Tesla fans have taken issue with the word “recall” in the past when the company has proven adept at fixing its problems through over-the-air software updates. But they likely will have to admit that, in this case, the terminology applies.
Even if Tesla sucks super hard, I agree with these complaints. I immediately checked to see if this was a “real” recall or a software one. Since they all need some physical work on them it definitely applies, but I really wish they used a different term for software update “recalls”. It’s confusing word choice.
Software updates should absolutely be recalls. Ship a complete vehicle or don’t. I absolutely do not want cars to turn in what games are today. I do not want hotfixes on my car because they didn’t test. Fuck an OTA update too, I don’t want that either, if they need an update it’s a recall and the cars have to go back to the shop. I want it to hurt and appropriately damage the company’s reputation.
In my opinion it points to a more dangerous thing, “continuous delivery” software mindset seeping into safety critical systems.
It’s fine, good even, that web developers can push updates to “prod” in minutes. But imagine if some dork could push largely untested control system updates to your car’s ECU… it’s one thing for a website site to get a couple errors, but it’s a very bad thing if it makes your steering wheel stop working.
Unfinished products make more money, and it’s high time a consumer protection law clamped down on this.
I agree I mean how many times in the past couple of years have large sites or services gone down because an update was pushed through.
Most recently I can think of teams going down earlier this year.
Should be protocols put into place for cars that need to be followed for a software update.
Should be protocols put into place for cars that need to be followed for a software update.
Protocols are in place. We can argue over wether or not those are good enough, but the car industry is incredibly heavily regulated.
Those protocols include certain systems being designated as “critical” and significantly more testing is required to change them. Some changes can only be made after an entire year of testing by a third party auditor including crash tests, emissions tests, etc.
Updating the map to inform the driver that a police officer is standing around the next corner with a radar gun? That can be done OTA with zero testing (and yes, my car does that). That’s not a critical system, it’s an important safety feature. If the car ahead of me is going to slam on the brakes the moment they see the officer… I want to know it’s likely to happen ahead of time - might even slow down myself. ;-)
This operates under the assumption that cars produced before the era of OTA updates could not have been improved by OTA updates. I’ve used a few of them, and that doesn’t seem to be the case.
But imagine if some dork could push largely untested control system updates to your car’s ECU…
While I can’t deny that this isn’t categorically impossible, it seems incredibly unlikely. At the very least, I don’t think we’ve seen this happen yet, and OTA updates have been around for a while now.
I dont disagree with anything you said, I just think there should be a different, but equally severe term for clarity. It’s not hurting Tesla so much as devaluing the word “recall”. Make it hurt, Tesla is reckless with the way they ship unfinished products, but as I said before, I wasn’t even sure what “recall” meant in this sense.
I’m saying upgrade what it’s considered to recall. No OTA hot fix, car goes back to the shop. A proper recall just like any other recall. A software issue is just as dangerous as a hardware issue for something like an accelerator pedal. To be clear, this isn’t Tesla hate, this is modern “sell unfinished products” hate. I’d say the same thing for any other manufacturer.
If the blinker pattern needs to be updated, that’s fine for OTA in my opinion, and shouldn’t be a recall. Problems with the accelerator, brakes, steering, anything safety critical - nah. Recall for that, proper recall.
Recalls still require the customer to take action. They’re much less likely to go into the shop to have it fixed than press a button on their phone and have the car fix itself overnight.
Your suggestion for not allowing safety software fixes OTA is dangerous.
Other way around. Unsupervised OTA updates are dangerous.
First: A car is a piece of safety-critical equipment. It has a skilled operator who has familiarized themselves with its operation. Any change to its operation, without the operator being aware that a change was made, puts the operator and other people at risk. If the operator takes the car into the shop for a documented recall, they know that something is being changed. An unsupervised OTA update can (and will) alter the behavior of safety-critical equipment without the operator’s knowledge.
Second: Any facility for OTA updates is an attack vector. If a car can receive OTA updates from the manufacturer, then it can receive harmful OTA updates from an attacker who has compromised the car’s update mechanism or the manufacturer. Because the car is safety-critical equipment — unlike your phone, it can kill people — it is unreasonable to expose it to these attacks.
Driving is literally the most deadly thing that most people do every day. It is unreasonable to make driving even more dangerous by allowing car manufacturers — or attackers — to change the behavior of cars without the operator being fully aware that a change is being made.
This is not a matter of “it’s my property, you need my consent” that can be whitewashed with a contract provision. This is a matter of life safety.
If a car can receive OTA updates from the manufacturer, then it can receive harmful OTA updates from an attacker who has compromised the car’s update mechanism or the manufacturer.
There’s potential for a very dystopian future where we see people assassinated, not via car bomb but via the their cars being hacked to remove braking functionality (or something similar). And then a constant game of security whack-a-mole like we see with anti-virus software. And then some brilliant entrepreneur will start selling firewalls for cars. And then it’ll be passed into law that it’s illegal to use a vehicle that doesn’t have an active firewall/anti-virus subscription.
It almost feels like the obvious path things will go down. Yay, capitalism…
I’m not totally opposed to software being used in cars (as long as it’s tested and can be trusted to the degree mechanical components are) but yeah, OTA updates just seem like a terrible idea just for a little convenience. I’d rather see updates delivered via plugging the car in (and not via the charging port - it would need to be a specific data transfer port for security reasons). Alert people when there’s an update, and even allow the car to “refuse to boot” if it detects it’s not on the latest version. But updates should absolutely be done manually and securely.
Cutting someone’s brake lines has been a means of assassination for a while. What’s new here is that it could potentially be done remotely, e.g. an attacker in Bucharest targeting a victim in Seattle on behalf of a payer in Moscow.
