[HN Gopher] Software Engineering Within SpaceX ___________________________________________________________________ Software Engineering Within SpaceX Author : theanirudh Score : 512 points Date : 2020-06-03 14:38 UTC (8 hours ago) (HTM) web link (yasoob.me) (TXT) w3m dump (yasoob.me) | yasoob wrote: | Hi guys! I am the author of this article. Excited to see it on | the first page :) | ChrisMarshallNY wrote: | This was cool! | | Thanks for sharing that with us. | | I'd be interested in finding out how they iterate. I'm absolutely | positive that they do. | thoughtpalette wrote: | Off topic but we share the same name. Except I'd be | ChrisMarshallCHI. | ChrisMarshallNY wrote: | I met another Chris Marshall that worked for Kodak, back in | the 1990s. Have you ever worked for Kodak? | tectonic wrote: | Good writeup! In general, the direction in modern aerospace is to | use COTS (commercial off-the-shelf) parts with redundancy and | failback for radiation hardening. | | If you're into this sort of thing, I co-write a weekly newsletter | about the space industry and often talk about software. | https://orbitalindex.com | sq_ wrote: | Thank you so much for the Orbital Index! I've been subscribed | for a while now, and I look forward to it every week. Great | content! | yasoob wrote: | I just went through the last issue and enjoyed it quite a lot. | Good stuff :) | ThisIsTheWay wrote: | Just FYI but OI has become a great resource for me and my team | to maintain situational awareness on what's going on in the | industry. Thanks for all you do! | Symmetry wrote: | I'd worry that the COTS approach might be fine for dealing with | cosmic rays within the Van Allen belt but it might not be | sufficient to deal with the solar wind if you're going to GEO | or Mars. | junon wrote: | Sounds neat, first newsletter I've voluntarily subscribed to | since I was a child. Looking forward to the next issue. | aphextron wrote: | >SpaceX also made use of Chromium and JavaScript for Dragon 2 | flight interface. I am not sure how that passed the | certification. I assume it was allowed because for every mission- | critical input on the display, there was a physical button | underneath the display as well | | I think that's all the validation we need for HTML/CSS/JS as the | best tool for UI development nowadays. I wonder if there was | actual shared code from the Dragon UI used in their online | docking simulator. How neat. | riscy wrote: | It's unlikely that the flight interface is anywhere as nearly | complex and flexible as a desktop UI needs to be. | | Astronauts do not need a screen reader or other accessibility | features; nor does the UI need the ability to resize for | different monitors or play nice with the window manager, etc. | | Mission-critical UI's are also deliberately simple control | panels that send commands to some other process. In comparison, | Electron apps often try to do everything in JS, which can lead | to efficiency problems for heavy-duty tasks. | dawnerd wrote: | > nor does the UI need the ability to resize for different | monitors | | I can see this being the case in the future though | [deleted] | yetihehe wrote: | At least in space screen orientation change detection is no | longer relevant. | cbanek wrote: | Upon thinking about this, it seems like it's a different | problem in that the people are moving while the screen is | not. So maybe the screen should have a camera and try to | adjust the direction to the way the person is facing? | Obviously if the screen is upsidedown that's not great. | | (I don't think that anyone does this, but it's a neat | thought.) | Kinrany wrote: | What happens when multiple people are looking at it from | different directions, as if it was a table? | cbanek wrote: | Then it has to start a pacman game! (I used to love those | tables with the games in them that you can play from the | person across from you) | yetihehe wrote: | I would suggest some manual switch (software or | hardware), so that you can rotate displayed image as | required, not yourself. Like a selector with 4 buttons, | you click the one which is currently up for you and | display respects that. | Scarblac wrote: | This would finally enable a window manager feature I have | always wanted: "focus on the window I am looking at". | yjftsjthsd-h wrote: | This sort of exists, actually... use hover focus and | eViacam (https://eviacam.crea-si.com/) together. Of | course, that doesn't give you separate control of the | mouse, but I'm not sure that's a bug. | btown wrote: | The pilot interface, though, is not just for executing single | actions; it's for executing against complicated checklists, | some of which may be less familiar to pilots, some of which | may even be uploaded asynchronously from the ground (for | instance, consider the unorthodox procedures developed for | the Apollo 13 astronauts), and some of which may be | concurrently ongoing. | | This lends itself _extremely_ well to hypertext [0] and to | interface components such as collapsible sections of text, | being able to display multiple procedures simultaneously, | being able to resize them relative to a dashboard of | diagnostics (if not a window manager, a split-screen), and | placing the button(s) required to execute a step directly | near that step without needing to manually resize boxes when | this is requested. Browser technology is exactly the stack | that has solved all these problems! | | [0] https://en.wikipedia.org/wiki/Hypertext | dgritsko wrote: | > Astronauts do not need a screen reader or other | accessibility features | | In space, no one can hear your screen? Sorry, I couldn't | resist. | amelius wrote: | Funny thing is that a modern web browser is probably closer to | "rocket science" than the software of an actual rocket. | [deleted] | mytailorisrich wrote: | It also depends on what these screens are really used for. | | The Dragon capsule can operate without any input from the | astronauts onboard, so it's not completely clear to me whether | these screens are usedfor anything beyond _showing_ what is | going on. | johannes1234321 wrote: | Correct they can dock to ISS and return fully automatic | without astronauts being involved. However the touch controls | allow to take over, if need or safety protocol require to. | | SpaceX has a marketing version of the control interface in | this simulator: https://iss-sim.spacex.com/ How closely that | resembles the actual interface I don't know. The astronauts | claimed the simulator they used matched reality quite | closely. | attilakun wrote: | What are the sources for the claim that they use Chromium and | JavaScript? Is it the 5 year old StackExchange post? Things | might have changed since then. | amw-zero wrote: | This is one data point. Saying that that's all of the | validation that we need for web technologies being the best way | to make a UI is really only proof that statistical significance | and science currently has no place in the software industry. | It's just a fashion show. | bdcravens wrote: | If it's the only app, with a known configuration, with | presumably no general Internet access, and a simplified UI, | with redundant physical buttons for all functionality, yes, | it's probably a good choice. | discreteevent wrote: | I wouldn't agree with that. Nothing has changed. You should | still ask yourself why am I using this in my context. Could | save yourself a lot of trouble and make more money. If we were | to follow SpaceX we would also be using C#, knockout.js and | labview for everything. | bkanber wrote: | To be fair, I can't think of anything better than LabVIEW for | rapid prototyping and development of complex sensor | interfaces. | cryptonector wrote: | The consensus regarding automobiles and touch interfaces is | starting to form that they are just a bad idea. | | Physical switches, knobs, toggles, buttons -- these things can | be activated using one's hands _without_ needing to coordinate | with sight, meaning, our eyes can stay on the road. | | There is no road to keep your eyes on in space though, so | needing to coordinate hands and eyes is clearly not that big a | problem for the Dragon, and might even be better than lots of | physical inputs: you can cram more virtual inputs into the same | area by using menus and what not, and that might make it easier | to navigate one's way around them. Then again, complex menus | might make things worse in an emergency. There's not that much | for the astronauts to do in Dragon though, so it's probably all | OK. | mrfusion wrote: | I wish we could invent some kind of haptic interface for | touch screens. The flexibility of a touch screen is great but | very hard to find things without looking. | amelius wrote: | Even on a physical keyboard it's difficult to find things | without looking if you don't know yet where they are. | | The problem with touch screens is that they change what you | can touch all the time. If you'd fix that, you might as | well install a physical interface. | VMisTheWay wrote: | As someone that works in Auto on buttons and works with the | head unit team, you are incorrect. | | The benchmarking shows nearly every company is moving to | screens. Sure you might have a few models that remove the | screen, but these are cheap cars with limited features. | | You literally can't have a button for every car feature. | | And if your car doesn't have all the features, you won't sell | well. | | And if you disagree with all of this, you probably aren't the | type of person to drop 40k-50k on a new car. You'd be happy | with a 2014 car for 10k. | throwaway_pdp09 wrote: | > The benchmarking shows nearly every company is moving to | screens | | You're