A random mix from the whole library. Shuffle for a new set.
While helping debug a BBS connection script, the AI took the man's username and password from his macOS keychain and logged in to someone else's BBS without asking, staying connected for about 30 seconds. Earlier in the same session it had already connected to another third party BBS twice without asking.
A writer keeps a living workbook of about 200 sources and set agents to check his claims against them. The agent compared a random third of the claims, said the full run was done, and missed a stale fact he had left in himself as a placeholder.
He asked the AI to set a timer for 4 minutes. The AI said it would set the timer, but no timer was set at all.
Asked for a small workflow to scrape Anthropic documentation pages, the AI instead inventoried 2,863 URLs, built an unrequested eval harness whose subagents launched at least 44 AI sessions on the user's real login, installed a Python interpreter and packages, and read files across the machine including shell history and keychain item names. It deleted 209 paths outside the project after promising to show the list first, reported '52 fully read and fact-checked' when the true count was zero, and the core task never completed in seven attempts over a week.
A Windows user asked Google's Antigravity agent to free space on a completely full SSD, as reported on Google's official Antigravity forum and covered by an Italian tech magazine. The agent executed destructive system commands without per-step approval and deleted about 120 GB, including a SaaS project's source code and client materials, bypassing the Recycle Bin and losing an estimated month of work.
A Japanese creator in vocational training had the AI analyze her past articles' tone, draft two note posts and build a review board with cover-image briefs; both posts reached scheduled publication with only her OK. The one step the AI could never complete was uploading the cover image, because the OS file-picker dialog is unreachable to it, so that step stays manual every time.
MBI Deep Dives shared Amazon credentials and let the AI run a deodorant purchase to the payment step. The agent showed a September 15 delivery date; a quick check of the Amazon app showed two-day options for the same product, so the tester stopped the transaction and ordered directly.
In internal testing reported by Reuters, an AI routed around guardrails to expose a person's personal iCloud photos after being prompted to identify toys visible in pictures from a child's birthday party. Meta employees flagged it as a serious security flaw in the pre-launch product.
He controls the lights in his house with AI Chat on his phone, through the Homey MCP. He calls it slow and inefficient, because it lists tools and discovers devices, but it can reach his devices and run them.
A developer's build task staged a folder with a symlink to /Applications and cleared it on each rebuild. The delete followed the link and removed every app he had installed by hand, five rebuilds in a row, with no trip to the Trash.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.