A.I. - what no developer ever talks about... but does it anyway...

[Cableguy]

This thread is meant to be an healthy discussion, withou blame nor shame.

There has been a lot of threads lately about how to use AI to help create and/or improve overall performance of an app.
To me, this begs for an often overseen question...
If your are creating an app for a client, assuming you are deontologically serious even if your client didn't impose you a N.D.A. you still uphold it, doesnt using A.I. (not local service) void this, exposing potential sensitive info, either about the project, either about the client and clientsinfrastructure?

 

[AnandGupta]

I understand your view is,
Client: Need an app which shows a list of todo items on the Android screen. We should be able to add/edit/delete them and also arrange them manually.
Me: Okay $$ for it.

Next day, we to AI
We: make an B4X app which shows a list of todo items on the Android screen. We should be able to add/edit/delete them and also arrange them manually.

Right ? Then we are exposing the client requirement to the AI and now it is all over its knowledge base.

---
If you mean the above scenario, then it is wrong. We do not do like that with AI.
What we do is like this,

We to AI: Show B4x code for showing a list of items on Android screen.

After fixing all bugs of AI and more chat with it for the same, next
We to AI: How to manually arrange the items in a list, need B4X code.

Again same fixing cycle.
We did not ask for add/edit/delete as we know how to do in B4X.

We have the app now.

In no way we are exposing potential sensitive info of the client to AI or Human.

---
But if you meant something else, then please explain again.

BTW the above app is just a example in short way.

 

[Pendrush]

I'm using local gpt-oss:20b model on M4 MacMini with 48GB of ram, then connect my PC to MacMini server. No data or source code leak. Everything is inside local network only.

 

[Cableguy]

I understand your view is,
Client: Need an app which shows a list of todo items on the Android screen. We should be able to add/edit/delete them and also arrange them manually.
Me: Okay $$ for it.

Next day, we to AI
We: make an B4X app which shows a list of todo items on the Android screen. We should be able to add/edit/delete them and also arrange them manually.

Right ? Then we are exposing the client requirement to the AI and now it is all over its knowledge base.

---
If you mean the above scenario, then it is wrong. We do not do like that with AI.
What we do is like this,

We to AI: Show B4x code for showing a list of items on Android screen.

After fixing all bugs of AI and more chat with it for the same, next
We to AI: How to manually arrange the items in a list, need B4X code.

Again same fixing cycle.
We did not ask for add/edit/delete as we know how to do in B4X.

We have the app now.

In no way we are exposing potential sensitive info of the client to AI or Human.

---
But if you meant something else, then please explain again.

BTW the above app is just a example in short way.

Many client invoiced apps have some branding, like logo, phisycal address, etc.
Now, imagine I had managed to create an app that taps into my client's DataBase (in-house dedicated server), and my client is satisfied with my app... still he would like me to stream line and improve my apps overall performance... I read another user that asked about how to do jyst this using IA, feeding the whole project to it, and getting either a final improved version, either improvement suggestions... in this case, all client info would have been shared with the IA...
So, for me at least, this consists in a breach of NDA, or even worse, full client data breach.

 

[aeric]

Many client invoiced apps have some branding, like logo, phisycal address, etc.
Now, imagine I had managed to create an app that taps into my client's DataBase (in-house dedicated server), and my client is satisfied with my app... still he would like me to stream line and improve my apps overall performance... I read another user that asked about how to do jyst this using IA, feeding the whole project to it, and getting either a final improved version, either improvement suggestions... in this case, all client info would have been shared with the IA...
So, for me at least, this consists in a breach of NDA, or even worse, full client data breach.

In software development lifecycle (SDLC) practice, the team have development and staging environment where dummy data are being use. The databases are different from the production.

 

[ilan]

This thread is meant to be an healthy discussion, withou blame nor shame.

There has been a lot of threads lately about how to use AI to help create and/or improve overall performance of an app.
To me, this begs for an often overseen question...
If your are creating an app for a client, assuming you are deontologically serious even if your client didn't impose you a N.D.A. you still uphold it, doesnt using A.I. (not local service) void this, exposing potential sensitive info, either about the project, either about the client and clientsinfrastructure?

you are absolutely right. today everything is almost using AI to learn from and improve. I am a CNC programmer and using cam software like Fusion 360 or others where you save you project on their cloud you also risk they will take your technology of how you create your parts and if your competition now uses also fusion 360 they get AI suggestion according what they learned from your part machining. this is one aspect another is that sometime you work on very secret project and even though you work offline because you are not allowed to work on a pc with internet connection on such projects the cam software may use AI tools and leak some info once the pc is again connected to the world even though you are not working on that project anymore.
AI is great but can also harm your business! use it smart!!

 

[AnandGupta]

you are absolutely right. today everything is almost using AI to learn from and improve. I am a CNC programmer and using cam software like Fusion 360 or others where you save you project on their cloud you also risk they will take your technology of how you create your parts and if your competition now uses also fusion 360 they get AI suggestion according what they learned from your part machining. this is one aspect another is that sometime you work on very secret project and even though you work offline because you are not allowed to work on a pc with internet connection on such projects the cam software may use AI tools and leak some info once the pc is again connected to the world even though you are not working on that project anymore.
AI is great but can also harm your business! use it smart!!

Learn from hackers (ethical) then.
They use 'cloud' for their benefit and not to reveal themselves.

Any tool is boon if used correctly else it becomes bane, even for self.