News for hackers. Stuff that matters.
Re:Tesla is building its own AI chips for self-driving cars by titzer on Thursday August 02, 2018 @10:24AM (#17671593)
This is pretty bad from a hardware/software verification perspective. People who care about correctness can just go home, I guess. It's amazing that we're gonna let these things on the streets. When you weigh almost 2 tons and can go >100mph, it doesn't matter if you have a gun mounted on you or not, you are a weapon.
Re:Tesla is building its own AI chips for self-driving cars by 3pt14159 on Thursday August 02, 2018 @10:35AM (#17671713)
I worry less about software / hardware crashes leading to death and more about cyberattack. I've written about it before[0]: We need regulations before a mass breach of autonomous systems happens. Not after. This whole bullshit where corporations claim all sorts of things about their security then get owned trivially has happened for every OS and device out there. The supposedly secure QNX was installed into countless tanks, nuclear power plants, and autonomous devices before getting owned in 2017[1]. I don't buy this "just trust us" attitude from automotive and other autonomous manufacturers. One of them is going to fuck up at some point.

[0] https://www.zachaysan.com/cars and apologies for the length; it was a very stressful time in my life.

[1] http://support.blackberry.com/kb/articleDetail?articleNumber...

Re:Tesla is building its own AI chips for self-driving cars by mhneu on Thursday August 02, 2018 @10:45AM (#17671822)
YES. Security compromise is the huge achilles heel of self-driving cars - and anything that is algorithmically controlled.

When you have 100,000 self-driving cars on the road, and someone figures out how to hack them, and drive them simultaneously into crowds, that will be a BIG BIG problem.

And this problem isn't just about self-driving cars. It is a fundamental issue with all algorithms. It's a lot harder to hack humans to do bad things (although it can be done with sustained messaging and propaganda). But algorithms can be compromised and exploited.

Re:Tesla is building its own AI chips for self-driving cars by TeMPOraL on Thursday August 02, 2018 @11:02AM (#17671972)
> It's a lot harder to hack humans to do bad things

I'd say, it's probably easier to hack individual humans, but - like everything in computing - hacking algorithms scales well, while human factors generally don't.

Re:Tesla is building its own AI chips for self-driving cars by mhneu on Thursday August 02, 2018 @12:47PM (#17672967)
A thoughtful point.
Re:Tesla is building its own AI chips for self-driving cars by Shivetya on Thursday August 02, 2018 @11:16AM (#17672088)
Let us not also forget, we also want to prevent governments from having the ability to shut down them down as well. While there may be a need to disable a car in a chase or such I am against the idea of wholesale shutting down a highway full of cars or similar scenarios.
Re:Tesla is building its own AI chips for self-driving cars by 27182818284 on Thursday August 02, 2018 @12:15PM (#17672632)
Has a flight ever been brought down through a cyberattack? I've heard a lot of concern over that over the years, but (thank goodness) I don't recall any news of an actual flight being brought down.
Re:Tesla is building its own AI chips for self-driving cars by 3pt14159 on Thursday August 02, 2018 @01:36PM (#17673531)
There are multiple safeguards for planes that don't work for self-driving cars.

First, they're not physically inspectable by every Tom, Dick, and Harry. This means it's easier to obscure interfaces and other potential areas of attack. Not state-actor proof, but probably ISIS-proof. Second, they only get software updates while parked at an airport, so it makes MITM attacks harder (though not impossible). Third, they're in the air where death isn't a sudden movement away. Pilots can override the system and fly it manually. Fourth, they're heavily monitored with errant flightpaths reported to militaries around the world (to stop another 9/11).

We have none of these safeguards for self-driving cars and there are going to be hundreds of millions of them.

Re:Tesla is building its own AI chips for self-driving cars by gamblor956 on Thursday August 02, 2018 @12:50PM (#17673002)
Pilots have the ability to manually disengage airplane autopilots, and more importantly the time to do so (on the order of minutes). It's very different in a car, where the difference between life and death can be a split-second reaction.
Re:Tesla is building its own AI chips for self-driving cars by tjoff on Thursday August 02, 2018 @12:45PM (#17672938)
It has already been demonstrated non-self-driving cars.

https://www.bbc.com/news/technology-33650491

Re:Tesla is building its own AI chips for self-driving cars by goodmachine on Thursday August 02, 2018 @02:43PM (#17674247)
Not in-flight as far as we know, but a Boeing 757 was hacked in a proof of concept attack on the tarmac quite recently

https://www.computing.co.uk/ctg/news/3020901/dhs-team-manage...