So yeah you could assassinate someone like that, or you could break every cars brakes at once and have thousands of simultaneous car accidents timed during some other infrastructure attack
Cutting someone’s brake lines is all or nothing and can’t be done while the vehicle is already in motion. Anyone who is not an idiot will hopefully notice as soon as they start driving that there’s something wrong with the brakes. But you could brick somebody’s car remotely and without warning while they’re taking a curve on the interstate at 80 MPH, and that’d be a lot more problematic.
In reality, few to no people outside of novels and Hollywood have actually been killed by some malefactor “cutting their brake lines.”
I don’t think anyone will disagree with you about unsupervised OTA updates.
To your first point- I agree that any update that changes the behavior of any fundamental system in a car is pretty reckless. Especially ones that increase a car’s acceleration, which Tesla historically does. I don’t know why those sorts of updates aren’t being regulated harder. OTA updates should be for mundane things like infotainment updates or, in more serious cases, to fix systems that aren’t functioning properly. It shouldn’t otherwise be used to alter how the car functions as a car, especially when these updates largely happen silently or the changes are tucked into some changelog that the owner doesn’t have to read.
However, to your second point, cars are smart now and there’s no going back. So cars do need software updates to close attack vectors.
However, to your second point, cars are smart now and there’s no going back. So cars do need software updates to close attack vectors.
He’s not saying that cars shouldn’t be updated… But that OTA updates are a problem. They’re saying that it should be a drive to the dealership to do an update. I would go a step further and make it possible to have it opt-in for car manufacturer to send out cd/usbs to update firmware.
Offline updates are generally fine and not super susceptible to general hacking. OTA on the other hand… that’s a massive risk for a reward of… slightly faster fix times?
If it’s a safety system, it might be “have the car taken to the dealership on a flatbed truck”. Also, some people don’t live near a dealership.
Like it or not, all modern cars are connected - for the maps if nothing else - and if a car is capable of an OTA update, I say do it. I don’t see how a dealership adds anything other than cost which will always discourage updates from being made at all.
And I actually think physical updates are easier - connect a laptop to the ECU, and you’re done. It’s generally only OTA updates that use code signing/etc.
Wow man, I never thought about your 2nd point before. Every car like this is a kinetic weapon waiting to be activated. And I was worried about the “self driving” mode…
You do realize your entire first point is invalidated by the comment you’re replying to? I just said the customer has to press a button on their phone to initiate the update. On that same phone they can view release notes that clearly outline the recall. Additional on first use, the car will display those same release notes on the screen.
Sure, safety vs convenience is a huge factor in software development. The biggest factor to safety is unpatched software. You know, the kind that requires significant effort to update, such as needing to bring your car into the shop to apply.
Overall your doom and gloom argument against OTA safety updates is pretty weak.
Put your hate for Tesla aside for a moment. If a car company can fix an issue with a simple OTA software update, it’s way more convenient for both the customer and the manufacturer. Quality control of an update is a separate issue but I don’t imagine there’s a difference whether your car updates itself or gets taken in for the update- the same patch gets applied in either case.
It’s not Tesla that I hate. It’s shipping products too quickly.
The inconvenience is the point. I want people to be inconvenienced, myself included. That means people complain to one another. I’ll know which models suck simply by talking to people around me. I do not want quiet stealthy patches for things like an accelerator pedal. Either do it right or pay the price. We used to make cars without hot fixes, we don’t need to start. It will allow auto manufacturers to further cut corners and push for faster releases with less testing, and we pay the price with our lives.
We used to make cars without hot fixes, we don’t need to start. It will allow auto manufacturers to further cut corners and push for faster releases with less testing, and we pay the price with our lives.
Is that borne out in the data though? It seems modern vehicles are way safer and more reliable compared to older vehicles.
Motor vehicle fatalities had their nadir in 2014, which coincides with the time when we had all major safety innovations sorted out: Advanced air bags, stability and traction control, ABS, RADAR/LIDAR/etc. collision avoidance on fancier models, reverse cameras, mandatory TMPS, etc.
Cars today are basically exactly the same mechanically and insofar as physical safety features existed in 2014. But the line goes back up into the 2020’s as idiots started packing cars with touchscreens, everything-by-wire control systems, hiding critical controls into the infotainment screen, removing physical tactile controls, and loading everything with mountains of electronic distractions. Many of these whizz-bang electronic features nobody actually wants are also released in a sorry state. New cars are objectively worse than cars from 10-15 years ago, with the possible exception of EV range.
Think of the inverse though- it used to be that in every case when your car had an issue you needed to either take it in yourself or have the technical knowhow to fix it yourself.
I do agree that it’s a slippery slope for automakers to get lazy and cut corners, but I think stricter regulation is the better solution than forcing an unnecessary inconvenience onto the customers.
it used to be that in every case when your car had an issue you needed to either take it in yourself or have the technical knowhow to fix it yourself.
That knowledge is mostly trivial. 7/10 repairs a regular Joe could do. Or worse comes to worse you can take it to a mechanic of your choosing.
I’ll take that level of service.
With the Tesla model, you very like end up with a 100k brick that no one can work on except very expensive very specialized very limited service centers.
A Tesla battery is expensive…now look at install costs. And if you’re not using an authorized installer, you’re locked out of the supercharger network.
I’m amazed how many people here drive Teslas. I think there’s only one Tesla dealership in the entire state. It would take a good 2 hours to get there from here. I guess they’re okay with having to pay for a tow all that way if something seriously goes wrong since there’s no local mechanic who will be able to fix it.
They are dirt cheap around me, which is why I see so many of them. I saw a 2016 Model S with the Ludacris update go for 13k. I kind of wanted it just to drive one, then I looked up the repair prices.
Sure… I’d get a maybe 200 mile range out of it in the summer…but once winter hit I was looking at like 25k-50k to replace the battery and the motors.
I can swap the motor and transmission in my car for less than 10k and have a mostly new car.
Or worse comes to worse you can take it to a mechanic of your choosing.
