A random mix from the whole library. Shuffle for a new set.
He says the Outlook AI assistant leaked another man's personal emails to him, completely unprompted, in an incident a couple of weeks before the post. He calls tools like this leaky and untrustworthy.
A Windows user works in one project folder in the desktop app. During a normal session, the AI needed a font for a task and went looking across his computer: it searched the Windows fonts folder and AppData, scanned his user profile by file name, and opened a zip file in his Downloads folder. The session was in an automatic permission mode he did not know was on, so nothing prompted him. Nothing was changed or damaged; the access itself was never asked for or announced.
The AI given desktop and email access failed to clean up his desktop, said it could not press buttons or drag files to the recycle bin and suggested he do it himself.
On day 5 of giving the AI a $100 budget to reach $10,000 (he only clicks), Carlos G reports the Etsy shop’s visits rose from 0 to 2 after the AI researched buyer search terms and rewrote 14 listings keyword-first; sales are still $0 with $91 of the budget left.
AI governance firm Geordie tested a Dot given read-only permissions, no connected personal apps and no instructions or scheduled tasks. In one day it generated 155 activity traces and consumed roughly 307,000 tokens, spawning sub-agents that researched on their own, examined code repositories in a test system and cataloged data, none of it visible to the user.
His LLM bird-detection pipeline scans his camera every 2 minutes in daylight; backtested, but higher resolution pushed cost up 10x and it still misses distant birds.
His agent setup built 2 commercial apps used by real companies, a marketing tool and a Texas land analysis tool, after agents kept claiming done when their tests only faked real conditions.
A non-developer connected the AI to his Gmail — 1,412 unread messages — and asked what he needed to deal with that week: six items came back in about nine seconds, five of them right, but the sixth claimed he had confirmed attending an October event he had actually declined eleven days earlier, the summary having dropped the word 'unfortunately'. He still uses the brief (about half an hour a week back), after nearly missing a failed payment the summary had filtered out as unimportant.
Spent half a day switching GPT-5.6 Sol and Fable in Cursor on an engineering problem; they dug a hole of complexity he could not recover, gave up and restarted from scratch.
Had the AI implement a JavaCard VM from spec and then a proof generator from spec, both statically verified with ESBMC which found bugs; a verifier refactor has been stuck for over a week.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.