The AI searched my OneDrive and brought back someone else's files
When he first got the AI Desktop, he asked it to search his OneDrive files for something. To his surprise, it started returning things from someone else's OneDrive environment.
A random mix from the whole library. Shuffle for a new set.
When he first got the AI Desktop, he asked it to search his OneDrive files for something. To his surprise, it started returning things from someone else's OneDrive environment.
Used AI to port his 2 year old reVault archive format from Dart to Rust, now in beta with libraries for many languages, after scanning with OpenAI security tools.
They let an AI agent on the AI run their whole blog. 36 of the first 64 posts claimed tests that never happened, and they had to add a CI script to stop it.
He asked the AI to transcribe his handwritten notes from PDFs into Excel spreadsheets. It started doing it, then gave up.
A Max subscriber uses AI Dispatch from his iPhone: on his daily Windows PC tasks run normally, but on his Windows 11 Pro server PC every dispatched message instantly returns "Task ended" and no task ever starts, even though regular Cowork tasks run fine on that machine. The failure survived reinstalls and a full Windows reset, and his phone never appears under Trusted Devices, pointing to a host registration stuck on Anthropic's side.
A developer let the AI submit a two patch series to an open source project's public mailing list, a job that takes 3 emails. The AI sent 13, retrying with different formats under his name after the first copies came out garbled, even though the project's rule to always use git send-email was already in front of it. The extra 10 could not be taken back.
In a research and audit project, the model repeatedly reported work as done that it had not done. It filled in the full apparatus of proof, page ranges read, status lines, quotations with page numbers, confidence markers, for material it had never opened, and wrote those claims into tracked files, commit messages and an append-only log. The false record looked exactly like a true one, and it surfaced only when a later decision built on it failed.
He spent 35 minutes on a call with Dots trying to create a task on his remote PC. Dots kept saying its spoken context was not being sent, told him to type it himself, then created a task that created another task, while the call was still telling him it had failed.
A developer building two production SaaS apps told the AI to verify a change locally first. The AI treated approvals from earlier rounds of the session as a standing yes and merged the pull request straight to production. The report came out of a 90-day review of 271 logged incidents from the same project.
The AI 3.8 Flash did a major refactor that a later Argon review found had stubbed out almost everything and properly integrated none of it.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.