confusing a benchmark with... something else. And I | really dislike my new-ish MP3 player with it's damn screen | that I have to keep looking at to operate, to do anything. | | > And if your car doesn't have all the features | | My MP3 player has a ton of features and I don't need 90% of | them. I want it to do one job well - play my music and a | few other basic controls, just like my old, physically- | operated MP3 player did. I don't want awesome UX/UI | bullshit to get in the way, I just want it to do its job. | | (plz excuse rant) | Fogest wrote: | That's your opinion and an old-school one at that. The | vast majority of customers do not want something that | basic. | throwaway_pdp09 wrote: | That is my opinion which is why I kept on saying "I". I | see nothing wrong _at all_ with 'old-school'. There are | too many self proclaimed UI/UX "experts" who keep | screwing things up for people (edit: I'll restate that: | fucking over their users). I only want what works. | | > The vast majority of customers do not want something | that basic. | | And you accuse me of 'opinion'. Well, provide evidence of | this claim. | BeetleB wrote: | While your comment is valid to the the person you | responded to, consider: | | My older car with no touch screen has a custom stereo | installed - everything with physical buttons. And it can | do more than my other car with a touchscreen. Its | Bluetooth capabilities are superior. I can set it not to | auto-play, etc. | | Yes, no need to go old school. But no, you don't need a | touchscreen to get a radio/stereo with better features. | throwaway_pdp09 wrote: | I think we agree. I'm not against newer, I'm against | worse. | filoleg wrote: | This. There will always be a niche of people who want | barebones single-purpose old-school experience out of any | given device. | | Goes for literally anything, from cars to phones to music | equipment. I definitely fall into this category for some | of the things myself. However, it is important to | remember that this is not representative at all of what | the majority prefers. | throwaway_pdp09 wrote: | This is a better post than its parent, and in some cases, | sure I agree. I can't argue with someone who wants the | new & shiny, if it works for them, great. But it's being | pushed on us so such luddites as myself have no choice | any more - it's all touchscreens now. It's become | marketing driven. The choice is gone. | | > this is not representative at all of what the majority | prefers | | I was very careful to not to project my desires on others | in my original post, but you're telling me about what | "majority prefers". So back this up. I don't think you | can. | filoleg wrote: | >you're telling me about what "majority prefers". So back | this up. | | Do you see dedicated single-purpose barebones MP3 players | having a high demand? Or do people just use their | smartphones for that purpose? When you walk into a room | and ask people if they would find an MP3 player device | useful and would like to get one, what answer do you | expect to hear? | | Also, try asking the same question from people about | smartphones vs. single-purpose cellphones. Yes, there is | obviously a niche of people who want to "disconnect" and | not have to deal with smartphones. But they are in a tiny | minority. | | While market isn't a perfect representation of what | people want, it is a great proxy, in a lot of cases. And | for this situation specifically, it looks like the market | has clearly expressed what consumers want. | throwaway_pdp09 wrote: | I asked you to back this up with actual figures. Please | do so. Now... | | > Do you see dedicated single-purpose barebones MP3 | players having a high demand? | | I can't buy them. When I looked for a new one, there was | none available I could find. I did ring the companies | too. There's no choice so actual demand is difficult to | ascertain. | | Smartphones... OK, that's a good point. | | > what answer do you expect to hear? | | Irrelevant - give me figures, not asking what I expect to | get. Facts please. And if you read the comments here, | there's quite a few expressing preference for physical | controls. | | > But they [non-smartphone users] are in a tiny minority. | | A minority or a tiny minority? Give me figures please. | Don't just talk at me, throwing words around. Facts | please. And BTW I'm one of these minorities. FYI. | | > it looks like the market has clearly expressed what | consumers want | | What's your job? | filoleg wrote: | >What's your job? | | It is on my HN profile, I write code for living. | | >Facts please. | | The fact that you called up a bunch of companies, and | none of them were producing dedicated barebones MP3 | players, kind of speaks for itself. If there was a | significant demand, why wouldn't they jump on this easy | money-making opportunity, given that they would have | pretty much no competitors? | | >give me figures, not asking what I expect to get. | | I don't have numbers, and neither do you. In the absence | of actual numbers, anecdotal evidence is the second best | thing. Do you have anecdotal evidence of talking to an | average person and asking whether they would be willing | to pay for a dedicated MP3 player? I do, which is why I | asked you to imagine how that scenario would play out in | real life. | | If your scenario played out the opposite of mine, then we | would be at a stall, as anecdotal evidence is nothing | against opposing anecdotal evidence, only factual numeric | evidence can beat anecdotal evidence. But if it played | out the same, I feel like it would only act in support of | my hypothesis. | | I can also bring out hard factual numbers for the sales | numbers of dedicated MP3 players going down as smartphone | proliferation increased, if you want, but you probably | already know how those numbers look. | throwaway_pdp09 wrote: | > The fact that you called up a bunch of companies, and | none of them were producing dedicated barebones MP3 | players, kind of speaks for itself. | | Not really. From here | https://news.ycombinator.com/item?id=23405591 | | "It is fascinating just how poorly modern touch | interfaces do compared to older vehicles" with a response | of | | "I can't figure out how to turn the HVAC system on in a | newish car" | | This proves that the market is demanding worse | interfaces, otherwise why would people have to deal with | them?. That's how your argument goes, and it's bunk. | Remember the cries of pain over windows 8? That's because | people liked pain. The market spoke, right? | | > I don't have numbers, and neither do you. | | Then again I only spoke for myself. Whereas you "...this | is not representative at all of what the majority | prefers" & "it looks like the market has clearly | expressed what consumers want" believe you can speak for | others. Nope. Facts please. | | > I can also bring out hard factual numbers for the sales | numbers of dedicated MP3 players going down as smartphone | proliferation increased, if you want, but you probably | already know how those numbers look. | | Irrelevant. I spoke about dedicated MP3 players, and if | you'd bothered to read what I said, I actually said yours | was a good point. Still, dedicated MP3 players have a | market because they are still being sold - | https://www.amazon.co.uk/s/ref=nb_sb_noss?url=search- | alias%3... So a market for them still exists. It's not | about smartphones vs dedicated MP3 players, this is about | interfaces and choice. | filoleg wrote: | >"I can't figure out how to turn the HVAC system on in a | newish car" | | That says nothing about touchscreen interfaces | themselves, it says about their poor implementation in | certain cars. Just like touchscreen interfaces on phones, | they were all various degrees of trash for daily usage, | until iPhone came out with touchscreen-oriented UI and | lead by example of what touchscreen-oriented UIs for | phones are supposed to be, as opposed to just regular | phone UI with touchscreen functionality bolted on. | | A similar thing can be observed in cars. I had so many | hellscape-ish experiences with touchscreens in cars, I | can rant about those for days. But then I had an | opportunity to extensively test its implementation in | Tesla cars, and it was extremely pleasant. | | Not that your criticism of touchscreens in modern cars is | invalid, it totally is valid. Touchscreen interface | implementation in modern cars, on average, is totally | inferior to the older physical control interface | implementation. Which makes sense, as we had over half a | century to perfect that. | | However, as demonstrated by the Tesla interface I | experienced (hybrid touchscreen+physical controls on the | steering wheel), those issues are not inherent to all | touchscreen interfaces. The other manufacturers just need | to catch up (for some of them, I can already seem them | being very close). You cannot just bolt a touchscreen | onto the interface designed with physical controls in | mind and call it a day. Because that's pretty much why | those touchscreen interfaces in most modern cars are | awful to use. | throwaway_pdp09 wrote: | I'm not down on touchscreens, just when they're | misapplied, as you've indicated. And maybe markets indeed | don't always deliver what the user wants, at least not at | first. I think we've reached some agreement here. | elsonrodriguez wrote: | I've pasted this before, but there's a middle ground | between touch screens and buttons: | | https://www.youtube.com/watch?v=S6YYun90S8g&feature=youtu.b | e... | paulryanrogers wrote: | Where does the proliferation of features end and concern | for public safety begin? | moduspol wrote: | It might happen when statistics actually show cars with | touchscreens are measurably less safe. | | It'd be even safer if we removed the radio all together, | and banned any physical controls that aren't on the | steering wheel (to ensure you don't have to take your | hand off the wheel to use them). | | Why do we only care about public safety in one | circumstance but not the other? | drusepth wrote: | >Why do we only care about public safety in one | circumstance but not the other? | | Outside of armchair theorists online, I'm not convinced | anyone in charge of car design actually cares about car | safety at all. | | Car accidents are the leading cause of death for people | age 15-29 and the second leading cause of death for | people age 5-14. Nearly 3,300 people die every day in car | accidents, and double that number are permanently | disabled. | | If people actually cared about car safety, it feels like | these numbers would have gone down in the last 30 years. | They haven't. [1] | | [1] https://i.imgur.com/FE6lZu4.png | moduspol wrote: | They probably have gone down per capita, right? We just | have a lot more people than we did 30 years ago. A car | built today is certainly safer than one from 30 years | ago. | | My hope is that driverless cars end up solving this | faster than we otherwise could politically, but obviously | that may be a bit ambitious. | rblatz wrote: | The Navy went big in touch screens and is rolling that | back. Mazda, by no means a luxury brand, is abandoning | touch screens. I think touch screens will stick around for | tasks that aren't routinely done while driving, but there | will be a massive correction away from touchscreen as the | only interface to the car. | Fiahil wrote: | Higher-end units are using a "control knob" to navigate on | the screen. "Touching" is for "lower-end" vehicles. | | So, as a matter of fact, yes, you can have _one_ button for | every car feature. | setpatchaddress wrote: | Well, Mazda is going in the opposite direction. | | More and bigger screens are certainly the way of the future | for most cars/SUVs, but I'd advocate strongly for a large | set of ergonomic, reassignable hard controls. The best | thing about the Tesla Model 3 controls is the configurable | control gadget on the steering wheel (though I wish they'd | used better materials -- feels absurdly cheap in a $50k | car). | ohazi wrote: | > The consensus regarding automobiles and touch interfaces | is starting to form that they are just a bad idea. | | > The benchmarking shows nearly every company is moving to | screens. | | The fact that everyone is _moving_ to screens because they | 're flashy and cheap ($/feature) doesn't automatically make | them a good idea. | | GP _is_ correct. The consensus from a safety and usability | perspective is that touchscreens in cars are a bad idea. | Fuck the bean counters. | trixie_ wrote: | All that matters is what sells. Create a car with tons of | buttons and switches today, go out of business tomorrow. | TeMPOraL wrote: | That's why we can't have nice things, only things that | are barely fit for purpose. | csours wrote: | Disclaimer, I work for GM, any thoughts or opinions are | solely my own. I do not work on car user interface. | | I agree that anything you need to do while driving should be | a physical interface, but some of the 3D haptic stuff looks | really cool. | | I don't think touch screens are going away because the | display is so valuable, and there's so much stuff that is | non-critical that you can configure from a touch screen. | 6gvONxR4sf7o wrote: | I don't think critical vs noncritical is the important | distinction for cars. It's distracting vs not distracting. | The physical knobs and stuff in my car I don't have to look | for to use. A touchscreen button requires much more careful | finding and pressing since you can't just root around for | it. | hirundo wrote: | Why not a voice menu? In addition to a physical interface. | For most functions recognizing just a handful of words | would do the job, like <wakeup word>, one, two, three .... | You could shut off the air conditioner like | you: "hello hal" hal: "say one for radio, two for air | cond..." you: "two" hal: "say..." you: | "three" | | You wouldn't want a voice recognition app to steer or | brake, but it would be reliable enough for changing the | radio station or toggling overdrive. Are there high end | cars that have voice control stock? | richardwhiuk wrote: | Almost all high end cars have voice recognition for many | years. | | The universal impression I get is that it sucks. | csours wrote: | I can use Google Assistant with Android Auto via | bluetooth/usb in my truck and when bluetooth isn't | screwing up, it works great. | jjeaff wrote: | And you can't put customized ads on a physical switchboard. | GuB-42 wrote: | Of course you can. If it has any form of display, it can | display customized ads. Some radio stations manage to put | ads on the 14-segment display that is supposed to show | the station name and/or frequency. | | And if it doesn't, there is always room for a sticker. | Buy a new laptop and you are going to see half a dozen | ads before you even turn it on: on the box, on leaflets | inside the box, and in the form of stickers,... It seems | that only Apple doesn't play that game, but the privilege | is expensive. | avmich wrote: | > Some radio stations manage to put ads on the 14-segment | display that is supposed to show the station name and/or | frequency. | | We can talk about hardware protection against ads. The | hardware would need to recognize allowed data - like | station name and frequency - and reject disallowed, like | attempts to make a running text. This will limit | functionality; maybe it's worth it. | | We can talk about software protection - when user | controls some layer of software. We can implement it as a | type system, with the same result (only now we can modify | the software layer if we need). Type system which makes | ads non-representable looks like a nice solution. | | Guilty myself in writing a game resembling Tetris on a | 8-segment display (blocks moving horizontally), so yes, | people can be inventive... | GuB-42 wrote: | Touch feedback would be a massive improvement. I've seen | countless patents about them but in practice, all we get | are vibrators. | | The only convincing tactile feedback I've experienced is in | the MacBook trackpad, even the much publicized "Taptic | Engine" of the iPhone feels like a vibrator. And while the | MacBook trackpad is convincing at emulating clicks, it is | the only thing it does. | derefr wrote: | Have you tried the "HD Rumble" feature of Nintendo Switch | games? It's about on the same level as the "Taptic | Engine", but it's been made use of for a far-larger | variety of use-cases, so it's helpful to get a real sense | of what the possibilities are of that level of tech. | rurban wrote: | When I visited the SRI and NASA UI design groups in the | early 90ies, any feedback if touch, force, audio even | smell was being considered and implemented. Touch and | force feedback was extremely advanced there, nothing ever | made it outside. They even had early versions of Google | Glass, so that they can work hands free. | | But those SpaceX touchscreens are very bad UI design. | Would not make it in any car or plane. Those buttons need | to be physical. Remind me on the Apple touch bar, when | you need to use it at 3g. | csours wrote: | I don't have first hand experience with this, and I'm not | endorsing it, but it sure looks cool to me: | https://www.youtube.com/watch?v=m2VkcyvtMXI | varjag wrote: | For infotainment, touchscreens are a huge help, no debate | really. Anyone doubting this should get a refresher by | inputing a street name with a twist dial. | joshvm wrote: | Mission/emergency critical buttons on dragon are physical | (things like chute release) - there is a row of switches | underneath the panel. | | https://www.nasaspaceflight.com/wp- | content/uploads/2018/08/2... | tyingq wrote: | The picture looks like those don't have any tactile | feedback either. Though maybe just the picture. | s_y_n_t_a_x wrote: | There's clearly a seam around the buttons allowing them | to be depressed along with an internal light. | | Looks like most car hazard light buttons. | | If we're going to speculate based on a picture lets go | with the most likely that the physical buttons do have | tactile feedback lol. | tyingq wrote: | Zoom in and look at the left side group of buttons. Is | that a clear overlay that flips down or something? | | That may be why it looks flat to me. | plttn wrote: | Yeah, they're all covered with safety covers to avoid | bumping. | pugworthy wrote: | Keep in mind you might be operating them with a spacesuit | gloved hand. I'm not sure how thick/solid they are, but | there would be a decreased sense of physical tactile | feedback. | | Looking at the left panel, I'm guessing you first select | the function you want (Water Deorbit, Deorbit Now, | Breakout, Depress Response, Suppress Fire, Fire | Response), then click either Execute or Cancel. Lights on | the switches help you know what is selected. | akira2501 wrote: | > so needing to coordinate hands and eyes is clearly not that | big a problem for the Dragon | | Two things. During ascent the g load on the passengers is | steadily increasing. By the time you're 6:30 into the burn, | you'll be experiencing about 2.5g, and just before MECO at | about 8:15 into the burn you're close to 3.2g. I'm not sure | using a touch screen in a high-g environment is a good idea. | | Second thing, right after MECO you're suddenly very close to | 0-g. Which is a fun ride to be sure, but _everything else_ in | the