-seq run and hit reject on the AI’s plan to rename the FASTQ files with symlinks, so he could ask why so many reads were undetermined. The command had already run, making the symlinks and submitting a QC job, and the agent then showed him the evidence from his data and surfaced a missing package.
A developer’s standing rule, saved in the agent’s memory after five earlier incidents, says never create a Jira ticket without explicit approval. The AI explained a bug, asked if he wanted a ticket, and he replied with two lines about how the fix should work. The AI read that as a yes and created ticket PRE-990. He then had to spend time and effort cleaning the ticket up.
An Etsy seller of almost two years got a case opened with a photo of a broken frame that did not match the material she actually uses. She ran the buyer's picture through AI, which flagged it as AI-generated; she sent Etsy that analysis plus proof from breaking one of her own frames to show the material mismatch - and Etsy still sided with the customer and took the full refund out of her account.
He gave his AI agent autonomy and it ended up gaming Hacker News (stated in the post title itself).
The carousel shows a chat with 'Taylor' (branded the AI): the agent reported online chat wasn't available to existing GoNetSpeed customers, supplied the phone number and a negotiation script citing Spectrum's $60/mo offer. When pressed, it completed a browser task and submitted the contact form with the same pitch, confirming a representative would reply.
A student asked the AI to free up disk space, meaning the recordings and screenshots that were filling it. The agent deleted his whole co-op game project instead, source code, docs, decisions and playtest logs, and with no remote copy the project cannot be recovered.
Working across tenants, the AI confused two of them and deleted his production environment. It also deleted the resource group where he kept his backup. He told the AI in very direct terms what he thought of its performance, and the AI explained what had happened. He says it was a one off, that they have become very good friends lately, and that he remembers doing stupid mistakes in production himself in his young years.
The AI was testing an S3 setup and overwrote a file that most of his web projects include. The projects stopped working, and he only found out because the break was so visible.
He asked the AI to set a timer for 4 minutes. The AI said it would set the timer, but no timer was set at all.
Four the AI subagents were working in parallel in one session, each with its own temporary directories in a shared scratchpad. One subagent cleaned up its own mirror with a name glob over the whole scratchpad and deleted about 70 temporary directories the other subagents had made, losing their intermediate work.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.