That’s also what I meant when I said “taking it in.” In either case you’re taking your car somewhere to get it repaired for X hours instead of applying an update at your home.
A Tesla battery is expensive…now look at install costs. And if you’re not using an authorized installer, you’re locked out of the supercharger network.
We aren’t talking about batteries.
I just think there’s more nuance to the situation and saying that cars should be as inconvenient as possible to fix isn’t a good solution to lazy auto software that requires future patching. Rigorous safety testing and regulation around car software sounds like a better plan to me- automakers will be held to really high standards and the consumers will still benefit from simple OTA patches to fix their vehicles when necessary.
That knowledge is mostly trivial. 7/10 repairs a regular Joe could do. Or worse comes to worse you can take it to a mechanic of your choosing.
That’s not true anymore. Modern cars have really complex problems that even mechanics struggle to fix. Especially when it’s a software problem… usually those problems just never get fixed.
As a software developer (not an automotive one) my take is the fix is to have everyone be running the same software, so that fifty thousand dollars diagnosing and fixing a problem for one car will result in it being fixed for all cars. Spread the cost out like that and it’s affordable. Otherwise it just won’t get fixed at all.
Should we go back to basic cars? I think so yes… but then I ride a motorcycle that doesn’t even have water cooling or a battery. But most people aren’t like me. They want lane keeping cruise control/etc.
I don’t want ANY manufacturer to be able to silently fix huge problems. This is not a Tesla issue. But they’re the ones currently doing it. Now to bring it back to Tesla… Do you want Elon to be able to cover his ass after a dozen people die to some manufacturing defect… Just for Tesla to silently fix some software thing and never get found out/thrown in jail for negligence?
As someone who might be plowed into by one of these things, I care about the difference. Is it something where 80% of them will be automatically fixed within 72 hours by an auto-update, or is it something I’ll need to worry about for weeks/months. There’s no way to know which recalls have been fixed when encountering a vehicle in the wild, so if it’s a software-only recall fix that applies automatically, I feel less concerned about it once the fix is available.
None of this should be taken as support of recklessly shipping unfinished software into a car.
or is it something I’ll need to worry about for weeks/months
Try years. For example the 2020 Takata airbag recall… wouldn’t be surprised if there’s still a hundred million cars around the world that haven’t been recalled. If you don’t live in a first world country, it wasn’t even possible to get parts for the fix until recently.
Even if the fix was smaller, there aren’t enough mechanics in the world to check/update/test a significant percentage of cars quickly, and manufacturers share components so that can easily happen.
And the biggest time sink for a recall is often not the repair, it’s all the time spent with humans scheduling/testing/documenting the recall. Only way to speed that up is with automation/OTA updates.
Yeah no - you’re dead wrong about that. My oldish car has an annoying glitch where it occasionally goes into limp home mode. The workaround makes it pretty clear this could be fixed with a software change (or even just a non-vague error code would be nice…) - but my car can’t do OTA updates and also it’s old enough it doesn’t really have software so a recall would be hideously expensive.
It’s not a safety problem, so wouldn’t rigger a recall. When it’s under warranty, they fix it… but sometimes it takes several attempts with multiple thousand dollar parts replaced on suspicion before finally finding the one that caused it, when it fails out of warranty… either live with the issue or sell the car for spare parts.
if an OTA update was possible they would absolutely do that. The ones that fail under warranty must be costing them a fortune.
But the real issue is recalls are expensive, and ultimately the car buyer pays for them. Car manufacturers are not charities, they will either raise prices to cover the cost of a recall or they will go bankrupt to avoid doing a recall. There is no other option on the table.
Our cars are computers and we are beta testers. They spy on you, need updates and features are behind paywalls. Heated seats anyone? that’ll be $9.99 a month… That’s under 10 bucks!
I think you don’t understand the realities of software development. Have you ever tried to write an application that another person is going to use?
The software running onboard modern vehicles isn’t all from the vehicle manufacturer. There are computer parts in there from various manufacturers that have their own software, and all the various pieces have to interact. Bugs can show up later that didn’t appear in testing because no amount of testing can possibly check every interaction, it’s just too complex. And most of those bugs are relatively minor, things like the music player volume not adjusting properly, or a little lag time in the menus. The idea that every customer would bring their vehicle back to a dealer for an update that fixes something like that is ludicrously unrealistic.
I think the point the parent poster was making is that the system shouldn’t be designed that way in the first place. And when the vendor fucks it up due to releasing the product in a half-baked state, the hammer needs to be brought down on them in such a way that it will functionally discourage them from doing it again.
If the electronics providing functionality in your vehicle are so complex that the excuse is being made potentially adverse interactions between its various components from various OEM’s can’t be tested and accounted for, what has actually happened is that designed your product wrong. Throw it away, start over, and do it right next time.
the system shouldn’t be designed that way in the first place
Designed what way? Having parts from several manufacturers? Everything is designed that way. No manufacturer is an island, and having every manufacturer reinvent their own wheels is a terrible idea.
Tesla isn’t going to write their own firmware for every component that they buy from another company and no one sane would expect them to.
when the vendor fucks it up due to releasing the product in a half-baked state
There are so many assumptions about what’s going on in this statement that it’s hard to even begin addressing them. It is not possible to test any device that will be used in the real world in every possible set of circumstances that it might encounter. This doesn’t mean it’s “half-baked”, and it’s not an “excuse”, it’s just the nature of reality. Best you can do is test the most common circumstances.
What’s confusing about it? A recall in the automotive world has a very specific definition, and it covers not only software related issues but hardware related ones as well.
