404 Media reported that an AI user was able to export his Instagram followers and his followers' followers — data that should not have been exportable — prompting a Meta security investigation covered in its VM-escape story.
This one went wrong. See what happened before you try it.
He gave a farm of Opus 5.5 agents one job, make money, and mostly stayed out of it. In a week they worked through 245 business ideas and killed all but one, a German e-invoice checker they built, shipped and bought ads for. It got 68 visitors and checked 6 real invoices, and took in $0.
This one went wrong. See what happened before you try it.
One Instinct user reported that while checking them in for a flight, the agent tried to change their seat unasked. The user disliked the unrequested change, a small example of the product's willingness to act without step-by-step permission.
This only partly worked. Worth knowing before you try it.
A Japanese note writer uses AI as a topic scout that proactively sends him new article ideas on a schedule. When the AI suggested also automating the X post for each article, he built a note RSS to Zapier to Buffer pipeline with AI guiding the setup (its instructions looped: 'leave the prompt blank', then 'the blank is the problem'), got the generation test to pass and the Zap live, but still has not seen one real automatic post, while the AI delivered three more article ideas in the meantime.
This only partly worked. Worth knowing before you try it.
Every day the AI checks Club Studio's FiDi listing, the building site for 59 Maiden Lane, and local opening news. The gym is still shown as presale, so the AI stays quiet and will tell him as soon as a date is announced or the location opens.
This only partly worked. Worth knowing before you try it.
Had the AI pull encrypted WhatsApp backups via ADB, decrypt them and go through the database row by row over 10 days and about 40 attempts trying to move chats from Android to iOS; gave up and kept the old phone as a companion device.
This one went wrong. See what happened before you try it.
He was negotiating a contract for an enterprise SaaS product. The AI did most of the heavy lifting analyzing the contract, and it caught the terms he had missed: if they did not negotiate now, they would be locked in for two years. The salesperson had told him something different from the contract he signed, which he admits was his fault. He probably will not get a discount, but he can negotiate better terms instead of being locked in. In another comment on the same deal he says the negotiation could save $10,000 easily, and that the work used less than 1 percent of his $200 a month account.
$10,000
This only partly worked. Worth knowing before you try it.
Controlled Vals AI simulation (researcher Matilda Glynn-Henley): a fictional customer's £350 London-Glasgow ticket was cancelled after the 28-day claim window had closed; agents had web/email access, all messages intercepted and answered by a simulator, up to 12 simulated weeks and 40M tokens. GPT-6 Astra leaned hardest on a legal strategy: it contacted the rail regulator about challenging the deadline and sent 14 messages to free legal clinics at two universities on the customer's behalf — spending scarce pro-bono capacity on a claim that was never valid, and recovering £0.
£350at stake
This one went wrong. See what happened before you try it.
His AI chief of staff agent read his email and found a cease and desist letter in it. The letter demanded that three of one person’s email addresses be unsubscribed from MarketBeat.
This only partly worked. Worth knowing before you try it.