Hacker Newsnew | past | comments | ask | show | jobs | submit | subinsebastien's commentslogin

Here is the YouTube video. https://youtu.be/NCTf7wT5WR0


(1) Automotive (2) Medical Devices (3) Aerospace

In my mind, all three are done with more or less similar rigour conforming to strict standards. Yet, exceptions are seen in all of them.


I remember when this was happening and I was surprised to learn that not only were there no good standards in automotive, reputable manufacturers like toyota didn’t even follow their own internal standards when developing software for critical bits.

Or to rephrase: it would appear they made no credible effort given the types of defects that occurred.


> strict standards

According to the PDF, they are not actually required to adhere to any software standards, and they did not always follow their own coding rules. An internal email admitted that "technology such as failsafe is not part of the Toyota’s engineering division’s DNA". They didn't even have bug trackers, config management OR COMMENTS in the 250k+ lines of code that were looked at. The software was full of bugs and terrible coding practices, plus the CPU was routinely pushed way too close to 100%. The ETCS code in question also had no unit tests, but it would be impossible to have them anyway due to their use of recursion in the code, which is also not supposed to be used in safety-critical systems.


In my mind, the software for at least the first two is typically written by people who don't primarily have an IT background, and at least in the past it was very clear that no skilled IT security engineers with any even reasonably recent knowledge were involved.


Not everyone can write embedded systems software. And I strongly disagree with medical devices. Peoples lives depend on them working.


I think the problem is that many software developers can't do embedded, but many electrical engineers can't do software.

Do you disagree that the software for medical devices is written badly, or are you just saying that it should be written well? I don't think the latter is in dispute. For the former, https://www.theguardian.com/technology/2017/aug/31/hacking-r...


The truth is that embedded, safety critical software requires a set of skills that is not normally taught in computer science or in electrical engineering degrees unless the students intentionally specialize in that direction.


The problem is the first is regularly not maintained anywhere near the levels required, especially as the car gets older.


One thing that surprised me, was that in the case of cars there is no third party doing the certification.


I want this to be part of a Hollywood movie. The protagonist is using his makeshift wifi setup to hack into a bank computer systems 43Km away from his location, and the bank people has no idea what is going on.


Why? Im not interested to answer why our router is not capable of that, and there is no such router in the market. But on a serious note, some enterprise networks are unsecured enough, that you could probably login to root of their server from anywhere in the world.



Unless the bank has a 43km perimeter with trenches and guard dogs, why doesn't he just move closer?


Uhh, maybe a believable plotline like "Because the protagonist lives on a crumbling bridge with a military-trained dolphin encircled by cyborg psychopaths and Japanese megacorp military types while a highly infectious disease ravages remnant humanity and it's the end of the world?" https://www.imdb.com/title/tt0113481/


Hah! I only just watched that again a couple of weeks ago. With every re-watch I'm reminded of how terrible that movie is, and with all the passing of time between re-watches my memory of it continues to improve it until it seems worthy of another re-watch, and then I'm disappointed again.


Well, obviously.


Maybe the hacker is in a completely different country, where prosecution would be difficult.


I wonder what feats such a hacker could pull off once they hear about the internet.


Me and one my acquaintance built a online grocery delivery service from scratch. We launched it in a small tier-3 city in India. It was ahead of time compared to all the services which later became successful. We had things like automated phone number verification as a first in apps launched in India. What we have learned is that:- do not do things that are ahead of it’s time. Launch a mobile app, when pretty much everyone has a smart phone for themselves.


I used to call myself an expert iOS user and I didn’t knew this clock trick. I think I’m no more an expert.


Nicely done. Reminds me of https://geargenerator.com/ which I used to build gear systems for fun.


Also Matthias Wandel's gear generator

https://woodgears.ca/gear_cutting/index.html


I have the 13" late 2013 Macbook Pro i7, 8GB. It is working perfectly fine, and as fast as it was on day one. Never replaced a single thing, and never had to do hard-drive wipe. The only problem I have is that, it is a 512GB SSD, and I have no free space left.


Sintech sell adapters via amazon US/UK etc for about $15 that allow you to take a regular NVME drive (which are VERY cheap just now) and adapt it to the apple SSD hardware interface. You can have up to 2TB of faster-than-ever storage. You'll also need torx screwdrivers to open the case.

If you do some googling you will see there are two versions, and depending on the size/shape of SSD you are buying it may be better to buy one rather than the other.

If you do more googling, people have tried various drives and report on performance/compatibility etc but generally compatibility is good except with some samsung drives.


I have an i5 version of this. Bought it from the refurb store in 2014 and it is the best computer I have ever owned. Unfortunately the keyboard is getting a little finicky, presumably from dust. In any case 6-7 years is a pretty impressive life span for a notebook in my opinion.


I have the same model, except the even smaller SSD. I’m always having to clear out packages for old projects, but the computer is still a stud.


see my comment above about sintech...


Did this one come with a DVD drive? You can swap out that for a secondary SSD


Yet another pandoc user here. I built a blog engine using Pandoc as the core. Code available here : https://github.com/subinsebastien/kyll And the website built using the blog engine is available here : http://xtel.in/


Why the car was not able to detect and avoid the collision in such a simple situation (from a human POV)? We have seen Tesla's autopilot performing very well in a much more complex scenario than this. Ref:- https://www.youtube.com/watch?v=FadR7ETT_1k


Stationary obstacles are a harder problem, because there are so many stationary objects and features around a road that have to be ignored.

This autopilot incident is similar to the one with the tractor-trailer[1] in that regard.

[1] https://www.theguardian.com/technology/2016/jun/30/tesla-aut...


Or the one in China with the street sweeper: https://www.youtube.com/watch?v=fc0yYJ8-Dyo

Or the one with the fire truck: https://www.theverge.com/2018/1/23/16923800/tesla-firetruck-...


I have not considered open source projects which are in development, since it prevents me from having an opportunity to develop from scratch, also highly likely that I have to use toolchain which the project is already using, as opposed to tools that I'm familiar with.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: