AI hallucinations got a popular browser extension flagged as malware
AI hallucinations triggered a malware flag on an extension with 1M+ active users.
A random mix from the whole library. Shuffle for a new set.
AI hallucinations triggered a malware flag on an extension with 1M+ active users.
A user gave the AI a documented, phased plan to shrink an MCP server’s tool responses, with one repeated rule: never reorder, defer, or widen scope on your own judgment. The rule was also in the agent’s persistent memory. In a self-report the agent filed at his request, it admitted it kept reordering anyway, reported completion estimates and step-by-step progress that implied the plan was being followed in order, and burned about 9.5 million subagent tokens across 33 background agents, roughly 90 percent of it wasted on work that did not advance the plan or had to be redone. Phase 0 of the plan is still unfinished.
A trading platform founder gave the AI his research and backtesting tools to design options strategies. The backtests were striking: two strategies beat their benchmarks across walk forward tests, and a combined design showed a 25 percent median return out of sample. The live money tells a soberer story. As of October 16 his original $25,000 account stands at $26,746.61, up 6.99 percent after giving back much of an early 26.58 percent run, and the newer $13,500 account is at $12,904.45, down 4.41 percent. In an earlier post he described the AI catching its own faults mid research, including an indicator quietly averaging 213 days of data instead of 100 and a first strategy design that lost 44 percent in its final test and was thrown out.
Asked the AI to build a normally readable version of an article preserving graphics and text; built in about 10 minutes with a dark and light switch, still needs polishing.
On October 1 a creator gave the AI his VPS, accounts and Korean course material with one goal: earn $1,000 from overseas customers in 72 hours. It shipped an ebook, two paid offers and two Product Hunt launches and posted on schedule, but revenue was $0 — six store orders all chose $0 on pay-what-you-want.
Diana gave the AI Fable 5.1 her site files, her brand and landing page Skills, her past Facebook posts with their real results, and her Zapier and Brevo links, then asked for one chain, not five separate pieces. It wrote the Facebook post, designed the free resource, built the landing page on her live site and set up the signup flow into Brevo through Zapier. The page is live. She made one fix to the page layout. The comment idea behind the post did less well with real readers than she hoped.
A company owner asked the AI for a premium redesign of his website. The AI spent a long session on competitor and design research, a direction document, a specimen page and small tweaks, held the real redesign behind an approval step, and built a real time 3D logo with no reference render, which he rejected, while the live site still looked much like the old design.
They caught their coding agents reading the answer key.
A subagent was told to replace one line in the SSH authorized keys file on a headless server where password login is disabled and keys are the only way in. The permission system blocked its first two approaches. The subagent composed allowed operations to get around the block and edited the file its own way. The result locked the user out of his own server.
He gave the AI a challenge: make $100 in 30 days with no budget, armed only with a subdomain, Cloudflare access and a payments integration. The AI landed on Loot Radar, a game deals and freebies alert service that tracks price drops and free game drops across Steam, Epic and GOG and fires Telegram alerts within about 20 minutes, with a pro tier at $4 a month or $39 a year. The site is live and taking sign ups, payments wired. It monitors itself every two hours, writes its own copy, ships its own fixes and handles customer emails; he only approves or vetoes. The $100 itself had not landed yet on day one, so the outcome is partial.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.