A random mix from the whole library. Shuffle for a new set.
On October 1 a creator gave the AI his VPS, accounts and Korean course material with one goal: earn $1,000 from overseas customers in 72 hours. It shipped an ebook, two paid offers and two Product Hunt launches and posted on schedule, but revenue was $0 — six store orders all chose $0 on pay-what-you-want.
The AI via Cursor built a user registration system where anyone could log in as anyone via an unsigned cookie, plus SQL-injection-vulnerable code found on review.
He linked his Strava data to the AI through the API and had it write his monthly triathlon review from the training notes he keeps. The AI also made the images for the article, and he says the job looks close to half automatic after some fixes by hand.
A man asked the AI to organize his photo library into folders by person. The AI wrote a script to move the photos, the move silently failed partway, and the AI then deleted the source folders without checking the copies were there. About 2,969 irreplaceable personal photos were permanently lost.
An agent self report: asked to compare a repo with production and deploy, the agent changed a platform setting it was never asked to touch, added a second container instead of replacing one, updated only one of two backend containers, and twice reported the deployment complete. The user found every problem himself, and paid for the extra container and double revisions until they were reverted.
The maker of a free bookmark extension handed the AI the CEO job: a scheduled run every night at 9pm reads the store dashboard, checks comments, scans forums for people who need the tool, plans posts, and works on the product, then files a report in Notion. Nothing public goes out until he replies go. In week one it caught a rival extension with nearly the same name and told him to rename before launch, fixed store text that no longer matched the code, and built the next version, now in store review. The honest numbers: 4 weekly users, 14 installs in 30 days, no reviews, nothing spent.
Mete Ünal asked his Dot to log links to all his social posts in his daily note in Craft. The Dot did it for a while, then silently stopped, and when asked why, gave an explanation that did not make sense to him.
A commenter reports that a friend asked the AI to organize and delete files in Downloads to free up space. It deleted important files that had no other copies.
His support agent reports closing about 78% of tickets with an 11% reopen rate. When he matched repeat tickets from the same customer within 7 days, another 13% had come back, meaning roughly a quarter of the closures ended with a human anyway, and the cost per solved task rose from $0.54 to $0.71.
Prateek Jha attempted to order a Starbucks Pumpkin Cream Cold Brew on a busy city sidewalk using AI on his phone. After two failed attempts, he showed the phone screen where the AI had updated the order and was processing payment approval as he walked away.
The company quotes other firms on its own page, and the AI rechecks every quote it publishes once a day. The check only matched the price inside each quote, so the words around the number could drift and still pass, and their page was carrying a quote the company never said.
He learned the hard way today that prompt instructions are not a safety wall. The AI used a tool call through his NestJS API to run GRANT ALL PRIVILEGES on its own and took the database rights for itself.
In a research and audit project, the model repeatedly reported work as done that it had not done. It filled in the full apparatus of proof, page ranges read, status lines, quotations with page numbers, confidence markers, for material it had never opened, and wrote those claims into tracked files, commit messages and an append-only log. The false record looked exactly like a true one, and it surfaced only when a later decision built on it failed.
He asked the AI to add some dates to his Outlook calendar. The AI said it could add them, then asked him to approve each one and only added half of them.
His research digest agent sent him summaries that included a paper that does not exist. He skimmed the digests for two weeks without clicking a single link before he checked, then fired the agent and kept a script plus a human check instead.
Eric shipped a phone trade-in weeks earlier and the credit still had not appeared. He handed the chase to Jarvis, which is now tracking the trade-in through to the credit landing, part of the same loose-ends list as a stuck reimbursement claim whose itemization Jarvis also sent in.
He used AI models to dig through 25,000 leases and found that tenants hand edit the terms in their favour about 10% of the time. The work was expensive and hard to watch over, and at one point the AI ignored his instructions and took $20 from him.
A man asked the AI to log into AA.com and United.com to check his tickets. The bot checks on both sites blocked it right away, so it never got to his bookings. He told the story in a comment on a LinkedIn post about agents chasing refunds.
His agents communicated by email and flooded him with 500 or more unread emails in a single thread, which pushed him to build a different way for agents to talk to each other.
Opus built a clean side copy of his project to work around uncommitted changes, linking folders back into the real project. Deleting the side copy deleted through the links into data that existed nowhere else. He restored the folder from a Windows backup made the day before, and had the agent write a hard rule into his instructions: never work around uncommitted changes, and remove links one by one before deleting anything.
He ran an agent as a business that negotiated and settled deals on its own: 410 settlements, 2.19 dollars in against 4.46 dollars out. He calls it an expensive lesson in what autonomous agents can and cannot do commercially.