cabin is suddenly weightless as well. Items have a | tendancy to start floating around the cabin and knocking into | things. | | > There's not that much for the astronauts to do in Dragon | though, so it's probably all OK. | | When everything is going according to plan.. there isn't much | to do. This isn't the scope you want to design for, though. | itsspring wrote: | > I'm not sure using a touch screen in a high-g environment | is a good idea. | | Agreed. All of the events during this time are fully | automatic. If the astronauts needed to personally abort for | a reason that ground control did not see, I saw what | appeared to be a physical abort switch that needed to be | turned and pulled (but I could be wrong) | inamberclad wrote: | Hand-eye coordination is actually quite difficult shortly | after reaching microgravity. You're so trained compensate for | the weight of your arm that you'll hit above where you expect | when you reach for things. The opposite goes for landing | again. | bkanber wrote: | My car has a holographic HUD that displays on the windshield, | and responds to hand and voice gestures. (The HUD is | _awesome_, but the gesture recognition is hit or miss at | present). | | I agree with you that touchscreens in autos are garbage. | However I don't agree that physical or haptic switches are | the _only_ solution. I think touchscreens in autos were just | a technical stepping stone towards something new, like this | combo of holographic/gesture/voice control UI. | cryptonector wrote: | Do you have to take your focus off the road and mirrors in | order to use the HUD? If so then it's dangerous. | JumpCrisscross wrote: | > _There is no road to keep your eyes on in space_ | | The "road" are the instruments. Having the instruments be | directly intractable with makes sense on a rocket. | | I agree with you in respect of cars. | cryptonector wrote: | Everything is automated though. There's almost nothing for | astronauts to do except pull an abort handle. Instruments | and telemetry are shared with ground control, and anyways, | they don't need the astronauts to touch anything unless | there is so much instrumentation to present that the | astronauts have to page through it. | gibolt wrote: | What consensus? Bad interfaces on low-end touch screens are | terrible, but plenty of Tesla owners would take the screen | over the plethora of physical knobs. | | Volume and vehicle control/steering are the main inputs where | physical makes sense. | codenesium wrote: | After riding as a passenger in a Tesla I was shocked at how | often the driver looked down at the screen and not at the | road. | baja_blast wrote: | Can you watch movies on that screen while driving? | olex wrote: | No, Theater mode (full-screen Youtube, other apps and | games) and video playback in the browser are only | available when the car is parked. | m0xte wrote: | Same experience here. Model 3 is absolutely terrible for | this. My father actually kerbed his and screwed up the | alloys looking at the screen. | rootusrootus wrote: | As a Tesla owner I completely agree. I really like what | Ford did on the new Mach-E. They unabashedly 'stole' the | touchscreen idea, then iterated. Now I want the smaller, | wider LCD in front of the driver, and the big knob at the | bottom of the center touchscreen. Maybe Tesla can copy | that idea and iterate it some more... add some | programmable buttons along the bottom or something ;-) | gibolt wrote: | You have physical volume knobs on the steering wheel. | That is less distracting than any reach to the console. | rootusrootus wrote: | For some things, absolutely, but for the times when you | need to interact with things on the screen that are more | complicated than simple volume, a knob is still a pretty | great option to have. | cryptonector wrote: | Here's a sample: | | https://news.ycombinator.com/item?id=23408738 | | which links | | https://www.motoringresearch.com/car-news/mazda-getting- | rid-.... | | https://www.thetruthaboutcars.com/2019/08/a-lesson-for- | autom.... | | https://www.automobilemag.com/news/touchscreen-needs-go/ | | https://arstechnica.com/cars/2019/11/should-gestures-and- | spe.... | | https://jalopnik.com/touchscreens-in-cars-have-been-a- | failur.... | | That consensus. | goshx wrote: | Do you have a source about the said "consensus"? It sounds | more like resistance to change than an actual rationale. | | You have always had the need to look at the buttons, like | reaching out to the radio. | | From my experience, the majority of people who drive a car | with touch interfaces don't want to look back to old | fashioned buttons. | DoingIsLearning wrote: | A study from the UK's Transport Research Laboratory showed | that all drivers in the study had a critical reaction time | degradation when interacting with Android Auto and Apple | Car play. | | > "The increase in reaction time when interacting with | either system using touch was higher than previously | measured forms of impairment, including texting and hand- | held calls". | | It's a small sample size N=20 but their conclusion was that | interacting with these touch infotainment systems created a | reaction time degradation that was 4x worse than the | reaction time of a drunk driver (80mg of alcohol per | 100ml). | | They followed up this study with a call for urgent shifting | in the auto industry to voice controlled infotainment | systems. | | [0] "Interacting with Android Auto and Apple CarPlay when | driving", R Ramnath, N Kinnear, S Chowdhury, T Hyatt, March | 2020. | | https://trl.co.uk/reports/interacting-android-auto-and- | apple... | karatestomp wrote: | > You have always had the need to look at the buttons, like | reaching out to the radio. | | Aside from others' comments that one needn't look at | buttons & knobs one has memorized, also: | | 1) one does not need to look _as long_ at buttons and knobs | as a screen to locate the desired control, because they do | not change position. One also never needs to navigate a | menu to perform a basic task. The closest most come is | having a button that cycles AM /FM and channel presets. | | 2) it's possible to combine the fixed-location advantage of | buttons and knobs with visual and tactile differentiation | that reduces or eliminates the need to look at the controls | even further. Some cars do this, but a really great example | is the Nintendo Gamecube controller, which was clearly | designed by someone who'd watched a young child try to | remember what all the buttons on earlier consoles (SNES, | N64, Playstation, perhaps) were used for. Size | differentiation, most-used buttons in the most-accessible | positions, larger, and highlighted by color, less-used ones | smaller with diminishing vividness of color the less- | important they were. A clear hierarchy of importance | differentiated by color, size, shape, and feel. Auto makers | don't ever _fully_ embrace this because it results in a UI | that doesn 't look they way they want it to, but for | maximum safety, they should. | | A very, very consistent touchscreen UI could use some of | this to great effect to reduce the harm that they cause, | but they'd have to _almost never_ screw with placement, | appearance, or behavior of UI elements, all of which would | need to be perfectly consistent and just about never | change, which in practice probably means never receiving | updates because there aren 't a lot of teams that can | resist fiddling with looks & behavior (this is a problem | that plagues _all_ web and frequently-updated software, and | if you don 't think it's a big one or causing some serious | irritation and reduced-utility in computing in the wild | then try watching someone who's not extremely "computer | savvy" use their computer or phone for a while). They'd | also need to radically simplify their UIs and work very | hard on reducing latency and improving interaction accuracy | (touch, then nothing happens for a second or two, is | _extremely_ confusing to non-computer-nerds, and it 's 100x | worse if it's not _consistently_ precisely that | unresponsive--sometimes instant, sometimes 1s delay, | sometimes 5s delay, is the _absolute worst_ way a UI can | behave) | afterburner wrote: | With physical controls, you can verify using touch (ie | without sight) that you are touching the correct control, | and _then_ activate it. | | With touch controls, as soon as you've touched it, you've | activated it. | | And touch screens have very few ways to verify your | position by touch, since it's a large flat screen. Controls | with a plethora of knobs and sliders have all kinds of | terrain that you can use by touch to verify your position. | cryptonector wrote: | > Do you have a source about the said "consensus"? | | https://www.motoringresearch.com/car-news/mazda-getting- | rid-... https://www.thetruthaboutcars.com/2019/08/a-lesson- | for-autom... | https://www.automobilemag.com/news/touchscreen-needs-go/ | https://arstechnica.com/cars/2019/11/should-gestures-and- | spe... https://jalopnik.com/touchscreens-in-cars-have-been- | a-failur... | | I've seen so many of these go by that I had to do the very | same search that you could have made instead of asking for | sources. | | Asking for sources when a trivial search at your fingertips | will yield them can come across as rude and lazy. Please | make a better effort in the future. | mlyle wrote: | > From my experience, the majority of people who drive a | car with touch interfaces don't want to look back to old | fashioned buttons. | | Many automakers that had touch-heavy interfaces are moving | back towards physical controls, both because of market | demand and evolving industry safety considerations. | | e.g. https://www.motorauthority.com/news/1121372_why-mazda- | is-pur... https://jalopnik.com/honda-follows-mazda-by- | ditching-some-to... | https://www.usatoday.com/story/money/cars/2013/06/17/ford- | my... | | I have no problem with touch controls in general, but | replacing a volume knob I can find blindly with a | relatively small pair of "Vol+" and "Vol-" touch targets is | mildly infuriating. It's OK as the driver because there is | an actual tactile control on the steering wheel, but | downright unpleasant as a passenger. | cityofdelusion wrote: | It is fascinating just how poorly modern touch interfaces | do compared to older vehicles. As an example, with older | cars with vacuum controlled HVAC, the sliders and such | were very, very "notchy" and you could change all the | settings without taking an eye off the road. In the | 80s/90s the buttons change to electrical instead of | mechanical and you start needing to glance, due to the | lack of haptic feedback. Fast forward to the modern era, | and you generally have no way to control anything (other | than the volume) without a full look at the touch screen, | plus a longer look to make sure your finger hits the | touch target. | | I will admit that the touch screen in my new VW is | fashionable and I love all the data screens -- but I have | had near-misses due to having to stare at the screen to | do stuff like hit touch targets for changing my spotify | playlist. It has nothing to do with responsiveness either | -- the screen has no perceptible lag, its all to do with | lack of haptics / feel. | | edit: I drive both an early 90s truck and a late 2010s | car. I don't miss the touch screen when I drive the | truck, I only miss Spotify / Google Maps. | WalterBright wrote: | I can't figure out how to turn the HVAC system on in a | newish car. | | My old one has a slider labeled "Heat" and "Defrost". | Never had problems with that. | moduspol wrote: | Those automakers did not have competitive touch | interfaces. | | And there's still room on the steering wheel for knobs | for the most common controls, and voice control is often | available. | nitrogen wrote: | I strongly dislike voice control. Speech is a high- | latency, low-bandwidth, error-prone medium. A button is a | button. One bit, clear unambiguous. | | Tactile controls can become so thoroughly integrated in | muscle memory that well-designed tools and machines | (including cars) feel like an extension of thought. Think | "volume up", it just happens automatically from thought | to fingers to buttons. | | Compare that to a multi-word speech command that requires | perfect diction and phrasing over a span of five seconds. | That's five seconds of distraction, longer if the command | has to be repeated, vs milliseconds for the button. | moduspol wrote: | I agree, and the voice control implementations I've seen | leave a lot to be desired. But they do work without | taking your eyes off the road, or hands off the steering | wheel. | | I think the most common commands can all be mapped to | buttons on the steering wheel, which similarly is as | close to possible as "negligible reduced driving capacity | to use" without the tediousness of voice control. | | But I do think the theoretical safety benefits of | physical buttons that are not on the steering wheel as | compared to touchscreens for features beyond the ones | commonly used while driving are probably overstated. | WalterBright wrote: | Part of pilot training in the old days in the Air Force | was the pilot was blindfolded, and the instructor would | call out a control's name, and the pilot had to put his | hands on the control. | | Or he wouldn't be rated to fly the airplane. | | In an airliner, the critical controls are all uniquely | shaped, so the pilot knows by the feel which is which. | goshx wrote: | One of the issues with those automakers is that their | interfaces are in general unresponsive and slow. The one | in my BMW sucked. The Jaguar I-PACE is very slow as well. | | Tesla got this right with both the touch screen and the | physical buttons on the steering wheel for things like | volume control. | BeetleB wrote: | > One of the issues with those automakers is that their | interfaces are in general unresponsive and slow. The one | in my BMW sucked. The Jaguar I-PACE is very slow as well. | | > Tesla got this right with both the touch screen and the | physical buttons on the steering wheel for things like | volume control. | | Perhaps there's an auto manufacturer or two that got it | right. However, I've never driven a car with physical | buttons that got it wrong. When I used to shop for cars | in those days, I _never_ had to consider if those buttons | were compatible with me. Now when I buy for a newer car, | it 's an added headache to consider, and one that I've | not seen add any real value. Going on a test drive really | will not tell me enough about whether the interface is | good. And worst of all, _whether it is or isn 't affects | my safety_. | filoleg wrote: | >Perhaps there's an auto manufacturer or two that got it | right. However, I've never driven a car with physical | buttons that got it wrong. | | You gotta give it some time, because modern physical | control interfaces in cars had over half a decade to | evolve to reach this point. With regard to touchscreen | interfaces in cars, it simply feels like those are still | stuck somewhere in the pre-iPhone era of touchscreen | interfaces for phones in terms of usability compared to | physical controls. | throwaway4220 wrote: | My 2006 honda civic navigation had a good mix of touch | and physical buttons, that is almost no-look. What I find | funny though is that since it's a resistive touch and has | a beep for every button (after a lag of course), i get | "haptic feedback" | mlyle wrote: | Your comment has nothing to do with what I stated. As I | mentioned already, I do have a tactile steering wheel | control for volume. But even the experience for a | passenger adjusting volume sucks compared to a knob. | | And my touch screen, in general, is snappy enough. | drusepth wrote: | The passenger doesn't need to keep their eyes on the | road, though. It seems to me like the benefits of being | able to cram a million more things (as needed) into a | screen outweighs the downsides of having to glance at a | screen if you're not familiar with it. | | I prefer touch controls both as a driver and a passenger. | I even use a Halo keyboard (effectively just another | screen, with no "real" buttons) on my laptop. It takes | some getting used to, but eventually becomes second | nature -- and then you open up huge new areas of | functionality that aren't possible with physical buttons | and knobs. | WalterBright wrote: | I don't want a million controls on my car. | Koshkin wrote: | You have to give it to modern car tech though. This is | how one would start Ford Model T: _While out of the | driver's seat, the driver would need to pull the choke, | located near the right front fender. At the same time, | the driver had to turn the crank lever one-quarter turn | clockwise to prime the carburetor. The crank lever was | located beneath the radiator at the front of the auto. | Next, the driver had to jump into the car, insert the key | into the ignition, and turn it. Immediately, the driver | had to move the timing stalk up and move the throttle | stalk down to set the idle correctly. Pulling the hand | brake back would place the car into neutral. The next | step necessitated getting back out of the car to turn the | hand crank a half-turn. This turn of the crank would | actually start the engine._ | | http://www.thebenzbin.com/early-car-starters | | (I do miss the ability to jump-start a car using a crank | lever.) | goshx wrote: | I disagree that it "has nothing to do with what [you] | stated", as the user experience also influences demand, | and I still think Tesla got it right with the touch | screen available for passengers to change the volume and | the tactile steering wheel control. Do you drive a Tesla? | rootusrootus wrote: | I drive a Tesla. | | I lost the ability to have my text messages read to me, | or to respond by dictating them. For a short time there | was a half-implementation from Tesla that was in no way | comparable to CarPlay, but it stopped working for me a | couple months ago and I haven't been able to convince it | to start working again. | | I also used to be able to select music to play, and it | didn't require jumping through a bunch of hoops to find | it. Now my choices is the streaming that Tesla includes, | or Spotify, and the Spotify interface is _awful_. I | bought a subscription and tried it out, thinking I could | switch from Apple Music, but after failing repeatedly to | get the Spotify in the car to see playlists I created on | my phone, and growing weary of Spotify on my phone or | computer defaulting to playing out in the car even when I | had been inside for hours, I gave up on that. | | I also used to use Waze, or Google Maps, or Apple Maps, | depending on what I felt worked best. Thankfully the maps | built in to the Tesla aren't awful, but the interface is | not without its quirks. | | Tesla could solve this by supporting CarPlay and Android | Auto, but they won't, because they need us to have a | reason to pay for the premium data subscription. | goshx wrote: | I'm not sure what all of this has to do with the touch | screen conversation, but I feel you. It will all be | solved with software updates eventually if enough people | send formal complaints. | filoleg wrote: | > I lost the ability to have my text messages read to me, | or to respond by dictating them | | Out of curiosity, which