The National Highway Traffic Safety Administration (NHTSA) is a part of the US Department of Transportation, and they publish a 20 page pamphlet that describes what a recall is. Here are the relevant parts from that brochure:
The United States Code for Motor Vehicle Safety (Title 49, Chapter 301) defines motor vehicle safety as “the performance of a motor vehicle or motor vehicle equipment in a way that protects the public against unreasonable risk of accidents occurring because of the design, construction, or performance of a motor vehicle, and against unreasonable risk of death or injury in an accident, and includes nonoperational safety of a motor vehicle.” A defect includes “any defect in performance, construction, a component, or material of a motor vehicle or motor vehicle equipment.”
Generally, a safety defect is defined as a problem that exists in a motor vehicle or item of motor vehicle equipment that:
poses a risk to motor vehicle safety, and
may exist in a group of vehicles of the same design or manufacture, or items of equipment of the same type and manufacture.
Furthermore:
The National Traffic and Motor Vehicle Safety Act gives NHTSA the authority to issue vehicle safety standards and to require manufacturers to recall vehicles that have safety-related defects or do not meet Federal safety standards.
In other words, federal law gives NHTSA the authority to issue recalls for any defect that is considered a safety defect. There is no qualifier for it having to be mechanical in nature.
I’ve had software-related recalls issued for both a Toyota and a Honda that I used to own. The Toyota one resulted in them sending me a USB stick in the mail and telling me how to install it in the car (basically plug it into the entertainment system and wait). The Honda one required a trip to a dealer to update the software in the ECU to prevent the cars battery from dying due to the alternator being disabled improperly. Just because these were software related in no way means they weren’t recalls. They were both mandated by NHSTA, both resulted in official recall notices, etc.
Edit: Just for fun you might want to go to https://www.nhtsa.gov/recalls and do a search there. If you enter “Tesla” in the field for “VIN or Year Make Model” you can browse all their recalls. The very first one on this page is titled “Incorrect Font Size on Warning Lights”. That’s most definitely a software recall. It’s assigned NHSTA recall #24V051000, and they list the affected components as “ELECTRICAL SYSTEM”. If you read further it also shows the remedy was an over-the-air software update.
Just because the government defined it that way 60 years ago when software updates weren’t even a thing doesn’t mean it makes sense to call a user-applicable fix a recall. It’s literally in the name. Is it being re-called back to the manufacturer or not
“user-applicable fix” is hardly correct, they are installing a fix provided by the company that has the recall. The company just so happens to provide an over the air download to patch the issue instead of having owners go to a dealer.
Where is the car being recalled to? I get that that’s the word that stuck for ‘critical fix’ or whatever but if you don’t need to bring it back that’s not a recall. Call it something else.
they are installing a fix provided by the company
So the user is applying the fix? What else do you expect that to mean?
It could easily be written in a longer statement such as “recalled for service” which is still 💯 accurate but the service is being done remotely instead of at a shop.
There are just so many other things to give a shit about in even the realm of “words meaning what they mean” that it seems like a very random, stupid thing to get hot and bothered about.
You’re probably one of those guys who has Twitter threads where you’re quoting Webster as an argument aren’t you?
If it’s being done remotely it is not recalled, that’s my entire point.
Most of my bother comes from how people are reacting with kneejerk appeals to the status quo instead of actually responding to what I (and others) wrote, think of me what you will
This is a bad take. Software updates that fix life threatening defects are as serious as any recall.
It’s motivated reasoning. Either the people making this argument are Tesla owners, simps, or shareholders and are trying to protect the phantasmagorical value of the company.
Saying “my car’s drive-by-wire software gets more firmware updates than my printer” is not a flex.
Yeah, it’s an extremely popular sentiment on the internet to scoff at software update related recalls as if they “don’t count.” 9 times out of 10 the person making the claim is a Muskrat, because this is a very common thing with Teslas and daddy Elon must be defended at all costs but every now and then they’re just a run of the mill moron unwittingly parroting Muskrat talking points.
A recall is a recall whether the issue can be patched OTA or whether you have to drive to a dealership so they can spend 30mins swapping a random seemingly inconsequential part. The specific mechanics of the solution do not change the fact that a problem required a recall to be issued to consumers. Perpetuating the notion that these recalls should be considered “less important than a real recall” is dangerous to the point of stupidity.
This is a bad take. Software updates that fix life threatening defects are as serious as any recall.
Rereading the original comment, I didn’t get the implication they were trying to say a software update “recall” is less serious. The word “recall” literally means “to bring back.” So fundamentally, calling a software update a “recall” doesn’t make sense because you aren’t bringing your car anywhere.
As a car owner, now when you hear your car has a recall you have to find out if you need to take it into a service center or just update it at home. It would be better if these software recalls went by some different, new name that immediately conveyed what you need to do.
Just had to do a Chrysler recalls that is a software update and it is a safety issue. The Traction, ABS and stability control would disable itself randomly on the Pacifica. Another one from Chrysler is the defog would not work on the Grand cherokee Hybrids. All of those are software, but also safety issues. Tesla had one where the self driving would kill people.
Tesla’s cruise control that steers sometimes is basically the opposite of those radar activated brakes some cars have.
Some cars will detect a potential collision and will apply the brakes, possibly before the driver (who is in full control of the vehicle) might react, averting the collision entirely or reducing the energy of the collision. It errs on the side of caution slightly more than the driver does, and will take control of the vehicle pretty much only to bring it to a stop.
Teslas intend to take full control of normal operation, expecting the driver to watch out for unsafe conditions that either the driving environment or the car itself create, and then take control in time to avert an accident. Drivers aren’t trained for this. This isn’t how the system is marketed. This shouldn’t be legal on our roads.
I see you haven’t used autopilot. It’s basically just the advanced cruise control/lane keep of other cars that you’ve described. It, too, drives more cautiously than most humans and only applies brakes to avoid collision rather than swerving or what have you.
I’m referring to whatever the hell is in the videos I’ve seen of Teslas accelerating toward pedestrians. My '03 Chevy hasn’t made that decision once in a quarter million miles of driving.
All of those are software, but also safety issues. Tesla had one where the self driving would kill people.
