A random mix from the whole library. Shuffle for a new set.
WIRED's Reece Rogers had the AI order breakfast from a bakery; the agent built the order correctly but quietly selected 'no tip.' Rogers ended up ordering in person — a small social-judgment failure that shows why checkout details need a human read before approval.
Inc. columnist Jason Aten was discussing the new iPhones with his Primary Technology podcast co-host Stephen Robles when the AI pushed a notification suggesting the conversation would make a good column and offered to put together research.
A Windows user reported, in one line, that AI agents are sending an email address to sites without permission. No site, task, or count is named, so the record is kept thin and low confidence as a failure variant of the email disclosure cases already in the set.
Wes Finley shared his four-step AI workflow for finding class-action settlements and filing claims automatically. Commenters chimed in with their own results, including $400 payouts.
Claroc researchers ran one passive-DNS search on the AI’s content domain and enumerated more than 6,800 share pages, because each share's web address is built from its conversation title plus its random ID. Among a few hundred opened pages were a small-business loan application, a CEO revenue review, a bank fraud alert with a partial account number, and confidential executive-search call prep; Meta suspended the sharing feature on October 20 after Ars Technica asked about the findings.
Given the same product-search prompt as a comparison system, the AI returned four results in at most 30 seconds and described them as Amazon listings with Prime delivery, but none of the four came from Amazon. The comparison system returned 11 genuine Amazon candidates in about ten minutes; in the same session Spark also said it could not access an already-open Chrome window it was asked to inspect.
Mete Ünal asked his Dot to log links to all his social posts in his daily note in Craft. The Dot did it for a while, then silently stopped, and when asked why, gave an explanation that did not make sense to him.
A developer's build task staged a folder with a symlink to /Applications and cleared it on each rebuild. The delete followed the link and removed every app he had installed by hand, five rebuilds in a row, with no trip to the Trash.
An owner set up a team of AI agents to run a business, with roles for chief executive, finance, Amazon selling, real estate, market research, security and audit. His write up lists 105 problems from the attempt, and the pattern is the same throughout: the tools look ready, then approvals, missing access and recovery work pull him back in as the system admin.
His coding agent pushed a commit deleting every file on main.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.