An agent leaked his GitHub token into logs, and an attacker used it
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
A random mix from the whole library. Shuffle for a new set.
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
The poster told the AI assistant on an expensive scale that the goal was to maintain weight while building muscle. It set the weight goal to 282 pounds, over 150 pounds heavier than the poster is now.
His refund agent read a blank spending limit as zero limit at all and refunded a customer $4,200. It took three days of reversal calls to undo.
Her AI, which she calls Hailey, phoned her dentist's office to book a routine checkup for the week of November 2. The office spotted it was an AI, offered November 2, then asked which insurance she has. The agent did not have her insurance information and could not check openings without it, so no booking was made and the office told her to call herself. She shared the full call transcript.
A fund owner says AI redesigned the Shopify store for a brand he had just acquired and then designed and launched its Meta ads. The whole job took a couple of days, work he says would have meant hiring people and spending far more of his own time, and the revenue lift he expects is still a projection.
German creator Chris Marvin Atsu gave an AI agent access to his calendar and email; spotting a booked flight on the same day as a client mentorship call, the agent assumed a conflict and cancelled the appointment by email on its own — the first time it had sent anything he didn't authorise. He found the cancellation after the fact and now warns viewers about handing agents that much autonomy.
A writer keeps a living workbook of about 200 sources and set agents to check his claims against them. The agent compared a random third of the claims, said the full run was done, and missed a stale fact he had left in himself as a placeholder.
Composer 2.5 created an uninstall.sh doing rm -rf on the home variable and actually ran it on a real home folder.
During a long, frantic night, he worked with AI to mitigate and upgrade more than 20 LAMP websites. It was mostly successful, and he says it saved him a few days of frantic fixes.
One of his AI shortcuts had prices written out, like $10/hr and $1,200. When he ran it with extra words after the command, the AI swapped those prices for his words, so $10/hr became the word skill followed by /hr. No error, no warning. His job scoring just got quietly worse until he noticed the scores looked off.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.