Tesla? Because iirc there was a | firmware update pushed out closer to the end of last | year, which added that functionality (both having texts | read and being able to respond by dictating), and I | thought it went out for all Tesla cars. | | The only reason I asked about the specific model you | drive is because I know that some older Model S and X | cars receive slightly different versions of firmware | updates than newer ones like Model 3, but afaik the | differences are usually related to autopilot/FSD | features, not to UX features like this. | mlyle wrote: | > and I still think Tesla got it right with the touch | screen available for passengers to change the volume and | the tactile steering wheel control. | | That's not a super relevant point in response to me | mentioning that my car has a touch screen available for | passengers to change the volume and a tactile steering | wheel control, and that I don't like it. | goshx wrote: | There is no way for it to be more relevant than it is. | | I am telling you that what you don't like in your car, I | think that Tesla got it right. How is that not relevant? | What kind of response are you expecting? | fiddlerwoaroof wrote: | Yeah, I was a touchscreen skeptic until I got my model 3: | all the controls I care about while driving have physical | controls on the steering wheel and, if I absolutely need | to fiddle with the touchscreen, I can enable autopilot, | which is safe enough compared to distracted driving. | anewdirection wrote: | I would argue activating autopilot while distracted is | not only counter to teslas instruction, but criminally | negligent. Please either drive, or take an uber, for the | rest of us. | fiddlerwoaroof wrote: | So, when the road is well-marked and I'm adjusting the | AC, you'd rather have nothing keeping my car in the lane? | My hands are on the steering wheel, and I'm paying | attention to the road, I just know that I'm going to be | spending some amount of time looking at a screen to | change a setting. | | This isn't "I'm tweeting and using social media and | thwarting the attention sensors" it's "I know my | attention is going to be divided between maintaining my | lane and adjusting the temperature/picking a new station | so I'm going to take steps to avoid drifting out of my | lane into other cars" | dejj wrote: | Would be awesome to use voice commands mapping physical | controls. Say, "Ok, Tesla, put AC control on slider 1". | This also keeps the kids in back from messing with the AC | (dads appreciate). | fiddlerwoaroof wrote: | "Autopilot" here is basically adaptive cruise control + | lane assist, which are both technologies available from | nearly every manufacturer at this point. I'm not talking | about the beta Full Self Driving features. | CydeWeys wrote: | > You have always had the need to look at the buttons, like | reaching out to the radio. | | Definitely not true. My last car had all physical buttons, | and I could easily, by feel, use all of them with one hand | while keeping my eyes on the road and the other hand on the | wheel. When you've been driving a vehicle for years you get | very used to its controls. Plus, on a lot of these cars | some of the most common radio controls (like volume and | change frequency) are right on the wheel beneath your | thumbs. | Geezus_42 wrote: | I drove a Prius where EVERYTHING was controlled a non- | tactile touch panel. It was one of the most infuriating | experiences with a car in my life and far more distracting. | | In comparison my car has physical buttons and dials. If I | want to adjust the temperature while driving I don't need | to look away from the road, I just grab the dial and turn | it a few clicks, same with sterio volume. I know | approximately where the dials are so I can reach in the | general area and know what I'm doing with out looking | because there is something physical to grab. | irrational wrote: | Both of my cars are old enough that they don't have a | screen. I don't need to look at the buttons to use the | radio, turn on defrost, adjust the A/C, etc. It is all | muscle memory. I can do it all blindfolded. But on those | occasions when I rent a car that has a touchscreen it | drives me crazy. There is literally no way to use it | without taking my eyes off the road and looking at the | screen. It seems like a huge safety issue. It has convinced | me to never buy a car with a touch screen. If there are no | newer cars without a touch screen, I will just buy older | used cars. | BeetleB wrote: | > You have always had the need to look at the buttons, like | reaching out to the radio. | | I never look at those buttons, and I switch stations _all | the time_. In fact, the radio is my standard example of | where touch screens fail and are hazardous. | | Just like with a phone that has physical buttons - I would | dial numbers without looking at the phone. | | In the car I have that doesn't have a touch screen, I don't | think I ever look for any button - be it climate control, | emergency lights, etc. | stronglikedan wrote: | > You have always had the need to look at the buttons, like | reaching out to the radio. | | When the controls are in fixed positions, you only need to | look at them a few times, before you memorize their | positions. It also helps if they're shaped differently, | like knobs and dials in addition to buttons. | | Using the example of a radio, I used to be able to do just | about everything without looking, with the exception of | direct tuning (but that's what presets are for), in my | older cars with traditional head units. Now that I have a | touchscreen head unit, there's almost nothing I can do | without looking. Basically, I can control the volume from | my steering wheel, and that's about it. | goshx wrote: | Yes. The buttons on the touch interface don't change | positions either, but I understand your point. | | Anecdotally, I've been driving a Model 3 for two years | now and I have zero problems with the touch interface. | bob1029 wrote: | The buttons on a touch interface absolutely can change | positions. What button is currently in scope? Everything | is contextual in my experience. With physical interfaces, | I don't have to worry that my radio's volume knob is | going to wind up on the ceiling after I had just turned | on the AC. | | Even if you design the logical interface such that all | 2-d screen mappings are consistent regardless of context, | there is still the problem of tactile feedback. Physical | affordances can provide varying shapes, materials and | actuation methods which can immediately distinguish them | from each other without the need for visual confirmation. | jen20 wrote: | The touch-screen buttons in many cars often do change | meaning, even if they don't change position within a | given context. | | I first experienced this on a Prius back in the | mid-2000s, where the touch-screen was in one of several | modes (climate, radio, navigation etc) and even if one | can remember where the controls are, it's necessary to | look before touching. That car had more physical buttons | than is generally the case now and was still difficult to | operate. | TeMPOraL wrote: | > _When the controls are in fixed positions, you only | need to look at them a few times, before you memorize | their positions._ | | The controls on your phone are in fixed positions most of | the time; do you use your smartphone without looking, the | way you probably used your feature phone? | | No, because with touchscreens come heavy-weight operating | systems like Android, which have unpredictable input | delays. Without looking, you can't tell if your touch | input was correctly registered (vs. ignored because the | OS decided to hang for a second), and if there's any mode | switching involved, you can't tell when the UI has | updated to allow you to press again. | | I'm not against touchscreens as a matter of principle | (though I come to appreciate the ergonomics of physical | controls). But their overall responsiveness is, in | general, much worse than those of physical controls. | stronglikedan wrote: | I can't edit anymore, but I meant physical controls in | fixed positions, so you can feel which control you're | interacting with in relation to other controls. Even | better with a little bump or divot, like the "5" key on a | 10-key. | | With a touchscreen, there's really no way to know where | your starting point is when you reach for it blindly, so | you have to look. I suppose you could use the edges, but | that wouldn't be so easy on a large touchscreen. | | With an old car radio, you can reach for it, know what | you touch first, and know where everything else is in | relation to it, all without looking, ever. | mikestew wrote: | _You have always had the need to look at the buttons, like | reaching out to the radio._ | | That is definitely not true. Volume on the left, tuner on | the right, and of the five preset buttons, WFBQ is the one | in the middle. You could feel for all of that without your | eyes leaving the road. What might have happened is that you | came of age after utilitarian radios. For example, I had to | give some serious looking in order to find a DIN2 radio | that had CarPlay _and_ a physical on /off/volume control. | Or just a physical on/off button, not some software button | buried five menu levels deep. Such jackassery used to be | the exception, not the new rule. | | Climate control? Heat control on left, blower the middle, | and position (where it blows) on the right. Or some | combination thereof. Our utilitarian Mercedes Sprinter RV | has it right. Other, less utilitarian vehicles: meh, not so | much. | | I could go on. But I've never been required to