Did you have to take time off and schedule a visit to your Chrysler to a dealership to have the Chrysler software recall or is it like Tesla software recall where its mostly automatic and you set it to happen in your garage when you’re asleep?
Even if Tesla sucks super hard, I agree with these complaints. I immediately checked to see if this was a “real” recall or a software one. Since they all need some physical work on them it definitely applies, but I really wish they used a different term for software update “recalls”. It’s confusing word choice.
Software updates should absolutely be recalls. Ship a complete vehicle or don’t. I absolutely do not want cars to turn in what games are today. I do not want hotfixes on my car because they didn’t test. Fuck an OTA update too, I don’t want that either, if they need an update it’s a recall and the cars have to go back to the shop. I want it to hurt and appropriately damage the company’s reputation.
In my opinion it points to a more dangerous thing, “continuous delivery” software mindset seeping into safety critical systems.
It’s fine, good even, that web developers can push updates to “prod” in minutes. But imagine if some dork could push largely untested control system updates to your car’s ECU… it’s one thing for a website site to get a couple errors, but it’s a very bad thing if it makes your steering wheel stop working.
Unfinished products make more money, and it’s high time a consumer protection law clamped down on this.
I agree I mean how many times in the past couple of years have large sites or services gone down because an update was pushed through. Most recently I can think of teams going down earlier this year.
Should be protocols put into place for cars that need to be followed for a software update.
Protocols are in place. We can argue over wether or not those are good enough, but the car industry is incredibly heavily regulated.
Those protocols include certain systems being designated as “critical” and significantly more testing is required to change them. Some changes can only be made after an entire year of testing by a third party auditor including crash tests, emissions tests, etc.
Updating the map to inform the driver that a police officer is standing around the next corner with a radar gun? That can be done OTA with zero testing (and yes, my car does that). That’s not a critical system, it’s an important safety feature. If the car ahead of me is going to slam on the brakes the moment they see the officer… I want to know it’s likely to happen ahead of time - might even slow down myself. ;-)
This operates under the assumption that cars produced before the era of OTA updates could not have been improved by OTA updates. I’ve used a few of them, and that doesn’t seem to be the case.
While I can’t deny that this isn’t categorically impossible, it seems incredibly unlikely. At the very least, I don’t think we’ve seen this happen yet, and OTA updates have been around for a while now.
I dont disagree with anything you said, I just think there should be a different, but equally severe term for clarity. It’s not hurting Tesla so much as devaluing the word “recall”. Make it hurt, Tesla is reckless with the way they ship unfinished products, but as I said before, I wasn’t even sure what “recall” meant in this sense.
I’m saying upgrade what it’s considered to recall. No OTA hot fix, car goes back to the shop. A proper recall just like any other recall. A software issue is just as dangerous as a hardware issue for something like an accelerator pedal. To be clear, this isn’t Tesla hate, this is modern “sell unfinished products” hate. I’d say the same thing for any other manufacturer.
If the blinker pattern needs to be updated, that’s fine for OTA in my opinion, and shouldn’t be a recall. Problems with the accelerator, brakes, steering, anything safety critical - nah. Recall for that, proper recall.
Recalls still require the customer to take action. They’re much less likely to go into the shop to have it fixed than press a button on their phone and have the car fix itself overnight.
Your suggestion for not allowing safety software fixes OTA is dangerous.
Other way around. Unsupervised OTA updates are dangerous.
First: A car is a piece of safety-critical equipment. It has a skilled operator who has familiarized themselves with its operation. Any change to its operation, without the operator being aware that a change was made, puts the operator and other people at risk. If the operator takes the car into the shop for a documented recall, they know that something is being changed. An unsupervised OTA update can (and will) alter the behavior of safety-critical equipment without the operator’s knowledge.
Second: Any facility for OTA updates is an attack vector. If a car can receive OTA updates from the manufacturer, then it can receive harmful OTA updates from an attacker who has compromised the car’s update mechanism or the manufacturer. Because the car is safety-critical equipment — unlike your phone, it can kill people — it is unreasonable to expose it to these attacks.
Driving is literally the most deadly thing that most people do every day. It is unreasonable to make driving even more dangerous by allowing car manufacturers — or attackers — to change the behavior of cars without the operator being fully aware that a change is being made.
This is not a matter of “it’s my property, you need my consent” that can be whitewashed with a contract provision. This is a matter of life safety.
There’s potential for a very dystopian future where we see people assassinated, not via car bomb but via the their cars being hacked to remove braking functionality (or something similar). And then a constant game of security whack-a-mole like we see with anti-virus software. And then some brilliant entrepreneur will start selling firewalls for cars. And then it’ll be passed into law that it’s illegal to use a vehicle that doesn’t have an active firewall/anti-virus subscription.
It almost feels like the obvious path things will go down. Yay, capitalism…
I’m not totally opposed to software being used in cars (as long as it’s tested and can be trusted to the degree mechanical components are) but yeah, OTA updates just seem like a terrible idea just for a little convenience. I’d rather see updates delivered via plugging the car in (and not via the charging port - it would need to be a specific data transfer port for security reasons). Alert people when there’s an update, and even allow the car to “refuse to boot” if it detects it’s not on the latest version. But updates should absolutely be done manually and securely.
Cutting someone’s brake lines has been a means of assassination for a while. What’s new here is that it could potentially be done remotely, e.g. an attacker in Bucharest targeting a victim in Seattle on behalf of a payer in Moscow.
Remotely at scale.
So yeah you could assassinate someone like that, or you could break every cars brakes at once and have thousands of simultaneous car accidents timed during some other infrastructure attack
deleted by creator
And at any time.
Cutting someone’s brake lines is all or nothing and can’t be done while the vehicle is already in motion. Anyone who is not an idiot will hopefully notice as soon as they start driving that there’s something wrong with the brakes. But you could brick somebody’s car remotely and without warning while they’re taking a curve on the interstate at 80 MPH, and that’d be a lot more problematic.
