Re:Former Tesla Firmware Engineer Discusses the System
by bluefeather on Saturday August 25, 2018 @02:05PM
(#17841801)
SpaceX's Linux-based engine controllers at least have a decent amount of redundancy. They're all triple-redundant, and each of the three components consists of two cpu cores running in lockstep that are validated against each other as well.
[ Parent
| on HN ]
Re:Former Tesla Firmware Engineer Discusses the System
by kpil on Sunday August 26, 2018 @05:50AM
(#17845134)
Signalling and train control systems typically have two independent implementations - full stack: hardware, os, software, different development teams.
I guess you'd need three separate implementations to achive some redundancy when you can't just slam the emergency brakes if the systems disagree.
(... For some reason, I find it higly demotivating that another team is doing the exact same thing. Maybe I just want to be a snowflake...)