Hacker News Reader

md2020

Comma has really good safety code. ISO26262 compliant, and they use MISRA C guidelines. Hotz talks about safety in the comma.ai discord server all the time, and frequently berates people for requesting unsafe features or making unsafe forks of openpilot. Afaik, comma auto-bans devices from using their servers if they detect that you’re running a fork that’s removed safety restrictions. It’s safe.

View on HN

I've worked with ISO26262 before, it's not some utopia, it's a very basic set of requirements, and these requirements are bourne of hard-learned lessons, lessons Hotz seems to publicly dismiss constantly. It doesn't matter if he points out the safety cocerns he has, it's about having a system in place to address safety concerns you don't have. It's the things that aren't obvious that are going to go wrong, and even if they go wrong in 1/10000 cases that's still once per person per year. To be clear, these standard are literally about not assuming the designer is a genius, which absolutely seems to be a premise that Hotz doesn't want to accept.

Reply on news.ycombinator.com