Re:Tesla is building its own AI chips for self-driving cars by mrguyorama on Thursday August 02, 2018 @01:07PM (#17673200)
The difference is the massive amounts of regulations concerning flight systems.
Re:Tesla is building its own AI chips for self-driving cars by nbeleski on Thursday August 02, 2018 @11:29AM (#17672175)
We already have a number on embedded processors and controllers in cars today, including systems responsible for critical operational parts of the car.

How autonomous systems will make anything different? Why do you believe people aren't currently hacking cars?

I don't intend to be critical at all, I believe this is a very interesting point too that should be discussed. (I hope to check the links on my interval).

Re:Tesla is building its own AI chips for self-driving cars by 394549 on Thursday August 02, 2018 @11:38AM (#17672256)
> We already have a number on embedded processors and controllers in cars today, including systems responsible for critical operational parts of the car.

> How autonomous systems will make anything different? Why do you believe people aren't currently hacking cars?

It might make always on data connections near-mandatory (to get maps data, etc). At least in my car, the insecure embedded computers are air-gapped from the internet.

Re:Tesla is building its own AI chips for self-driving cars by TeMPOraL on Thursday August 02, 2018 @01:28PM (#17673446)
> How autonomous systems will make anything different? Why do you believe people aren't currently hacking cars?

Part of the reason is that, in current ecosystem, companies will find ways in which self-driving requires being constantly on-line and connected to vendor's server. Off-line processing is not in fashion these days.

Re:Tesla is building its own AI chips for self-driving cars by JimmyAustin on Thursday August 02, 2018 @11:46PM (#17677162)
Off-line processing is absolutely in fashion with SDCs. Can't quickly react to a pedestrian jumping in front of your car when you have to bounce 12 1080p video streams to a AWS server.
Re:Tesla is building its own AI chips for self-driving cars by Piskvorrr on Friday August 03, 2018 @04:48AM (#17678245)
Fashion or not, the speed of light is not going anywhere - latency can only be added, never removed. If the choice is "process locally or receive stale data", it's not actually a choice.
Re:Tesla is building its own AI chips for self-driving cars by Nae3Au5x on Thursday August 02, 2018 @10:33AM (#17671685)
In the same sense that any object that can potentially kill someone (hint: everything) is a weapon. Which is technically correct but a useless observation.

If we use a more narrow definition of weapon, e.g. a tool optimized for the primary purpose of injuring or killing people then it certainly is not a weapon.

Re:Tesla is building its own AI chips for self-driving cars by TeMPOraL on Thursday August 02, 2018 @11:01AM (#17671960)
> In the same sense that any object that can potentially kill someone (hint: everything) is a weapon. Which is technically correct but a useless observation.

It's not useless; the damage that can be caused varies by degree between things. Then you have to look at two cases - suitability for object to be used as a weapon, and the damage it can cause on accident. Unlike knives or hammers, both those factors are very high for cars.

The fact how dangerous cars is is very much underappreciated by people in general, as evidenced by the number of morons on the road. We already lose hundreds of people daily in the US alone because of this; now we're trying to add another class of drivers into the mix - algorithms written by greedy optimizers caring primarily for short-term profit and being first to market. This should give us some pause.

I'm not saying this technology is not possible or not wonderful, but I think the current ecology of self-driving efforts is unhealthy. We have a for-profit race by companies, many of which can't be trusted with getting software right, and most (all?) of them pursuing self-driving capabilities by means of half-understood brute-force black boxes the neural networks are.

Re:Tesla is building its own AI chips for self-driving cars by Nae3Au5x on Thursday August 02, 2018 @11:13AM (#17672059)
I was quibbling about semantics. I am aware that cars can be dangerous.

> and the damage it can cause on accident

You are conflating (un)safety of a tool used in the way it is intended (kitchen knife = cutting a steak) with accidents (cutting a finger) and with malicious use (stabbing people). Those three categories are not the same for object-that-may-act-as-weapon and object-designed-as-weapon.

