News for hackers. Stuff that matters.
Re:Tesla: Introducing Autopilot and Dual Motor All Wheel Drive by m_mueller on Friday October 10, 2014 @03:18AM (#8436616)
Don't you need at least three actors, such that in a single failure condition you can use an election algorithm? I guess two are enough if you do regular snapshotting and the worst case time to restore from a snapshot is lower than the real time bounds you need to comply with.
Re:Tesla: Introducing Autopilot and Dual Motor All Wheel Drive by michaelt on Friday October 10, 2014 @04:27AM (#8436762)
It depends if, when two processors disagree, you can perform a simple 'stop' action.

For example, if something goes wrong with the processor on your industrial robot arm, you just stop all the motors and activate all the brakes. No need to figure out which of the processors is right, have an engineer come out and fix the bug that caused the disagreement.

On the other hand, if something goes wrong with the processor during your space shuttle launch, it would not help to turn off all the rockets - better to have an election algorithm so things can keep working.

Is a self-driving car more like the first case or the second? Depends if the driver is ready to take the wheel :)

Re:Tesla: Introducing Autopilot and Dual Motor All Wheel Drive by TheLoneWolfling on Friday October 10, 2014 @06:48AM (#8437102)
I'd argue the second case, generally.

There are far too many situations where a switchover time of [user initial reaction time + initial response time] is high enough to be rather dangerous.

Re:Tesla: Introducing Autopilot and Dual Motor All Wheel Drive by agoetz on Friday October 10, 2014 @12:39PM (#8438678)
Generally the system will fall back to a 'limp home mode' running on a simpler algorithm on a watchdog microcontroller. See for example, Freescale's reference design for an airbag controller.

http://www.freescale.com/webapp/sps/site/application.jsp?cod...