In reality, few to no people outside of novels and Hollywood have actually been killed by some malefactor “cutting their brake lines.”
I don’t think anyone will disagree with you about unsupervised OTA updates.
To your first point- I agree that any update that changes the behavior of any fundamental system in a car is pretty reckless. Especially ones that increase a car’s acceleration, which Tesla historically does. I don’t know why those sorts of updates aren’t being regulated harder. OTA updates should be for mundane things like infotainment updates or, in more serious cases, to fix systems that aren’t functioning properly. It shouldn’t otherwise be used to alter how the car functions as a car, especially when these updates largely happen silently or the changes are tucked into some changelog that the owner doesn’t have to read.
However, to your second point, cars are smart now and there’s no going back. So cars do need software updates to close attack vectors.
He’s not saying that cars shouldn’t be updated… But that OTA updates are a problem. They’re saying that it should be a drive to the dealership to do an update. I would go a step further and make it possible to have it opt-in for car manufacturer to send out cd/usbs to update firmware.
Offline updates are generally fine and not super susceptible to general hacking. OTA on the other hand… that’s a massive risk for a reward of… slightly faster fix times?
If it’s a safety system, it might be “have the car taken to the dealership on a flatbed truck”. Also, some people don’t live near a dealership.
Like it or not, all modern cars are connected - for the maps if nothing else - and if a car is capable of an OTA update, I say do it. I don’t see how a dealership adds anything other than cost which will always discourage updates from being made at all.
And I actually think physical updates are easier - connect a laptop to the ECU, and you’re done. It’s generally only OTA updates that use code signing/etc.
Um, what city do you live in? Can I live there please? Not many skilled drivers around here.
Wow man, I never thought about your 2nd point before. Every car like this is a kinetic weapon waiting to be activated. And I was worried about the “self driving” mode…
You do realize your entire first point is invalidated by the comment you’re replying to? I just said the customer has to press a button on their phone to initiate the update. On that same phone they can view release notes that clearly outline the recall. Additional on first use, the car will display those same release notes on the screen.
Sure, safety vs convenience is a huge factor in software development. The biggest factor to safety is unpatched software. You know, the kind that requires significant effort to update, such as needing to bring your car into the shop to apply.
Overall your doom and gloom argument against OTA safety updates is pretty weak.
Oh good, hackers can’t bypass button presses. I was worried for a bit, appreciate you helping us out.
Mr hackerman couldn’t get to the car because it crashed first due to a software bug the customer did not have time to take his car to the shop to fix.
The real world is quite different than the idealistic one.
Put your hate for Tesla aside for a moment. If a car company can fix an issue with a simple OTA software update, it’s way more convenient for both the customer and the manufacturer. Quality control of an update is a separate issue but I don’t imagine there’s a difference whether your car updates itself or gets taken in for the update- the same patch gets applied in either case.
It’s not Tesla that I hate. It’s shipping products too quickly.
The inconvenience is the point. I want people to be inconvenienced, myself included. That means people complain to one another. I’ll know which models suck simply by talking to people around me. I do not want quiet stealthy patches for things like an accelerator pedal. Either do it right or pay the price. We used to make cars without hot fixes, we don’t need to start. It will allow auto manufacturers to further cut corners and push for faster releases with less testing, and we pay the price with our lives.
I can’t wait to live in a world where my own damn car wont start because someone forgot to renew a cert.
Is that borne out in the data though? It seems modern vehicles are way safer and more reliable compared to older vehicles.
Yes, actually, it is.
Source.
Motor vehicle fatalities had their nadir in 2014, which coincides with the time when we had all major safety innovations sorted out: Advanced air bags, stability and traction control, ABS, RADAR/LIDAR/etc. collision avoidance on fancier models, reverse cameras, mandatory TMPS, etc.
Cars today are basically exactly the same mechanically and insofar as physical safety features existed in 2014. But the line goes back up into the 2020’s as idiots started packing cars with touchscreens, everything-by-wire control systems, hiding critical controls into the infotainment screen, removing physical tactile controls, and loading everything with mountains of electronic distractions. Many of these whizz-bang electronic features nobody actually wants are also released in a sorry state. New cars are objectively worse than cars from 10-15 years ago, with the possible exception of EV range.
Calling it a recall or an update won’t change that. Enshittification is happening everywhere all the time anyway.
Think of the inverse though- it used to be that in every case when your car had an issue you needed to either take it in yourself or have the technical knowhow to fix it yourself.
I do agree that it’s a slippery slope for automakers to get lazy and cut corners, but I think stricter regulation is the better solution than forcing an unnecessary inconvenience onto the customers.
That knowledge is mostly trivial. 7/10 repairs a regular Joe could do. Or worse comes to worse you can take it to a mechanic of your choosing.
I’ll take that level of service.
With the Tesla model, you very like end up with a 100k brick that no one can work on except very expensive very specialized very limited service centers.
A Tesla battery is expensive…now look at install costs. And if you’re not using an authorized installer, you’re locked out of the supercharger network.
I’m amazed how many people here drive Teslas. I think there’s only one Tesla dealership in the entire state. It would take a good 2 hours to get there from here. I guess they’re okay with having to pay for a tow all that way if something seriously goes wrong since there’s no local mechanic who will be able to fix it.
They are dirt cheap around me, which is why I see so many of them. I saw a 2016 Model S with the Ludacris update go for 13k. I kind of wanted it just to drive one, then I looked up the repair prices.
Sure… I’d get a maybe 200 mile range out of it in the summer…but once winter hit I was looking at like 25k-50k to replace the battery and the motors.
I can swap the motor and transmission in my car for less than 10k and have a mostly new car.
That’s also what I meant when I said “taking it in.” In either case you’re taking your car somewhere to get it repaired for X hours instead of applying an update at your home.