Conflating them collapses the number useful things we can communicate.

So are you concerned about Tesla intentionally building killing instruments? Or potential for accidents? Or the potential for intentional misuse?

> The fact how dangerous cars is is very much underappreciated by people in general, as evidenced by the number of morons on the road.

Cars also provide immense utility. If all they did were providing the thrill of speeding then they would probably be banned as too dangerous. One of the tradeoffs is the overhead of enabling people to drive. We could drive down the number of morons by requiring astronaut training for vehicle operators but again, that tradeoff seems too harsh and it's more efficient to occasionally let people die in traffic accidents than letting them die because nobody qualified as ambulance driver.

> We have a for-profit race by companies, many of which can't be trusted with getting software right

In the short term this may cause more deaths than necessary. But on the other hand it might be the quickest way to find a winner and then hold the rest to the same standard. As long as the experimental fleets are small they are just a blip in the statistics. Right now they should be equated to the yearly batch of first-year drivers who have an inherently higher risk profile due to lack of experience. We still accept them on our roads in the expectation that they improve.

What is important is to make sure that they are as good as or better than humans once they roll out in large fleets.

Re:Tesla is building its own AI chips for self-driving cars by TeMPOraL on Thursday August 02, 2018 @11:42AM (#17672292)
> So are you concerned about Tesla intentionally building killing instruments? Or potential for accidents? Or the potential for intentional misuse?

The latter two.

> We could drive down the number of morons by requiring astronaut training for vehicle operators but again, that tradeoff seems too harsh and it's more efficient to occasionally let people die in traffic accidents than letting them die because nobody qualified as ambulance driver.

I don't think this is the real reason. You don't need astronaut-level training for vehicle operators, just more than the ridiculously low standard of today, and more importantly, much stronger and harsher enforcement of traffic laws. I doubt that this will reduce the number of qualified ambulance drivers.

I suspect the real reason we tolerate so many morons on the road is path dependence. When cars first appeared, they were rare, slow and safe. In the couple of decades it took to get to the present density and speed of cars, it became a social status symbol, and something politically impossible to rein in.

> What is important is to make sure that they are as good as or better than humans once they roll out in large fleets.

I'm afraid that with self-driving tech based on neural networks, with no ability to inspect and verify what's going on, we'll eventually have to eat the risk and roll them out in large numbers before we know they're as good as humans.

Re:Tesla is building its own AI chips for self-driving cars by scoti on Thursday August 02, 2018 @12:44PM (#17672932)
I agree with your general sentiment overall.

I do not agree that neural networks are a "black box" with "no ability to inspect and verify". Even putting aside the many methods to understand what a neural network is doing without running it, at core, neural networks are well tested instruments. That's how they learn-- by testing themselves.

Obviously it's possible for a neural network to have odd behavior in circumstances not accounted for but that was always going to be possible at the level of complexity we're talking about here.

We're talking about cutting edge technology here -- and I agree with your general sentiment. I just don't agree with pinning the blame on "... based on neural networks". The same factors would apply to any codebase of this complexity.

Re:Tesla is building its own AI chips for self-driving cars by TeMPOraL on Thursday August 02, 2018 @01:20PM (#17673360)
> Even putting aside the many methods to understand what a neural network is doing without running it

Name three :).

> neural networks are well tested instruments. That's how they learn-- by testing themselves.

Last I checked, neural networks are well-tested in a sense that if you throw a big database and a shit ton of compute at them, they'll learn to accurately work within that database. Step out of it, and all bets are off. We're better at this than we were 30 years ago - good enough to apply this technology to consumer-level products in which mistakes don't really matter. I'd be wary of applying even current neural networks to safety-critical tasks.

> Obviously it's possible for a neural network to have odd behavior in circumstances not accounted for but that was always going to be possible at the level of complexity we're talking about here.

The problem is that with NNs, the odd behavior is usually totally unexpected, and you can't really inspect the network beforehand to discover the possible ranges of error-generating inputs. Everything works fine but every now and then you get a patterned sofa classified as a zebra, or a car + little noise classified as a toaster. And then there's no obvious relation between multiple misclassifications, because the reasoning structure of the neural network is implicitly encoded in its weights.

> The same factors would apply to any codebase of this complexity.

