Earlier quoted context omitted.
> The accelerator pedal would have to be immovable, frozen in place. In recent Toyota vehicles the pedal isn't connected to the throttle--it's drive by wire. In theory the computer could continue accelerating regardless of the gas pedal's position.
I've designed systems like this. You use redundant potentiometers to sense throttle position. If they don't match within 5%, you power down. You also toggle bits in your code. One in the main loop, another in any interrupt service routine that you are dependent upon. These bits then go to a GPIO so that the GPIO toggles. If the ISR freezes or the main loop freezes, the GPIO quits toggling. You then have an hardware,…
"Well, I have many models of Prius that got recalled, but I have a new model that didn't get recalled. This new model has an accelerator that goes wild, but only under certain conditions of cruise control. And I can repeat it over and over and over again--safely."
"This is software. It's not a bad accelerator pedal. It's very scary, but luckily for me, I can hit the brakes," he said.
-- Steve Wozniak