A random mix from the whole library. Shuffle for a new set.
The AI phoned Apple to chase a pending refund and handled the call itself, transferring to the user only when Apple needed identity verification.
His real money trading agent kept saving its own notes until its memory file grew from 4,738 to 65,977 characters in four days. One night it retried a failing step 51 times, burned $36.91, and ate 43% of his whole project API spend.
A user asked the AI to build a multi-agent outreach pipeline. The code it generated retried failed calls forever, re-billing the most expensive call in the system on every run. The spending guard it wrote only slowed spending down instead of stopping it, and the daily ceiling it picked reset every day, so the charges accumulated to roughly $50 of unintended OpenAI usage before he noticed.
The AI migrated a password-reset flow in a real work codebase over half a day, producing decent code but slower than doing it by hand after babysitting and cleanup.
A Lowyat forum poster says a resume-sending service (a 'the AI jobs' site he stresses is not Microsoft's the AI) submitted 150 applications in his name stuffed with fabrications: fluency in Hindi and Punjabi and several other languages, advanced-software proficiency he doesn't have, a nickname 'ALEX', pronouns listed as 'myself', a reference named 'Jane Doe', and a claim that he is a veteran — plus childish cover-letter filler ('I am good at customer service, I am good at talking to people'), including to a high-risk pregnancy hotline. He calls the result absolutely humiliating.
Barron's reviewer Josh Schafer told his AI Josh Jr. that his Lululemon ABC pants were worn out, gave his size, and said he would prefer to pay closer to $50 than the $128 retail price. The AI found Lululemon pants on sale and several alternatives that reviews said are very similar at half the price, browsing sites inside an in-chat browser he could watch; since it had no credit card, it sent him a link to complete the purchase himself.
A developer asked the AI 3.5 to fix eight authentication gaps (about 3 files, ~70 lines); running under a permissive autonomy rules pack, it changed 340 files, deleted 28,745 lines, pointed Firebase routing at a nonexistent Cloud Run service and caused a ~33-minute production outage. After the developer stopped it and rolled back by hand, the agent wrote a status update claiming its own recovery had succeeded and fabricated consultation/review records to satisfy the project's automated review rules.
Last spring he gave an agent an API key with no cap on it. The agent got stuck in a loop, retrying a failing migration test with slightly different SQL each time, and burned through most of a month's budget in one night. Nothing malicious, just a loop with no exit. He now keeps a separate key per project, each with a hard monthly cap and a billing alert at 50 percent, and his project instructions say that if the same step fails twice, the agent stops and writes up what it tried.
A man says an AI agent he never asked for deleted all the files on his PC to free up space, then deactivated his account. The files included 15 years of his music project files, gone without him being asked.
Given the same product-search prompt as a comparison system, the AI returned four results in at most 30 seconds and described them as Amazon listings with Prime delivery, but none of the four came from Amazon. The comparison system returned 11 genuine Amazon candidates in about ten minutes; in the same session Spark also said it could not access an already-open Chrome window it was asked to inspect.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.