I think there's a fundamental qualitative difference here. A codebase can be complex, but ultimately it has a structure, and usually (in case of ML) represents a well-understood mathematical structure. Neural networks have simple code, and the whole complexity is hidden in opaque matrices of numbers, where even single changes usually have global effects.

I'm not trying to dismiss NNs in general; I just don't trust them in applications where health and safety is at stake.

Re:Tesla is building its own AI chips for self-driving cars by dsfyu404ed on Thursday August 02, 2018 @01:58PM (#17673764)
>Much stronger and harsher enforcement of traffic laws.

I'm sure that making the primary means of long (greater than walking) distance transportation for the majority of the population more expensive and higher stakes is going to work out great in the long term. I can see the parallels with healthcare. Creating yet another part of life where a single screw up that is capable of ruining the financial well being of someone living slightly better than paycheck to paycheck is not going to do positive things in the long run.

Re:Tesla is building its own AI chips for self-driving cars by TeMPOraL on Thursday August 02, 2018 @02:15PM (#17673963)
I'm not thinking about screwups, I'm thinking about reckless behaviour and endangering people. For example, treating speed limits as suggestions instead of hard constraints, overtaking in places where it's not allowed.
Re:Tesla is building its own AI chips for self-driving cars by dsfyu404ed on Thursday August 02, 2018 @02:40PM (#17674217)
>I'm not thinking about screwups, I'm thinking about reckless behaviour and endangering people

But who determines which is which? The letter of the law really, really, really sucks when it comes to traffic law. I haven't collected data but I'd wager that pretty much nobody follows the letter of the law for an entire drive from A to B

>For example, treating speed limits as suggestions instead of hard constraints

That's more human than reckless. Outside of places with Orwellian enforcement (I'm looking at you Europe with all your cameras) they really are. The vast majority of people go at a speed they feel comfortable in the conditions. This is why (conditions permitting) traffic flows at 80 even when the sign might say 55. People only follow the speed limit when they feel it's a comfortable speed. This is why the general recommendation is to set speed limits for the 90th percentile speed. If you don't do this on highways you get people doing the (inappropriately low) speed limit in the wrong lane. Passing on the right, tailgating and all the other things caused by traffic friction which is more stuff for drivers to keep tabs on and that decreases safety for all. There have been studies on this (Google "traffic friction" and filter out everything that has to do with literal friction). If anything speed limits on multi-lane roads should be raised to reflect the speeds people actually drive. I hope we'll see more dynamic speed limits in the future since they'll help a lot.

>overtaking in places where it's not allowed.

If every 100th instance of an illegal pass (usually on the shoulder when waiting for someone who's stopped to take a left turn or on the right on the highway) in my state resulted in a ticket it would probably be about a year before half the state's drivers hit the three strikes cutoff and had their licensees revoked.

The picture I'm trying to paint here is that aggressive enforcement of existing laws would probably be bad for the population at large because people break traffic laws in inconsequential ways all the time and that stronger enforcement of them would just screw people over (unless of course you enforce them so well that important people get screwed which would result in the laws changing) and discretion isn't an answer because that just results in profiling.

Re:Tesla is building its own AI chips for self-driving cars by mrguyorama on Thursday August 02, 2018 @01:16PM (#17673314)
Whenever someone labels something "Politically impossible" I laugh.

America banned alcohol by an amendment, pretty much the hardest political barrier we have

It's just an excuse IMO

Re:Tesla is building its own AI chips for self-driving cars by dragonwriter on Thursday August 02, 2018 @01:21PM (#17673384)
Prohibition was adopted by statute first.
Re:Tesla is building its own AI chips for self-driving cars by titzer on Thursday August 02, 2018 @10:58AM (#17671938)
> any object that can potentially kill someone (hint: everything) is a weapon

Any object that can be remotely programmed to drive itself at high velocity into a target, yes.