We aren’t talking about batteries.
I just think there’s more nuance to the situation and saying that cars should be as inconvenient as possible to fix isn’t a good solution to lazy auto software that requires future patching. Rigorous safety testing and regulation around car software sounds like a better plan to me- automakers will be held to really high standards and the consumers will still benefit from simple OTA patches to fix their vehicles when necessary.
I guess my position is if a car needs an OTA update, it’s a critical failure by the manufacturer. They should be 99.999%.
That’s not true anymore. Modern cars have really complex problems that even mechanics struggle to fix. Especially when it’s a software problem… usually those problems just never get fixed.
As a software developer (not an automotive one) my take is the fix is to have everyone be running the same software, so that fifty thousand dollars diagnosing and fixing a problem for one car will result in it being fixed for all cars. Spread the cost out like that and it’s affordable. Otherwise it just won’t get fixed at all.
Should we go back to basic cars? I think so yes… but then I ride a motorcycle that doesn’t even have water cooling or a battery. But most people aren’t like me. They want lane keeping cruise control/etc.
“When it’s a software problem…”
Correct…now we are back to talking about vendor lock in and very specialized techs to install the updates.
I don’t want ANY manufacturer to be able to silently fix huge problems. This is not a Tesla issue. But they’re the ones currently doing it. Now to bring it back to Tesla… Do you want Elon to be able to cover his ass after a dozen people die to some manufacturing defect… Just for Tesla to silently fix some software thing and never get found out/thrown in jail for negligence?
Absolutely - because Elon is dumb enough to do that.
Um - when people die, it gets investigated and retroactive ass covering is a darwin award waiting to happen.
As someone who might be plowed into by one of these things, I care about the difference. Is it something where 80% of them will be automatically fixed within 72 hours by an auto-update, or is it something I’ll need to worry about for weeks/months. There’s no way to know which recalls have been fixed when encountering a vehicle in the wild, so if it’s a software-only recall fix that applies automatically, I feel less concerned about it once the fix is available.
None of this should be taken as support of recklessly shipping unfinished software into a car.
Try years. For example the 2020 Takata airbag recall… wouldn’t be surprised if there’s still a hundred million cars around the world that haven’t been recalled. If you don’t live in a first world country, it wasn’t even possible to get parts for the fix until recently.
Even if the fix was smaller, there aren’t enough mechanics in the world to check/update/test a significant percentage of cars quickly, and manufacturers share components so that can easily happen.
And the biggest time sink for a recall is often not the repair, it’s all the time spent with humans scheduling/testing/documenting the recall. Only way to speed that up is with automation/OTA updates.
Yeah no - you’re dead wrong about that. My oldish car has an annoying glitch where it occasionally goes into limp home mode. The workaround makes it pretty clear this could be fixed with a software change (or even just a non-vague error code would be nice…) - but my car can’t do OTA updates and also it’s old enough it doesn’t really have software so a recall would be hideously expensive.
It’s not a safety problem, so wouldn’t rigger a recall. When it’s under warranty, they fix it… but sometimes it takes several attempts with multiple thousand dollar parts replaced on suspicion before finally finding the one that caused it, when it fails out of warranty… either live with the issue or sell the car for spare parts.
if an OTA update was possible they would absolutely do that. The ones that fail under warranty must be costing them a fortune.
But the real issue is recalls are expensive, and ultimately the car buyer pays for them. Car manufacturers are not charities, they will either raise prices to cover the cost of a recall or they will go bankrupt to avoid doing a recall. There is no other option on the table.
You can’t get an update at a dealership if it’s something that critical?
Our cars are computers and we are beta testers. They spy on you, need updates and features are behind paywalls. Heated seats anyone? that’ll be $9.99 a month… That’s under 10 bucks!
I think you don’t understand the realities of software development. Have you ever tried to write an application that another person is going to use?
The software running onboard modern vehicles isn’t all from the vehicle manufacturer. There are computer parts in there from various manufacturers that have their own software, and all the various pieces have to interact. Bugs can show up later that didn’t appear in testing because no amount of testing can possibly check every interaction, it’s just too complex. And most of those bugs are relatively minor, things like the music player volume not adjusting properly, or a little lag time in the menus. The idea that every customer would bring their vehicle back to a dealer for an update that fixes something like that is ludicrously unrealistic.
I think the point the parent poster was making is that the system shouldn’t be designed that way in the first place. And when the vendor fucks it up due to releasing the product in a half-baked state, the hammer needs to be brought down on them in such a way that it will functionally discourage them from doing it again.
If the electronics providing functionality in your vehicle are so complex that the excuse is being made potentially adverse interactions between its various components from various OEM’s can’t be tested and accounted for, what has actually happened is that designed your product wrong. Throw it away, start over, and do it right next time.
Designed what way? Having parts from several manufacturers? Everything is designed that way. No manufacturer is an island, and having every manufacturer reinvent their own wheels is a terrible idea.
Tesla isn’t going to write their own firmware for every component that they buy from another company and no one sane would expect them to.
There are so many assumptions about what’s going on in this statement that it’s hard to even begin addressing them. It is not possible to test any device that will be used in the real world in every possible set of circumstances that it might encounter. This doesn’t mean it’s “half-baked”, and it’s not an “excuse”, it’s just the nature of reality. Best you can do is test the most common circumstances.
What’s confusing about it? A recall in the automotive world has a very specific definition, and it covers not only software related issues but hardware related ones as well.
The National Highway Traffic Safety Administration (NHTSA) is a part of the US Department of Transportation, and they publish a 20 page pamphlet that describes what a recall is. Here are the relevant parts from that brochure:
Furthermore:
In other words, federal law gives NHTSA the authority to issue recalls for any defect that is considered a safety defect. There is no qualifier for it having to be mechanical in nature.
