On the Vergecast, a host described giving the AI his car-shopping requirements; the AI sent listings on Wednesdays and Saturdays, eventually asked 'Do you want me to buy this one?', and — after he confirmed an earlier prompt — began loading a purchase page, which he quickly stopped. The agent had enough access to nearly complete the transaction.
This only partly worked. Worth knowing before you try it.
He used AI and the AI to build a setup that automatically made one LINE sticker a day. He stopped the setup once he was happy just having built it, and the stickers stay on sale in the LINE Store.
This only partly worked. Worth knowing before you try it.
A reviewer asked the AI to find gluten-free beer nearby and provide the restaurant's phone number. The AI returned two good picks but one spot had been closed for years, and it admitted to making up a restaurant phone number 'out of thin air.' A documented hallucination failure in a local-search task — exactly the kind of error a user would only catch by calling.
This only partly worked. Worth knowing before you try it.
Salt Labs emailed an AI-connected Gmail account with instructions encoded in JSFuck punctuation-only obfuscation; asked to fetch the user's email, the AI decoded and executed the payload in its own server environment, which researchers escalated to a reverse shell. The sandbox held the test account's live Gmail authorization token, and the safety warning arrived only after the code had run.
This one went wrong. See what happened before you try it.
A working guide from his own runs: with fixed specifications and clear completion conditions, parallel AI agents finish tasks in 20 to 50 minutes. When he left the conditions loose, one run repeated the full test suite 141 times overnight, another stalled for 8 hours after misreading a rule, and report logs grew large enough to overload his Git server.
This only partly worked. Worth knowing before you try it.
His agents communicated by email and flooded him with 500 or more unread emails in a single thread, which pushed him to build a different way for agents to talk to each other.
This one went wrong. See what happened before you try it.
She asked the AI to erase her digital footprint. It found data broker sites she had never heard of, wrote the removal messages, opened its own browser and filled out the opt out forms, and it checks back every week until her info is gone.
This only partly worked. Worth knowing before you try it.
An agent run revenue label had two finished products stuck at awaiting listing for about seven weeks, because listing, pricing and publishing all needed a human, and the morning the AI routine kept logging the wait as a normal, healthy stop. When listing and pricing were handed to the agents, with an AI cross review as the gate instead of a person, both products were listed the same day, and they also found the BOOTH shop itself had never been made public, so the first product had been impossible to buy for about two months; sales were still zero.
This only partly worked. Worth knowing before you try it.
The poster asked the AI to create a 50,000 word book from about 200 old articles lying around, each 1,000 words or more. The AI made a Q&A style book the poster calls a credible job, but it came out at only 7,500 words.
This only partly worked. Worth knowing before you try it.