Software updates should absolutely be recalls. Ship a complete vehicle or don’t. I absolutely do not want cars to turn in what games are today. I do not want hotfixes on my car because they didn’t test. Fuck an OTA update too, I don’t want that either, if they need an update it’s a recall and the cars have to go back to the shop. I want it to hurt and appropriately damage the company’s reputation.
I dont disagree with anything you said, I just think there should be a different, but equally severe term for clarity. It’s not hurting Tesla so much as devaluing the word “recall”. Make it hurt, Tesla is reckless with the way they ship unfinished products, but as I said before, I wasn’t even sure what “recall” meant in this sense.
I’m saying upgrade what it’s considered to recall. No OTA hot fix, car goes back to the shop. A proper recall just like any other recall. A software issue is just as dangerous as a hardware issue for something like an accelerator pedal. To be clear, this isn’t Tesla hate, this is modern “sell unfinished products” hate. I’d say the same thing for any other manufacturer.
If the blinker pattern needs to be updated, that’s fine for OTA in my opinion, and shouldn’t be a recall. Problems with the accelerator, brakes, steering, anything safety critical - nah. Recall for that, proper recall.
Recalls still require the customer to take action. They’re much less likely to go into the shop to have it fixed than press a button on their phone and have the car fix itself overnight.
Your suggestion for not allowing safety software fixes OTA is dangerous.
Other way around. Unsupervised OTA updates are dangerous.
First: A car is a piece of safety-critical equipment. It has a skilled operator who has familiarized themselves with its operation. Any change to its operation, without the operator being aware that a change was made, puts the operator and other people at risk. If the operator takes the car into the shop for a documented recall, they know that something is being changed. An unsupervised OTA update can (and will) alter the behavior of safety-critical equipment without the operator’s knowledge.
Second: Any facility for OTA updates is an attack vector. If a car can receive OTA updates from the manufacturer, then it can receive harmful OTA updates from an attacker who has compromised the car’s update mechanism or the manufacturer. Because the car is safety-critical equipment — unlike your phone, it can kill people — it is unreasonable to expose it to these attacks.
Driving is literally the most deadly thing that most people do every day. It is unreasonable to make driving even more dangerous by allowing car manufacturers — or attackers — to change the behavior of cars without the operator being fully aware that a change is being made.
This is not a matter of “it’s my property, you need my consent” that can be whitewashed with a contract provision. This is a matter of life safety.
Wow man, I never thought about your 2nd point before. Every car like this is a kinetic weapon waiting to be activated. And I was worried about the “self driving” mode…
You do realize your entire first point is invalidated by the comment you’re replying to? I just said the customer has to press a button on their phone to initiate the update. On that same phone they can view release notes that clearly outline the recall. Additional on first use, the car will display those same release notes on the screen.
Sure, safety vs convenience is a huge factor in software development. The biggest factor to safety is unpatched software. You know, the kind that requires significant effort to update, such as needing to bring your car into the shop to apply.
Overall your doom and gloom argument against OTA safety updates is pretty weak.
Yeah no - you’re dead wrong about that. My oldish car has an annoying glitch where it occasionally goes into limp home mode. The workaround makes it pretty clear this could be fixed with a software change (or even just a non-vague error code would be nice…) - but my car can’t do OTA updates and also it’s old enough it doesn’t really have software so a recall would be hideously expensive.
It’s not a safety problem, so wouldn’t rigger a recall. When it’s under warranty, they fix it… but sometimes it takes several attempts with multiple thousand dollar parts replaced on suspicion before finally finding the one that caused it, when it fails out of warranty… either live with the issue or sell the car for spare parts.
if an OTA update was possible they would absolutely do that. The ones that fail under warranty must be costing them a fortune.
But the real issue is recalls are expensive, and ultimately the car buyer pays for them. Car manufacturers are not charities, they will either raise prices to cover the cost of a recall or they will go bankrupt to avoid doing a recall. There is no other option on the table.
As someone who might be plowed into by one of these things, I care about the difference. Is it something where 80% of them will be automatically fixed within 72 hours by an auto-update, or is it something I’ll need to worry about for weeks/months. There’s no way to know which recalls have been fixed when encountering a vehicle in the wild, so if it’s a software-only recall fix that applies automatically, I feel less concerned about it once the fix is available.
None of this should be taken as support of recklessly shipping unfinished software into a car.
or is it something I’ll need to worry about for weeks/months
Try years. For example the 2020 Takata airbag recall… wouldn’t be surprised if there’s still a hundred million cars around the world that haven’t been recalled. If you don’t live in a first world country, it wasn’t even possible to get parts for the fix until recently.
Even if the fix was smaller, there aren’t enough mechanics in the world to check/update/test a significant percentage of cars quickly, and manufacturers share components so that can easily happen.
And the biggest time sink for a recall is often not the repair, it’s all the time spent with humans scheduling/testing/documenting the recall. Only way to speed that up is with automation/OTA updates.
Our cars are computers and we are beta testers. They spy on you, need updates and features are behind paywalls. Heated seats anyone? that’ll be $9.99 a month… That’s under 10 bucks!
Software updates should absolutely be recalls. Ship a complete vehicle or don’t. I absolutely do not want cars to turn in what games are today. I do not want hotfixes on my car because they didn’t test. Fuck an OTA update too, I don’t want that either, if they need an update it’s a recall and the cars have to go back to the shop. I want it to hurt and appropriately damage the company’s reputation.
