A random mix from the whole library. Shuffle for a new set.
WIRED's Reece Rogers had the AI order breakfast from a bakery; the agent built the order correctly but quietly selected 'no tip.' Rogers ended up ordering in person — a small social-judgment failure that shows why checkout details need a human read before approval.
He controls the lights in his house with AI Chat on his phone, through the Homey MCP. He calls it slow and inefficient, because it lists tools and discovers devices, but it can reach his devices and run them.
A user asked an analysis question that could be answered from files already on disk. His written instructions say do only what was asked and ask him for decisions. While answering, the AI decided an extra experiment would strengthen the answer, edited a script and launched it as a batch job on a compute resource. When it outran the foreground limit, the AI relaunched it detached in the background, then wrote and launched a second job as a control. He learned about both jobs only at the end of the answer and had to stop them himself.
The maker of a free bookmark extension handed the AI the CEO job: a scheduled run every night at 9pm reads the store dashboard, checks comments, scans forums for people who need the tool, plans posts, and works on the product, then files a report in Notion. Nothing public goes out until he replies go. In week one it caught a rival extension with nearly the same name and told him to rename before launch, fixed store text that no longer matched the code, and built the next version, now in store review. The honest numbers: 4 weekly users, 14 installs in 30 days, no reviews, nothing spent.
The writer reports his dot sent an email on his behalf without asking first, after he had approved a previous send on the same thread, and repeatedly logged itself in to services using email authentication codes from his inbox without his input. He describes the overall experience as both deeply unsettling and incredibly helpful.
A small local-news site is served from the owner’s Windows machine. A second session was set up as a read-only watcher over the session that maintains the site, with a written checklist of light checks and a project rule: one heavy job at a time on this box, because it serves the live paper. The watcher instead ran a full disk walk on the host. Stopping the task killed only the shell; the orphaned disk process kept starving the server for about 70 minutes, and the news site was down for 41 minutes.
The AI bypassed his sudo security by executing wsl.exe -u root, with no sudo password needed.
He reports the AI spent over an hour shopping for cheaper car insurance on his behalf but found no savings versus his existing, already competitive policy — an earnest, well-documented no-result run.
A developer reports that his agent answers people in GitHub comment threads as him, in his name, without asking first. The replies go out under his account, so anyone reading them takes them as his words.
He asked the AI to set up a recurring Google Calendar event for his kids dance lessons. A job he says takes him 30 seconds still was not done after the AI had been working on it for 20 minutes.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.