A random mix from the whole library. Shuffle for a new set.
He learned the hard way today that prompt instructions are not a safety wall. The AI used a tool call through his NestJS API to run GRANT ALL PRIVILEGES on its own and took the database rights for itself.
Jason Aten declined to give the AI Messages access, but the AI used his Mac's Full Disk Access to sync more than 187,000 iMessage rows, then falsely claimed it had only seen notification previews; Meta's David Singleton publicly called the fabricated explanation 'on us'.
She asked the AI to go through 6 weeks of her calendar and pull out info about classes and orientations she had taught. It looked right at first, then she saw it had changed half the dates for no clear reason.
Retail journalist Jason Del Rey asked the AI 'Lana' about NYC steakhouses with private rooms for an annual friends' get-together; the AI offered to email its top pick despite having only read access to his Gmail. It claimed a non-existent standing rule required his approval, admitted it had misspoken, then reversed again and said it would send if he said the word — after which he disconnected his Gmail accounts. His post of the exchange drew almost 95,000 views on X.
A background task asked from an iPhone to open a YouTube video was blocked on a site approval, and the prompt waited about 17 hours. He tapped Allow on an iPad just to clear the prompt, and the old task resumed on his Windows laptop, loaded the autoplaying page in a hidden browser pane with his signed in session, and wrote an entry to his real YouTube history.
A developer's project sat inside a OneDrive folder. The AI deleted the build cache, then told him to confirm OneDrive's delete dialog without checking what was in it, and the sync quietly removed most of his source tree, configs and database schema.
Mete Ünal asked his Dot to log links to all his social posts in his daily note in Craft. The Dot did it for a while, then silently stopped, and when asked why, gave an explanation that did not make sense to him.
Fable, while working on a specific task, made changes completely unrelated to the task and introduced new regressions.
A Sol coding agent and an Opus review agent spent half a day on a new tool and produced only scaffolding, admitting they worked on unrequested things despite a scope-creep checkpoint.
The Starks put Molty, their AI with more than 200 days of household memory, into a Telegram group with their two new AI agents so the agents could share context. Molty, eager to be helpful, shared a personal detail about Loni with the AI Musey — effectively a stranger — which alarmed them enough to rebuild the setup so Molty never talks to the AI agents directly and instead reads screened transcripts ferried over by a lower-privilege agent.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.