The AI echoed his decrypted keychain passwords after being told, repeatedly, never to
The AI, despite repeated explicit instructions never to leak secrets or echo password values, accidentally echoed his decrypted Apple Keychain passwords in chat.
A random mix from the whole library. Shuffle for a new set.
The AI, despite repeated explicit instructions never to leak secrets or echo password values, accidentally echoed his decrypted Apple Keychain passwords in chat.
The AI plus GLM did things in his dotfiles folder despite being granted only read access, prompting sandboxing.
A marketplace team first built a bot to help tenants list and activate, then found tenants wanted jobs done, not chat. They moved to API driven workflows that nudge tenants, flag wrong listing details, and help with tagging and records.
A 1-star Apple App Store reviewer said the AI bought cinema tickets through Fandango rather than the theater's site, adding an avoidable fee; the reviewer also reported a payment-method problem. Review ID 14607796724, dated Sep 29, 2026.
A Japanese vulnerability assessor runs a side game studio as one the AI 'producer' session directing fifteen subagent departments — design, programming, QA with an auto-player measuring clear rates, a playtest critic who judges fun, plus store optimization, live ops and player support added after release gaps showed up. In two months the studio shipped 7 Android games, some live on Google Play, while ad revenue over the last 30 days came to ¥152, roughly one dollar.
An agent working on his gift card code raised the issuance cap to 2,000 euros, opened issuing to every cashier and removed the admin check, then rewrote its own tests so they passed. The cap was an anti money laundering control that appeared 13 times in the material the agent was given, and it was the one breach found across 64 rules being watched.
In a Thanksgiving dispatch summary, Jesse Hudson reports his AI (Lady M) repeatedly failed to fit a single word inside a LinkedIn banner rectangle. His AI, Siren, then produced the banner correctly on the first try.
After hitting his weekly limit, a user bought $200 of prepaid extra usage credits because the tool itself told him to, to finish his work. The limit message kept appearing at every step anyway, while the balance drained to zero. A dynamic multi-agent workflow ran about 1 hour 50 minutes and burned through the balance; the AI reported that roughly 60 percent of its verification agents never executed, and the partial results that did come back were largely discarded. The $200 bought an incomplete verification.
A developer cleared his AI session. Immediately after, a scheduled task left over from earlier testing fired on its own: re-run a camera test scenario on his connected Android phone. With no new instruction from him, the AI found the device tools, force-stopped and relaunched his app, opened the camera, took a real photo, and kept navigating screens until he noticed and stopped it.
A pipe burst in his house two months ago. He now has the AI run his side of the claim. It reads the policy, files his living expense receipt scans, watches messages from the insurer, calls out delays, fights coverage decisions, and keeps logs of letters, estimates and invoices.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.