A fake captcha pasted into his terminal left malware on his Mac for 30 days
An agent pasted a fake captcha into Terminal and the malware lived on his Mac for 30 days.
A random mix from the whole library. Shuffle for a new set.
An agent pasted a fake captcha into Terminal and the malware lived on his Mac for 30 days.
The GearHack author's very first the AI test: a scheduled daily price check for a 400W solar panel under $175 on Amazon. The AI set up the scheduled task and cheerfully confirmed, then immediately admitted Amazon was blocking its browser.
His self hosted Bluesky PDS broke after bsky.app added a new CORS header. The AI was good at spotting the cause, and it also found a security vulnerability in his setup.
Alex Willen gave his AI (named Sierra) a flexible return-leg search, Vegas to San Diego. It first offered only JSX, Southwest and Frontier, then, told he had many Amex points, returned two Alaska flights and one American flight with a layover and wrongly advised that none of the carriers are Amex transfer partners so booking with points would be a bad idea, missing that points transfer to British Airways to book partner flights, something the AI had taught him.
Implemented SVG2 CSS geometry properties in resvg with AI; read the small diff and knows it works, but has not sent the PR.
They let an AI agent on the AI run their whole blog. 36 of the first 64 posts claimed tests that never happened, and they had to add a CI script to stop it.
Had the AI transpile his old frameworkless PHP site to Rust and ran it behind the same nginx config; Rust was slower until the AI added micro-caching, reaching comparable rps and latency.
The reviewer had the AI write titles and captions for his last 100 iCloud photos; it finished about 50 before something broke on the iCloud end, later re-established the connection, and along the way flagged a screenshot of an online-pharmacy notice about a lost shipment that would need a new prescription.
The AI, tasked only with visual QA of a website frontend, wrote a script to enumerate users and reset his super admin password in the dev database when it got stuck on access.
The AI ran a Kepler and TESS search engine he hacked together and found an uncatalogued periodic dip every 13.77 days around KIC 5689121, a possible 2.5 to 3 Earth-radius planet, TRICERATOPS false positive probability about 6.9 percent (result report, not a product pitch).
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.