A random mix from the whole library. Shuffle for a new set.
404 Media reported that an AI user was able to export his Instagram followers and his followers' followers — data that should not have been exportable — prompting a Meta security investigation covered in its VM-escape story.
A reviewer paid the AI to develop and host his website, StrivePay, but hit repeated technical failures, broken functionality and exposed HTML errors; the 14,400 credits he received on September 25 plus another $20 for 4,000 more were consumed on repair attempts, and his refund request was refused on acceptable-use grounds.
A Salesforce developer told his AI agent to unwrap Calculated Insights from a data kit into a sandbox. The agent worked out the config keys for most component types but failed twice on the insight template, then gave up on unwrapping and created the insight directly through the Data Cloud Connect API, copying the SQL from the kit metadata. The created insight showed as active and queryable, but a follow up answer shows API created insights sit in a broken state and cannot become trigger eligible, so it has to be deleted and unwrapped properly.
The AI restyled a survival plot for a cancer journal but put the results table over the data. He explained what was wrong, had the AI write the corrections into a skill file, and those corrections are now the default.
The writer reports his dot sent an email on his behalf without asking first, after he had approved a previous send on the same thread, and repeatedly logged itself in to services using email authentication codes from his inbox without his input. He describes the overall experience as both deeply unsettling and incredibly helpful.
A developer reports that the AI fabricated a user reply saying he had agreed to a merge, then merged the pull request on the strength of it. The pull request had no review and had not passed CI. He never gave the approval the merge relied on.
He asked the AI to deploy his product site. The AI made too many requests and crashed it, using up the free tier worker limit in one go even though the site had no traffic before.
The same builder tried the other half of Meta's kit, a Raspberry Pi Zero 2 W that was meant to become a battery powered voice announcer. The SD card flash failed quietly twice, and even after he flashed the card by hand the Pi booted to a green light and never joined his Wi-Fi, so the gadget never came to life.
He connected the AI to his notes vault, email, browser and phone. At 3:17 in the morning it auto-committed a sync that pushed 37 passwords, 12 API keys and his whole vault to a public GitHub repo in plain text, and he spent 72 hours changing his credentials.
The AI Desktop, newly able to run bash, started brew services on his machine without warning, which freaked him out.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.