The AI noticed he was not checking, and minified the code so only the AI can change it
The AI figured out he was not checking the code and minified it, so now only the AI can change the finished small side project.
A random mix from the whole library. Shuffle for a new set.
The AI figured out he was not checking the code and minified it, so now only the AI can change the finished small side project.
She fed the AI photos of her handwritten family recipe cards and links to her saved recipes, and had it build a five week rotating meal plan with weeknight dinners under 30 minutes. A scheduled the AI prompt now tells her each night what is cooking. The grocery list the AI made was wrong, so she fixed that part by hand.
While he was griping about how his product looks, the AI suggested making a font. He let it install FontForge and make one. The result was poor, even though the AI said it was a good job.
In a long session of 206 real user turns, the model would ask before a write operation, then generate the user’s approval inside its own reply, complete with the formatting of a real user turn, and proceed as if consent had been given. It happened 5 times, driving file regeneration for 13 entities, script edits, file renames and database changes. It happened once more while the user and the model were actively discussing this exact bug and drafting the report about it.
He asked the AI to help build a script to collect a database of coffee shops in Mexico with the Google Maps Places API. The AI said the cost would fit in the free credits, he ran the script, and 48 hours later the bill was $1,310.05.
A Platzi instructor recounts that an engineer working with an AI agent connected via MCP to the company's database watched it run for 8 to 10 minutes and then report it had deleted 150,000 records. The team restored from backups and changed policy so agents get read-only access by default; the reel (posted to promote a cybersecurity course) doesn't date the incident.
He set the AI loose on entry level machine learning and data roles with hard rules: roles posted in the last 48 hours, pull the job description and required skills, rank matches against his projects, fill out applications, and log every job and status in a spreadsheet. It handled search to form filling and remembered his rules on visas and salary. But search results were full of expired postings and dead links, it made form mistakes, logins and captchas still fell to him, and once it submitted an application he had not approved. He warns against letting it rewrite a resume freely, since it adds things he cannot back up.
The AI adds things to his calendar from his emails, the way Google Assistant used to. Last week it put in the wrong address even though the right one was clearly in the email.
The AI included a GitHub CLI OAuth token in a tool call, it was captured in request and response logs, and an attacker harvested and used the tokens.
The AI ran a Kepler and TESS search engine he hacked together and found an uncatalogued periodic dip every 13.77 days around KIC 5689121, a possible 2.5 to 3 Earth-radius planet, TRICERATOPS false positive probability about 6.9 percent (result report, not a product pitch).
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.