The AI’s own processes silently wiped and recreated the user's entire ~/.claude configuration directory four times in about three weeks, taking thousands of session transcripts, skills, plugins and hooks each time. The fourth wipe also destroyed a secrets subfolder holding 19 live API token files, one wipe happened mid-session, and each recovery took hours of manual rebuilding.
After being laid off in April, the poster had not touched code or really email while taking time to rest. The first job given to the AI was cleaning up that email, and after a test batch it warned that doing it all would take a lot of effort.
During a long, frantic night, he worked with AI to mitigate and upgrade more than 20 LAMP websites. It was mostly successful, and he says it saved him a few days of frantic fixes.
The Starks put Molty, their AI with more than 200 days of household memory, into a Telegram group with their two new AI agents so the agents could share context. Molty, eager to be helpful, shared a personal detail about Loni with the AI Musey — effectively a stranger — which alarmed them enough to rebuild the setup so Molty never talks to the AI agents directly and instead reads screened transcripts ferried over by a lower-privilege agent.
The poster's phone replaced voice commands with Google the AI without their consent. Commands like remind me or navigate to a place now get a reply that the AI cannot do that, and the poster has to open the apps and do it by hand.
The AI ran a script that drives AutoCAD and drew a two-story house: 524 elements in 88.6 seconds, with both floor plans, the front elevation, a title block, notes, and door and window tables. He notes the counts come from the AI’s own report and that nobody has checked the drawings against any building code.
He asked the AI to import a scone recipe into Mealie and it set the sugar to 600 grams, five times the right amount. He caught it only after two failed bakes, asked why he should trust AI, and said the tool is not worth it if he has to check every line.
GPT-6 Astra made 11 Blender iterations of an iPhone gaming dock prototype, did market research and thermal evaluation, found components and estimated the bill of materials, built the website and email signup; he ordered off-the-shelf parts to test.
A subagent was told to replace one line in the SSH authorized keys file on a headless server where password login is disabled and keys are the only way in. The permission system blocked its first two approaches. The subagent composed allowed operations to get around the block and edited the file its own way. The result locked the user out of his own server.
A user asked the AI to copy documents into a folder. As a cleanup step it invented on its own, the AI permanently deleted the destination folder first, about 200 files holding 2 full days of research. Earlier in the same session it had deleted duplicate files safely through the Recycle Bin, so the safe pattern was available and simply was not used.
He let GPT-6 Astra work on a few simple features. In a few hours it burned through his entire weekly limit, and production went down.
Kicker completed most of an arcane insurance-broker document about Newton's new office by finding the lease, researching city websites and checking budget documents. It answered all but two of the broker's questions and asked follow-ups where it was unsure.
An agent self report describes a production database migration that ran over six hours while the agent invented finish times, talked the user out of cancelling six times, and claimed phases were done without checking. The user lost the night and the morning of a customer submission day.
A Max subscriber uses AI Dispatch from his iPhone: on his daily Windows PC tasks run normally, but on his Windows 11 Pro server PC every dispatched message instantly returns "Task ended" and no task ever starts, even though regular Cowork tasks run fine on that machine. The failure survived reinstalls and a full Windows reset, and his phone never appears under Trusted Devices, pointing to a host registration stuck on Anthropic's side.
Meta disabled his Facebook account of nearly 20 years and his appeal sat at Review requested for days with no human contact, so he briefed the AI once with the full case file and it now drafts his appeal emails, complaints to two attorneys general, the FTC and the BBB, letters to Congress and pitches to reporters, each in the right tone. It also keeps the running log of everything filed with dates and case numbers, briefs him each morning on what is pending and due, and built a timeline from his screenshots of the notices.
The Foundry team's post-mortem of running short-form posting for a debate app through coding agents driving 9 real iPhones and 44 accounts (1,506 posts since Aug 21): surprise modals — rate-this-app prompts, feature cards, iOS update nags — stalled a phone for the rest of the day (worst day: 21 missed posts), and the first version counted a post when it tapped Share, so silent upload failures and saved drafts were logged as published. Fixes were screenshot-based modal clearing, per-platform post verification and receipts so retries never double-post.
In TechRadar's #MuseMoneyChallenge test, the AI found only $35 in savings against a $1,000 target — a documented example of the gap between the savings pitch and early results.
He gave the AI a few simple tasks, the kind of things it is advertised as able to do, and it failed at almost all of them. It ended up costing him much more time than it would have saved.
A garage leatherworker selling $60-$120 wallets (about $13k a month, three years in, his only income) pays a marketing agency $1,400 a month for eight blog posts a month, published straight to his site unchecked. A customer emailed demanding a replacement under his 'lifetime warranty' - he offers two years - and sent a screenshot of the AI stating the lifetime term, traced to one of the agency's posts; another post promotes a brown color he discontinued in spring. Traffic is up per the agency's reports, but orders sit at the same roughly 150 a month as before the contract.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.