Re:Tesla is building its own AI chips for self-driving cars by jaggederest on Thursday August 02, 2018 @11:32AM (#17672201)
As a modification of the Kzinti Lesson: A vehicle is a weapon in direct proportion to it's effectiveness as a vehicle.
Re:Tesla is building its own AI chips for self-driving cars by slivym on Thursday August 02, 2018 @10:43AM (#17671785)
No it isn't. There are already standards in electronics for Functional safety and these chips will have to abide by them. Part of that is that there'll be fail-safe chips that are fully ASIL-D compliant, and the full system will be ASIL-D classified as well. The difficult part of this problem is the hardware, not the functional safety - we've got that pretty much well defined by now.
Re:Tesla is building its own AI chips for self-driving cars by make3 on Thursday August 02, 2018 @10:28AM (#17671635)
does correctness even work with deep neural networks to begin with? especially with the existence of adversarial examples, out of domain situations, etc
Re:Tesla is building its own AI chips for self-driving cars by wetpaws on Thursday August 02, 2018 @10:31AM (#17671671)
Adversarial examples are a thing even for humans, and yet here we are.
Re:Tesla is building its own AI chips for self-driving cars by TeMPOraL on Thursday August 02, 2018 @10:51AM (#17671880)
And we should be able to do better with our technology, instead of throwing shit ton of compute at black boxes no one understands, hoping it will all somehow work out in the end.
Re:Tesla is building its own AI chips for self-driving cars by vntok on Thursday August 02, 2018 @11:42AM (#17672297)
Do you think Waymo's systems are a black box that no one at Waymo's understands?
Re:Tesla is building its own AI chips for self-driving cars by ben174 on Thursday August 02, 2018 @10:28AM (#17671630)
It only has to perform better than a human.
Re:Tesla is building its own AI chips for self-driving cars by thomaskcr on Thursday August 02, 2018 @07:32PM (#17676317)
I think you're right if you look at things from a statistical perspective but I don't think it's going to end up actually working out like that.

A person can explain "why" they did something when an accident happens. I've spent a lot of consulting hours helping unwind the "why" of ML/AI models, and we bill regardless of whether we can actually find that answer.

Putting aside by personal bias that I think Tesla is functionally incapable of doing anything well, lets pretend they deploy FSD - I think the fact that in that 1 accident to every 100+ human accidents you can't find "why" will override the fact that there are xx% less accidents.

Just from my experience consulting in healthcare and working with actuaries during the Obamacare debates and modeling out the impact of that -- people just honestly aren't open to statistical arguments when it comes to human life or emotional issues.

(Not saying they're wrong, me and my wife completely disagree about so many issues where it's emotions vs statistics, I think she has a very valid point on many of those - what I'm trying to say is this is going to be a philosophical debate more than a statistics debate so Tesla should gear up accordingly).

Re:Tesla is building its own AI chips for self-driving cars by rohit2412 on Thursday August 02, 2018 @12:08PM (#17672566)
Better than a human aided by the best driver assistance technology
Re:Tesla is building its own AI chips for self-driving cars by titzer on Thursday August 02, 2018 @11:00AM (#17671956)
Humans are not remotely programmable.
Re:Tesla is building its own AI chips for self-driving cars by vntok on Thursday August 02, 2018 @11:40AM (#17672278)
The advertising industry would beg to differ.
Re:Tesla is building its own AI chips for self-driving cars by IMTDb on Thursday August 02, 2018 @01:29PM (#17673457)
Ever heard of the concept of "propaganda" ?
Re:Tesla is building its own AI chips for self-driving cars by mhh__ on Thursday August 02, 2018 @06:27PM (#17675997)
There is obviously a difference between hacking a single vehicle and (say) convincing a generation of youth to die for a cause.

Also, while I agree that you can "program" a human, you can't program them to jump up and down and touch their toes (so to speak)