I’ve had software-related recalls issued for both a Toyota and a Honda that I used to own. The Toyota one resulted in them sending me a USB stick in the mail and telling me how to install it in the car (basically plug it into the entertainment system and wait). The Honda one required a trip to a dealer to update the software in the ECU to prevent the cars battery from dying due to the alternator being disabled improperly. Just because these were software related in no way means they weren’t recalls. They were both mandated by NHSTA, both resulted in official recall notices, etc.
Edit: Just for fun you might want to go to https://www.nhtsa.gov/recalls and do a search there. If you enter “Tesla” in the field for “VIN or Year Make Model” you can browse all their recalls. The very first one on this page is titled “Incorrect Font Size on Warning Lights”. That’s most definitely a software recall. It’s assigned NHSTA recall #24V051000, and they list the affected components as “ELECTRICAL SYSTEM”. If you read further it also shows the remedy was an over-the-air software update.
I love seeing comments like this on Lemmy. Reminds me of early reddit. Super informative.
Just because the government defined it that way 60 years ago when software updates weren’t even a thing doesn’t mean it makes sense to call a user-applicable fix a recall. It’s literally in the name. Is it being re-called back to the manufacturer or not
“user-applicable fix” is hardly correct, they are installing a fix provided by the company that has the recall. The company just so happens to provide an over the air download to patch the issue instead of having owners go to a dealer.
Where is the car being recalled to? I get that that’s the word that stuck for ‘critical fix’ or whatever but if you don’t need to bring it back that’s not a recall. Call it something else.
So the user is applying the fix? What else do you expect that to mean?
Why do you give such a shit about this word?
I’m sorry for wanting things to mean what they mean
It could easily be written in a longer statement such as “recalled for service” which is still 💯 accurate but the service is being done remotely instead of at a shop.
There are just so many other things to give a shit about in even the realm of “words meaning what they mean” that it seems like a very random, stupid thing to get hot and bothered about.
You’re probably one of those guys who has Twitter threads where you’re quoting Webster as an argument aren’t you?
If it’s being done remotely it is not recalled, that’s my entire point.
Most of my bother comes from how people are reacting with kneejerk appeals to the status quo instead of actually responding to what I (and others) wrote, think of me what you will
This is a bad take. Software updates that fix life threatening defects are as serious as any recall.
It’s motivated reasoning. Either the people making this argument are Tesla owners, simps, or shareholders and are trying to protect the phantasmagorical value of the company.
Saying “my car’s drive-by-wire software gets more firmware updates than my printer” is not a flex.
Yeah, it’s an extremely popular sentiment on the internet to scoff at software update related recalls as if they “don’t count.” 9 times out of 10 the person making the claim is a Muskrat, because this is a very common thing with Teslas and daddy Elon must be defended at all costs but every now and then they’re just a run of the mill moron unwittingly parroting Muskrat talking points.
A recall is a recall whether the issue can be patched OTA or whether you have to drive to a dealership so they can spend 30mins swapping a random seemingly inconsequential part. The specific mechanics of the solution do not change the fact that a problem required a recall to be issued to consumers. Perpetuating the notion that these recalls should be considered “less important than a real recall” is dangerous to the point of stupidity.
Rereading the original comment, I didn’t get the implication they were trying to say a software update “recall” is less serious. The word “recall” literally means “to bring back.” So fundamentally, calling a software update a “recall” doesn’t make sense because you aren’t bringing your car anywhere.
As a car owner, now when you hear your car has a recall you have to find out if you need to take it into a service center or just update it at home. It would be better if these software recalls went by some different, new name that immediately conveyed what you need to do.
Right, because the recall for the icons on the screen needing to be a tad bigger is as serious as uncontrolled acceleration of a giant hunk of metal.
They need a new name for software update recalls and physical recalls. They both need to be serious, but a distinction is needed.
You understand that recalls for minor non life-threatening issues were a thing before cars were even capable of receiving software updates right?
This is not a new practice. This is what a recall entails. The term isn’t being arbitrarily applied. It’s a recall.
And how often were they actually followed vs discarded because the customer just didn’t care?
What does that have to do with calling them what they are, a recall.
Just had to do a Chrysler recalls that is a software update and it is a safety issue. The Traction, ABS and stability control would disable itself randomly on the Pacifica. Another one from Chrysler is the defog would not work on the Grand cherokee Hybrids. All of those are software, but also safety issues. Tesla had one where the self driving would kill people.
Tesla had one where the self driving would kill people *if the driver wasn’t paying attention
They nerfed the car because people were abusing the system. Fuck Tesla, but that whole ordeal was stupid as hell.
Tesla’s cruise control that steers sometimes is basically the opposite of those radar activated brakes some cars have.
Some cars will detect a potential collision and will apply the brakes, possibly before the driver (who is in full control of the vehicle) might react, averting the collision entirely or reducing the energy of the collision. It errs on the side of caution slightly more than the driver does, and will take control of the vehicle pretty much only to bring it to a stop.
Teslas intend to take full control of normal operation, expecting the driver to watch out for unsafe conditions that either the driving environment or the car itself create, and then take control in time to avert an accident. Drivers aren’t trained for this. This isn’t how the system is marketed. This shouldn’t be legal on our roads.
I see you haven’t used autopilot. It’s basically just the advanced cruise control/lane keep of other cars that you’ve described. It, too, drives more cautiously than most humans and only applies brakes to avoid collision rather than swerving or what have you.
Are you referring to Full Self Driving?
I’m referring to whatever the hell is in the videos I’ve seen of Teslas accelerating toward pedestrians. My '03 Chevy hasn’t made that decision once in a quarter million miles of driving.
Is this one of the staged videos by Dan O’Dowd or from someone legit?
Did you have to take time off and schedule a visit to your Chrysler to a dealership to have the Chrysler software recall or is it like Tesla software recall where its mostly automatic and you set it to happen in your garage when you’re asleep?