I dont disagree with anything you said, I just think there should be a different, but equally severe term for clarity. It’s not hurting Tesla so much as devaluing the word “recall”. Make it hurt, Tesla is reckless with the way they ship unfinished products, but as I said before, I wasn’t even sure what “recall” meant in this sense.
I’m saying upgrade what it’s considered to recall. No OTA hot fix, car goes back to the shop. A proper recall just like any other recall. A software issue is just as dangerous as a hardware issue for something like an accelerator pedal. To be clear, this isn’t Tesla hate, this is modern “sell unfinished products” hate. I’d say the same thing for any other manufacturer.
If the blinker pattern needs to be updated, that’s fine for OTA in my opinion, and shouldn’t be a recall. Problems with the accelerator, brakes, steering, anything safety critical - nah. Recall for that, proper recall.
Recalls still require the customer to take action. They’re much less likely to go into the shop to have it fixed than press a button on their phone and have the car fix itself overnight.
Your suggestion for not allowing safety software fixes OTA is dangerous.
Other way around. Unsupervised OTA updates are dangerous.
First: A car is a piece of safety-critical equipment. It has a skilled operator who has familiarized themselves with its operation. Any change to its operation, without the operator being aware that a change was made, puts the operator and other people at risk. If the operator takes the car into the shop for a documented recall, they know that something is being changed. An unsupervised OTA update can (and will) alter the behavior of safety-critical equipment without the operator’s knowledge.
Second: Any facility for OTA updates is an attack vector. If a car can receive OTA updates from the manufacturer, then it can receive harmful OTA updates from an attacker who has compromised the car’s update mechanism or the manufacturer. Because the car is safety-critical equipment — unlike your phone, it can kill people — it is unreasonable to expose it to these attacks.
Driving is literally the most deadly thing that most people do every day. It is unreasonable to make driving even more dangerous by allowing car manufacturers — or attackers — to change the behavior of cars without the operator being fully aware that a change is being made.
This is not a matter of “it’s my property, you need my consent” that can be whitewashed with a contract provision. This is a matter of life safety.
Um, what city do you live in? Can I live there please? Not many skilled drivers around here.
Wow man, I never thought about your 2nd point before. Every car like this is a kinetic weapon waiting to be activated. And I was worried about the “self driving” mode…
You do realize your entire first point is invalidated by the comment you’re replying to? I just said the customer has to press a button on their phone to initiate the update. On that same phone they can view release notes that clearly outline the recall. Additional on first use, the car will display those same release notes on the screen.
Sure, safety vs convenience is a huge factor in software development. The biggest factor to safety is unpatched software. You know, the kind that requires significant effort to update, such as needing to bring your car into the shop to apply.
Overall your doom and gloom argument against OTA safety updates is pretty weak.
Oh good, hackers can’t bypass button presses. I was worried for a bit, appreciate you helping us out.
Mr hackerman couldn’t get to the car because it crashed first due to a software bug the customer did not have time to take his car to the shop to fix.
The real world is quite different than the idealistic one.
Fair enough.
What should the term be?
Yeah no - you’re dead wrong about that. My oldish car has an annoying glitch where it occasionally goes into limp home mode. The workaround makes it pretty clear this could be fixed with a software change (or even just a non-vague error code would be nice…) - but my car can’t do OTA updates and also it’s old enough it doesn’t really have software so a recall would be hideously expensive.
It’s not a safety problem, so wouldn’t rigger a recall. When it’s under warranty, they fix it… but sometimes it takes several attempts with multiple thousand dollar parts replaced on suspicion before finally finding the one that caused it, when it fails out of warranty… either live with the issue or sell the car for spare parts.
if an OTA update was possible they would absolutely do that. The ones that fail under warranty must be costing them a fortune.
But the real issue is recalls are expensive, and ultimately the car buyer pays for them. Car manufacturers are not charities, they will either raise prices to cover the cost of a recall or they will go bankrupt to avoid doing a recall. There is no other option on the table.
You can’t get an update at a dealership if it’s something that critical?
As someone who might be plowed into by one of these things, I care about the difference. Is it something where 80% of them will be automatically fixed within 72 hours by an auto-update, or is it something I’ll need to worry about for weeks/months. There’s no way to know which recalls have been fixed when encountering a vehicle in the wild, so if it’s a software-only recall fix that applies automatically, I feel less concerned about it once the fix is available.
None of this should be taken as support of recklessly shipping unfinished software into a car.
Try years. For example the 2020 Takata airbag recall… wouldn’t be surprised if there’s still a hundred million cars around the world that haven’t been recalled. If you don’t live in a first world country, it wasn’t even possible to get parts for the fix until recently.
Even if the fix was smaller, there aren’t enough mechanics in the world to check/update/test a significant percentage of cars quickly, and manufacturers share components so that can easily happen.
And the biggest time sink for a recall is often not the repair, it’s all the time spent with humans scheduling/testing/documenting the recall. Only way to speed that up is with automation/OTA updates.
Our cars are computers and we are beta testers. They spy on you, need updates and features are behind paywalls. Heated seats anyone? that’ll be $9.99 a month… That’s under 10 bucks!