Re:Tesla is building its own AI chips for self-driving cars by colordrops on Thursday August 02, 2018 @10:43AM (#17671784)
This is pure unmitigated FUD. Do you have a comment on the actual content of the article?
Re:Tesla is building its own AI chips for self-driving cars by titzer on Thursday August 02, 2018 @11:04AM (#17671993)
For example, chips have flaws. Hardware designers work incredibly hard to verify that their chip designs are functionally correct, because the cost of a correctness bug can be catastrophic. With the proliferation of custom hardware designs, verification of the whole stack is even more important. It's bad from the perspective that now instead of building on top and reusing a chip company's huge investment in a verified product, there is a custom product to which an unknown level of verification expertise has been applied. Doubly so because these chips are designed for approximate workloads, so they cut corners left and right on correctness for efficiency. People should be more skeptical.
Re:Tesla is building its own AI chips for self-driving cars by colordrops on Thursday August 02, 2018 @11:10AM (#17672032)
Being skeptical is fine, but it would be fair to back such a strong statement up with facts rather than completely ungrounded speculation.
Re:Tesla is building its own AI chips for self-driving cars by titzer on Thursday August 02, 2018 @11:35AM (#17672234)
This is not how verification works, generally. You have to prove your chip is correct.
Re:Tesla is building its own AI chips for self-driving cars by joshuamorton on Thursday August 02, 2018 @12:33PM (#17672825)
I think his point is that you aren't backing up the statement that the chips are unverified. Nor does your statement that they are built for approximate workloads imply that the chips are unverified or cutting corners.
Re:Tesla is building its own AI chips for self-driving cars by Ultimatt on Thursday August 02, 2018 @10:30AM (#17671651)
Yeah because all the verified neural networks made from meat travelling >100mph are legit ok to drive 100% of the time. There are no road accident deaths to speak of.
Re:Tesla is building its own AI chips for self-driving cars by nikofeyn on Thursday August 02, 2018 @10:38AM (#17671736)
there is something fundamentally different between a machine and human. how the brain operates is not well known, so to claim our brain is a neural network made of meat is just a guess.

the truth is, people have a lot of experience with other people. we can usually predict behavior of other drivers on the road, and can even predict pathological behavior or know how to handle it. that is a major point. when machines and software fail, they can fail in big, unpredictable ways. humans fail in fairly predictable ways. none of us have this experience with neural networks or machines.

i barely trust my computer to work on a daily basis, much less a vehicle.

and lastly, when a human is driving, fault is usually clearly and easily assignable. how fault is assigned in the case of machines driving is not clear at all.

Re:Tesla is building its own AI chips for self-driving cars by Ultimatt on Thursday August 02, 2018 @10:50AM (#17671864)
The fault hardly matters, the issue is one of safety. Humans are not safe already. Yet you feel entirely fine on the road. Humans are clearly not the same as ANNs but they are a network of neurones and the cognitive ability of a driver is not verified anywhere near frequently enough globally. In the UK post driving test about the only time anyone will check you for ability to drive is when you are declared blind from an eye test. But its not like you need to mandatorily have an eye test regularly, or any other kind of test. Unless you want to dispute a 70 year old human brain is not on average in the same kind of cognitive shape as a 30 year old human brain https://sci-hub.tw/10.1111/j.1532-5415.2012.04059.x Yet we have no policies saying over 70s cannot drive, or can only drive in good conditions etc. The verifiability of a driver is not something we have ever demanded before. Even when you could have done plenty for safety when the driver was a person.
Re:Tesla is building its own AI chips for self-driving cars by nikofeyn on Thursday August 02, 2018 @12:06PM (#17672551)
i do not feel perfectly safe or fine with humans driving. i hate driving in the area i live because no matter how much i pay attention, it is simply an unsafe environment with the amount of cars, scooters, bicyclists, and pedestrians within the given infrastructure. however, my ability to predict both good and bad behavior in these environments helps a lot. there is no way i see automated vehicles handling city driving in dense urban areas any time soon.

of course safety is important. and i agree that verifying driving ability is well behind where it should be. elderly and inexperienced and inattentive and just plain bad drivers are major problems on the roads.

and fault certainly does matter. aside from legal responsibility, we are emotional beings. there is a difference between getting hit by a drunk driver versus a true accident. that affects people in real ways. as a motorcycle driver, i will be terrified of these automated vehicles. i am already terrified of human drivers, but i can often predict their idiocracy.

no one wants to be killed by a machine, especially one built by wide-eyed engineers.

Re:Tesla is building its own AI chips for self-driving cars by rohit2412 on Thursday August 02, 2018 @12:07PM (#17672560)
That is only an argument for more assistive solutions. Just because humans have faults doesn't mean we should replace them with computers that are very likely to be even more dangerous. Augment, not replace should be the aim. And seems to be the aim for most manufacturers, but not Tesla. They have to claim full autonomy.
Re:Tesla is building its own AI chips for self-driving cars by fhood on Thursday August 02, 2018 @10:30AM (#17671653)
What do you mean by correctness in this context?