Live data from Hacker News

Former Tesla Firmware Engineer Discusses the System

twitter.com

241–250 of 589 posts

Re: Former Tesla Firmware Engineer Discusses the System

#241

At DEF CON 23 there were two car-hacking talks that made an impression on me: one about hacking a Tesla [1] and one about hacking a Jeep [2]. FWIW, I came away thinking that the software architecture of the Tesla was light-years ahead of what Jeep (and presumably many other legacy manufacturers) was shipping: [1] https://www.youtube.com/watch?v=KX_0c9R4Fng [2] https://www.youtube.com/watch?v=OobLb1McxnI

I didn't watch this talk, but I had a blast fuzzing CAN messages to various ECUs when I was in that business. I would be very easily convinced that RCE and memory overwriting (aka "recalibration") were trivially achievable around 2006 MYs

Re: Former Tesla Firmware Engineer Discusses the System

#242

Earlier quoted context omitted.

Agree completely. Hard real time is possible with Linux, we use it for sub millisecond control of Traffic Lights. The only issue we ever hit is proving that the code running is the stuff we expected to run.

> we use it for sub millisecond control of Traffic Lights Why would anyone need "sub millisecond control of Traffic Lights"? Traffic lights are mission critical systems, of course, but even millisecond precision should be more than enough, and possibly even 0.5x-1 second precision...

For legal reasons. Regs say that stop cycles have to meet minimum times in each state, if you're even off by a Tony bit you could potentially challenge it legally in court.

Re: Former Tesla Firmware Engineer Discusses the System

#243

Earlier quoted context omitted.

As a person who used to write navigation and control software for autonomous vehicles who occasionally gets downvoted for telling people that you really don't need a fancy RTOS for this stuff, you really don't need a fancy RTOS for this stuff. Linux is a very common platform for highly responsive robotic systems. I promise that their pid control isn't an Electron app.

Agree completely. Hard real time is possible with Linux, we use it for sub millisecond control of Traffic Lights. The only issue we ever hit is proving that the code running is the stuff we expected to run.

On a tangent, but still germane to the thread:

Why arent their efforts to create "autonomous only" traffic managment scenarios, where people drive into a given, known area, and the area then takes control of managing the traffic and vehicles. Such that you relinquish control of the vehicle to that area's control system, with your destination stated and then your vehicle is managed accordingly.

For example, a parking lot for a really large venue with an autonomous valet system.

YOu drive up and get out and then the system takes over your car and drives off iwth it and parks it and you recall it when needed...

Or managing traffic in a very heavily trafficed bottle-neck of a grid; such as the baybridge merging egress from SF financial district.

If you put in your destination, and join the group, all the cars could then be managed for getting onto the bridge more rapidiously ...

Autonomous doesnt need to drive me from SF to LA, but it would be great if an autonomous hive mind could get all the cars to up throughput in given situations, no?

Re: Former Tesla Firmware Engineer Discusses the System

#244

I do not want a car that someone I've never met can "ssh" into, or any other remote access method. Think I will be holding on to my ten year-old car as long as possible.

You're still going to be sharing the highway with them.

I thought about that as well. I am looking at a remote part of snow country. Every time someone says something can't be hacked in to, my coworkers prove them wrong, using tools that are already installed on the victim hosts.

Re: Former Tesla Firmware Engineer Discusses the System

#245

Earlier quoted context omitted.

I heard the same thing about the burnout and turnover. Do companies really think they are saving money by paying peanuts, grinding people down to burnout, and then constantly having to rehire/retrain new people as the old ones leave? Meanwhile the code is a mess because nobody has been there longer than a year and there is no architecture or design continuity. Just frantic patches over other frantic patches by burnt…

Capitalism. Need for money and results. I don't think that anybody wants to burnout anybody, it's just the pressure of the whole system I guess. Money pushes to do things fast. Shareholders and clients to keep happy.

> Shareholders [..] to keep happy.

In my opinion, this is the biggest flaw of the system. For many investors, a company is less about what it makes and more like a process to grow their money. Even when a company becomes profitable, there's always pressure to make it even more profitable quarter after quarter.

Re: Former Tesla Firmware Engineer Discusses the System

#246

Tesla can SSH into a customer's car? What could possibly go wrong?

Not only that, they can SSH and flash firmware for multiple devices. That in itself made me not want a Tesla anymore.

I mean, they are held to lower standards than random production VMs that I manage at work, and those can't even kill anyone.

Re: Former Tesla Firmware Engineer Discusses the System

#247

Earlier quoted context omitted.

> Why Linux instead of an RTOS? Same reason SpaceX eschews radiation-hardened processors for redundant off-the-shelf cores: supplier competition. There aren't many RTOS engineers on the market; there are many Linux engineers. Once they got over the cost of hardening the kernel, SpaceX found itself at a scaling advantage versus RTOS-based competitors.

> Same reason SpaceX eschews radiation-hardened processors for redundant off-the-shelf cores A devil-may-care throw-caution-to-the-wind cavalier attitude? > supplier competition I stand corrected. And I'm never buying a Tesla or property even remotely close to SpaceX launch sites...

[deleted]

Re: Former Tesla Firmware Engineer Discusses the System

#248

Is there any way to confirm this is actually legit? I mean, theoretically one could just make such things up, no?

Does anything about this thread really surprise you though? As to be unbelievable? Do you think that other car manufacturers are that much better? I've read so many insane stories about software in Toyotas (or was it Honda?), and those are very old, very well established companies. That a company like Tesla would have rock solid software would be a miracle.

Well, at least other manufacturers aren't trying to pull this SSH over cell networks crap.

Re: Former Tesla Firmware Engineer Discusses the System

#249
post #173

Earlier quoted context omitted.

Not just that but holy shit some of those commercial RTOSes have major issues. I work in aerospace and we recently used one where the whole system would crash after ~230 days of uptime. At least with Linux you're getting a system that's been used so much that all major issues like that are ironed out. Nothing beats a few million testers.

Ubuntu Linux has millions of testers, your custom version has only been tested by you and your customers :)

Unless you patch the kernel very heavily, no.

Re: Former Tesla Firmware Engineer Discusses the System

#250

It's so weird to see the same bizarre hacky nonsense I would cobble together being used to run cars.

Do we actually have anything better?

Of course we go. Good software engineering practices for one and common sense. Common sense doesn't increase share prices though.
Post reply on HN