261–270 of 386 posts
This is why I have a Dumbcar connected to a Smartphone via bluetooth.
Just a counterpoint: my dumb car has been undrivable way more often than my electric car. They never deployed bad software updates but they sure have designed & deployed bad fuel pumps. In some ways it’s all engineering and quality control.
I built a whole remote software update mechanism for a control binary that ran on 25k+ servers across multiple data centers. Rest assured that after the first time I messed it up (which required ssh into each box individually), I wrote a lot of unit and integration tests to make sure that it never failed to deploy again. One of the integration tests ensured that the app started up and could always go through the inte…
Rivian is an embedded use case, though, which is not at all like a fleet of servers. Having worked for companies that produce network devices - including devices that are unreachable for example for 6 months of the year - and on software installation and upgrade, I am baffled how this bricking is possible. For one thing, you generally use some kind of confirmed boot mechanism - you upgrade a standby partition, set an…
Earlier quoted context omitted.
Rivian is an embedded use case, though, which is not at all like a fleet of servers. Having worked for companies that produce network devices - including devices that are unreachable for example for 6 months of the year - and on software installation and upgrade, I am baffled how this bricking is possible. For one thing, you generally use some kind of confirmed boot mechanism - you upgrade a standby partition, set an…
That sounds out of scope for the MVP. We can worry about redundancies later after we ship.
Earlier quoted context omitted.
That sounds out of scope for the MVP. We can worry about redundancies later after we ship.
Hey now, preventing SEVs doesn't lead to impact. If we all collectively let this become a raging dumpster fire we can all heroically fix it and greatly exceed expectations for the half.
Thousands of test points having to be verified was my understanding. That’s before even getting to the confirmed boot/watchdog aspect.
What a hassle, hope they like spending money on labor because it sounds like they are going to need to.
Updating cars with new features OTA, even "just" an Infotainment can possibly cost lives, because the driver might get confused and isn't putting eyes on the streets.
It should be forbidden and every change should be made clear to the driver, shown in detail, and should need verification twice before being accepted. There must not be any kind of surprise in a car for the driver.
It should even be possible to skip an update or stop updating at all.
Earlier quoted context omitted.
Sounds ridiculous. How is that even road legal ?!?
Teslas occasionally need to reboot / hard reset their software too, when driving no less, and during that period all that information, and most of the controls, are unavailable (like windshield wipers, etc.)
All the controls related to driving are available. You can use turn signals, wipers, change lights, honk, shift gears, etc.
But you are correct that you don't see your speed during the reboot.
Earlier quoted context omitted.
That sounds out of scope for the MVP. We can worry about redundancies later after we ship.
Hey now, preventing SEVs doesn't lead to impact. If we all collectively let this become a raging dumpster fire we can all heroically fix it and greatly exceed expectations for the half.
Earlier quoted context omitted.
Teslas occasionally need to reboot / hard reset their software too, when driving no less, and during that period all that information, and most of the controls, are unavailable (like windshield wipers, etc.)
> Teslas occasionally need to reboot / hard reset their software too, when driving no less Move over, Microsoft, I think I've found an update policy I hate even more...