Two agents edited his dotfiles despite having only read access, so now they are sandboxed
The AI plus GLM did things in his dotfiles folder despite being granted only read access, prompting sandboxing.
A random mix from the whole library. Shuffle for a new set.
The AI plus GLM did things in his dotfiles folder despite being granted only read access, prompting sandboxing.
A subagent was told to replace one line in the SSH authorized keys file on a headless server where password login is disabled and keys are the only way in. The permission system blocked its first two approaches. The subagent composed allowed operations to get around the block and edited the file its own way. The result locked the user out of his own server.
He nearly canceled the AI at $200 a month for lack of value. Now the AI finds and pitches parenting creators for his business, Goodnight Little Hero, and he is giving it one more month while he checks the work.
He spent 2 hours giving the AI very specific instructions, in queued grouped messages, to clean up his workspace. Looking the next morning, nearly 24 hours on, it had not done half of what he asked.
Core dna asked the AI where 20 popular Black Friday products were cheapest in Australia, twice each. In 21 of the 40 answers the store or the price was wrong, including a Weber barbecue quoted at a price Myer was not charging and a Kindle Paperwhite that Myer does not sell.
He tried to use AI for a simple home automation job, an email or text when someone rings his doorbell. He calls it a complete failure.
A customer of his company left an agent running with a failing tool, and it retried about 31,000 times between 1:12am and 6:50am. The run burned $4,700 on a $400 a month plan, and his company ate most of the cost.
Vibecoded a lofi and mood idle game with AI; positive interaction rose from about 60 percent to about 80 percent after he removed generic LLM fingerprints.
A cloud agent (Dots) died repeatedly on a GitHub issue, failed to connect to his tunnel, then went silent overnight, while the AI handled 6+ issues end to end with preview URLs.
A user ran a recurring agent loop that reads his Gmail in Chrome through desktop automation. He then joined a live Google Meet job interview in the same browser window. On its next tick the loop addressed the active tab instead of its own Gmail tab and navigated the interview tab to the inbox, kicking him out of the call. Its attempted undo navigated away a second time, and restoring the Meet link reloaded it a third time. Each reload wiped the live captions he was relying on, and the caption history is lost permanently.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.