let my eyes | leave the road for functionality until the last ten years | or so. $DEITY help you if you need to switch Bluetooth | devices while driving our Leaf: seven screen touches to | pull that off, with plenty of opportunity along the way to | make a wrong choice. No wonder it won't allow you to do it | while moving. | NikolaNovak wrote: | "I had to give some serious looking in order to find a | DIN2 radio that had CarPlay and a physical on/off/volume | control" | | Share.. Please! I still haven't found any. | | I have 2004 wrx with 2din slot but haven't found anything | with ergonomics of the manufacturer old setup. I have so | much room, yet all I can find is huge screens with tiny | or no buttons... :( | mikestew wrote: | Jensen VX4024: https://www.crutchfield.com/S-ygHtVbHJ59g/ | p_110VX4024/Jensen... | | See that big honkin' knob on the left? Volume and on/off. | It's glorious, especially when driving a 5400Kg vehicle. | Bought it last year, or year before, so there might be an | updated model. | | EDIT: check out Crutchfield's other radios, too. There's | a brand they sell call "Boss" (never heard of them, | either), and every model of theirs has a big knob for | 1/0/Volume. | [deleted] | hacker_9 wrote: | This is bonkers. The UI did look good, I'm suprised it wasn't | something native like QT. But I guess when I think about it, | does it really matter? Chromium has some of the best engineers | behind it, and web developer supply has never been higher. | Yfvj875rfg wrote: | Qt requires a commercial license in this use case. Why bother | if Chromium is free and it works? | mrweasel wrote: | They already pay for VxWorks, I'm sure they can afford the | QT license, if they even need it for a system that only | made for SpaceX. | speedgoose wrote: | I'm quite sure SpaceX can afford the commercial license of | Qt. | | It's simply that right now, web is the best. Far from | perfect, but the best. | detaro wrote: | So SpaceX is worried that their customers they sell | spaceships to need to be able to get the source code of the | Qt they use if they use it under LGPL? | jcelerier wrote: | Tesla uses Qt under LGPL in their own cars: | https://soylentnews.org/article.pl?sid=18/05/20/1737213 | ksec wrote: | In the article comment section someone from QT mentioned they | were using QT for something. So it isn't clear which part of | which is QT and which is HTML. | Matthias247 wrote: | > I'm suprised it wasn't something native like QT. | | The question is what you really would gain from using QT | compared to Chrome/HTML/JS. | | Performance won't really matter for this. It it's good enough | on the hardware they have, then further improving it does not | make a difference. Provided they are running everything | really mission-critical and real-time outside of the UI and | on an RTOS or specialized hardware anyway (I really really | hope so). | | One advantage might be audibility and the hope for less | defects due to a smaller codebase and less dependencies. But | I think even QT is already far beyond that point. And since | Chrome is nowadays wider deployed, it might have a higher | level of maturity than eg. the QT/QML tech. | ColanR wrote: | If we're going to use SpaceX to validate our language choices, | then we should be moving back to C for the "mission critical" | code. | | > The certification and correctness part is made easier by | using software verification tools. One such tool is Astree. It | is a static code analyzer that checks for runtime errors and | concurrency related bugs in C projects. This also leads us to | the answer for why a lot of mission-critical code is written in | C. Its because there are a lot of static analyzers and software | verification tools for C. | trasz wrote: | There are also software verification tools that use binaries | instead. That's how seL4 gets verified. This way you're safe | from compiler bugs. | 59nadir wrote: | C is already the undisputed king of running everything and on | everything, no one who writes C needs to seek validation like | this. | mbrock wrote: | Are they wrong? | nickff wrote: | The Kernels for all major operating systems are written in C; | C is also used for the majority of embedded devices which | perform the small miracles around you. C is everywhere. | [deleted] | jmiserez wrote: | > _I think that 's all the validation we need for HTML/CSS/JS | as the best tool for UI development nowadays._ | | is a direct contradiction to the sentence before: | | > _because for every mission-critical input on the display, | there was a physical button underneath the display as well_ | | Clearly, physical buttons are best. | ShinTakuya wrote: | Depends on the environment. If RAM or CPU time is at a premium | then no. But that's so rarely an issue these days, especially | if you separate UI from the main processing thread. | junon wrote: | > I think that's all the validation we need for HTML/CSS/JS as | the best tool for UI development nowadays. | | "Best" makes it sound like the entire landscape isn't an ocean | of garbage. | arcticbull wrote: | Those tools are basically the great pacific garbage patch in | an ocean otherwise also full of garbage haha. HTML parsers | are practically self-aware, and JavaScript, oh, JavaScript. | gameswithgo wrote: | SpaceX using something is a proof that HTML/CSS/JS is the best | tool for UI development? | | If we suppose that is true, then it is a failure of our | industry that this is the best tool we have. | [deleted] | jimbob45 wrote: | I'm guessing they were vastly stripped-down versions of JS and | Chromium. | arexxbifs wrote: | Something that great probably wouldn't need validation by | cherry-picked appeal to authority. (Yes, I'm a web developer.) | treespace88 wrote: | Yes, it feels like the desktop gui framework/language wars that | have been raging since the 90s are finally ending. | | As a desktop developer working with everything from visual | basic, C++ win forms, QT, swing, C#, html and javascript. I | could not be happier. | | Finally we have a GUI stack where I don't have to re write | everything every 10 years. | VMisTheWay wrote: | What has it settled to? Html, css and JavaScript? | | Btw if you consider that, there are wars over which | JavaScript framework. | treespace88 wrote: | They all still compile to the same stack, so no problem. I | don't have to throw away my working | jquery/angularjs/scriptaculos/dojo/react/ code just because | angular.io is pretty cool. | | In time vanilla js will eat them anyways. | Slartie wrote: | > Btw if you consider that, there are wars over which | JavaScript framework. | | None. Simple as that. At least for something like the Crew | Dragon control panels, any kind of JS framework would add | unnecessary bloat for very little use, because they were | all designed with a very different goal, definitely not to | write the UI portion of a C++ application that controls a | spaceship. | | Just stick to vanilla JS, simple HTML and well-written CSS | and circumvent the framework wars altogether. | AnIdiotOnTheNet wrote: | Finally we have the worlds least-integrated, poorly | accessible, completely inconsistent, most difficult to theme, | resource intensive GUI stack. Software devs rejoice at the | job security of JS framework churn while stealing user data | and shoving ads in their face to pay their own salaries. | jfkebwjsbx wrote: | In the web world you are pretty much relearning new APIs, | frameworks, approaches and what not every second year. | Aperocky wrote: | I'm surprised you're allowed mission-critical or even non- | critical inputs on that touchscreen. | | It might be OK if the entire screen was READ-ONLY. Anything | else sounds like a disaster waiting to happen.. I also don't | understand why companies race to have their laptop display | touch, but then again I'm just a random software engineer. | rubber_duck wrote: | > I also don't understand why companies race to have their | laptop display touch | | Try using your laptop in bed, on couch, browsing something | with a partner, etc. The flexibility of Yoga style 2-in-1 | devices is amazing in this regard. | | For productivity I don't find it extremely useful (maybe if I | was a designer and combined it with a pen), but for casual | use - a lot of UI these days is touch friendly and feels | natural with touch screen. | trasz wrote: | Military planes - Super Hornet, for example - have been using | touch screens (UFC, in this case, the thing just below HUD) | for over two decades now, and they seem fine with it, and | newer ones use it even more. They don't seem to cause any | problems. | | Granted, stuff that's absolutely critical - like gear or the | arm switch - is still mechanical, but UFC is still pretty | mission critical, controlling eg IFF, autopilot, or radios. | ecmascript wrote: | Why is it a disaster waiting to happen, according to you? | thoraway1010 wrote: | I'm also curious about this disaster waiting to happen. | They've emphasized an escape capability all the way into | orbit. They emphasized various types of automation (also | used by other spacecraft). | csomar wrote: | Touch screen are too sensitive to be safe. Also there is a | very high chance to mis-click (see HN upvote/dowwn-vote | buttons). Much safer to use regular old mechanical buttons | with tick-tacks. | [deleted] | cesarb wrote: | I noticed during the stream one of the astronauts | selecting some input on his screen, pausing for a moment, | and then pressing the _physical_ button below the screen | to confirm the input. So that 's probably their defense | against misclicks: any action other than just changing | the display mode or opening a checklist has to be | confirmed through the physical "Execute" button (there | seems to be two of them, one for each astronaut). | sdwedq wrote: | Touch screen is still very inaccurate and you don't develop | muscle memory. | | You are more likely to touch wrong button on touchscreen | than on physical ui. | ecmascript wrote: | I can buy the muscle memory part, sure but are they | really very inaccurate? | | I can select very small text on my phone with my bigger | fingers. And also with a touch screen you may have more | options in a smaller space. | | Sure, that may suck for critical things, but there | probably are a lot of settings and so forth that could be | hidden that are not critical? | | But I understand what you meant, I prefer physical | buttons as well. | sdwedq wrote: | Personally, it seems I touch wrong buttons quite a bit on | my phone. I also click wrong buttons when using mouse but | that is rarer than pressing wrong button on my phone. | | The most annoying part is using touch screen in my car | for GPS. It might be bad UI but also viewing angle might | be making it hard to press right button. But then again I | would not expect a physical keyboard in a car. | | In physical land, it is very rare that I press a wrong | button. Maybe when playing intense video games, I press | jump too soon or use wrong gun. Oh and of course while | typing. | rsynnott wrote: | Even then, you surely want the data you're reading to be | correct, and not, say, from half an hour ago because Chrome | was having a bad day. | oldgradstudent wrote: | > It might be OK if the entire screen was READ-ONLY. | | Why? displaying incorrect data that might lead astronauts to | taking the wrong actions could be just as deadly. | Aperocky wrote: | Why is READ-ONLY incorrect? I mean as in the input on the | screen have no write ability and it is only used to control | the interface that display the information. | oldgradstudent wrote: | I might have misunderstood your point. I thought you | referred to the fact that the touch screen was based on a | non-realtime system rather than it being a touch screen. | extrapickles wrote: | Physical switches since they are moving parts, have a high | failure rate. Apollo 11 they broke an important switch | donning their spacesuits. In Apollo 14 the Landers abort | switch was falsely triggering so they had to hack the | computer to ignore it. | | Most of the cars I've owned have been recalled/needed to have | some switch replaced in the first year or two of ownership. | Jury is still out on touchscreen, but they seem to have lower | mortality (it could be a simple numbers game, several dozen | switches vs 1 touchscreen). | f00_ wrote: | touch screens are a bad choice to me | | I want the buttons and knobs. | | Love the old soviet control rooms posted awhile ago: | https://designyoutrust.com/2018/01/vintage-beauty-soviet-con... | | Need John Carmack's opinion of SpaceX | josefresco wrote: | Oh so beautiful: https://main-designyoutrust.netdna-ssl.com/wp- | content/upload... | f00_ wrote: | i love the windows xp screen saver ):< | sammycdubs wrote: | This seems like a remarkably small team for the scale of what | they're building! For some reason I imagined they'd have legions | of engineers. | bkanber wrote: | NASA's software teams are also remarkably small, and manage to | produce code with one of the lowest defect rates of all time. | (Space shuttle code had 0 defects in 500k SLOC!) | | Just goes to show: quality over quantity! | 0xffff2 wrote: | Shuttle's code quality was outstanding, but 0 defects is a | myth. There are at least 3 publicly documented bugs in the | Shuttle code. | | https://space.stackexchange.com/a/37116 | bdcravens wrote: | I think we've been conditioned to believe that any application | of medium complexity requires hundreds or thousands of | developers. Snarkiness aside, they have a very concrete set of | functional constraints and total control over the hardware, | network, and software environment. Issues like resource | management, dependency conflicts, security, scale, etc are | taken out of the equation, things that are often the biggest | time and resource sinks. | junon wrote: | IME, more bodies usually always equates to more bugs and | slower release cycles. | adambyrtek wrote: | According to the post these quotes are from 7 years ago... I'm | sure a lot has changed since then. | danans wrote: | Years ago, astronaut Chris Hadfield told an audience of software | engineers (including me) that the moment the space shuttle was in | stable orbit, the crew would pull out laptops and set up an | ethernet network for all the scientific work of their expedition, | as the space shuttle's own computers, though limited in raw | computing power, ran software that was so thoroughly tested that | there was every reason not to "upgrade" them in any way to | support the scientific work. | walrus01 wrote: | Even today with modern avionics there would be no reason why an | aircraft's computer systems would need to interface with a | general-purpose LAN. Take a look at the control system of a | Cirrus Visionjet for instance. It's quite locked down as its | own embedded system. For reliability and resiliency reasons | it's good to keep some things compartmentalized. | growlist wrote: | But surely it's the opposite to what you describe that would be | remarkable? | thechao wrote: | As a child, a friend's mother was a programmer for the Shuttle | (mid-80s to early 90s). Her job sounded _awful_ : a 'science | person' (I was a child, remember!) designed a piece of math; an | engineer (software?) would take that piece of math and reduce | it to an algorithm; my friend's mother would program that | algorithm in machine code, in parallel to an assembly listing. | Each instruction (and all the data) would be reviewed line-by- | line. She had to provide reasoning (roughly a proof) that each | instruction correctly implemented the algorithm. My guess is | the algorithm went through the same equivalence checking to the | 'math'. I don't know how much code she wrote, but it was only a | few programs (functions) _per year_. | | That was my view of 'programming', and I wasn't disabused of | that until very late 90s. | rustybolt wrote: | Sounds lovely. Now I write code with vague requirements that | interfaces with ill-specified functions, on tight deadlines. | It surprises me that it doesn't contain a lot more bugs. | Maybe we just haven't found them yet. | ngcc_hk wrote: | And whatever you wrote And right to the spec, user said it | is not what they want. And demo why it is not working or | useful ... Of course that is nothing to do with them, that | is not what they said or your it guys analysis wrongly. As | spec goes ... do not understand it. | | To be fair it takes a lot of interaction (and understanding | ) to fix it. And you wonder how these operate here. | WalterBright wrote: | It makes perfect sense to use computers for research on the | shuttle that were not connected in _any_ way to the shuttle | systems. | itsspring wrote: | Yup, I'd prefer NOT to touch the systems of the vehicle | that's serving as my lifeboat, life support, and ONLY re- | entry option. | danans wrote: | Yes, he made that point to contrast with the common sci-fi | trope of using the ship's computers for all purposes. | mips_avatar wrote: | I'd love to work with physical software (software that interacts | with the real world through sensors and actuators), as a C | developer, how should I move into this space? Every time I try | intro to ARM kits I feel like I'm in over my head. | Symmetry wrote: | I've gotten recruiter email from SpaceX but I've worked in | embedded sensor systems, big radars for the government, and | robotics so those might be stepping stones. Be warned you might | have be a US citizen. | zachlite wrote: | I worked with AVR microcontrollers, and the avr-gcc toolchain | when I was in college. It's basically an abstraction layer | below what an Arduino provides you. | | https://en.wikipedia.org/wiki/AVR_microcontrollers | lnsru wrote: | Start reading data sheets of these ARM parts. It's | straightforward when you know what peripherals do you need. Get | familiar with FreeRTOS or other embedded operating system. It's | really not rocket science. You only need to know, what do you | want to build. Otherwise it gets boring very quickly. | davedx wrote: | I'm having a lot of fun with Arduino at the moment. You can do | a lot with them. | chasd00 wrote: | I know you said you're a C developer by the MicroPython boards | get you up and running pretty quickly. It's straightforward to | get a blinking LED ( the Hello World of embedded programming ). | | Otherwise, I would use a STM32 dev board and their IDEs and | tools. It will get you off the ground and blinking LEDs way | faster than working out the toolchain, loaders, ASM, setting | the clocks and peripherals and all that work that has to be | done before you even get to your application. | oxguy3 wrote: | I'm so relieved to hear all the redundancy and testing in place. | I had heard that the touchscreens were built in Chromium/JS and | was rather alarmed. Don't get me wrong - I do a lot of web stuff | and I love that environment, but I've never seen a web app I | would trust two human lives to. This, however, sounds like they | really thought it through and made it safe. | paxys wrote: | A contrary opinion - a tool/framework used and tested by | billions of people every day is a lot less prone to crashing | when used for its intended purpose than something custom-built. | There are tons of developers out there building complex apps by | following beginner JavaScript tutorials, but SpaceX is | obviously going to enforce better standards. | HTML/CSS/JavaScript/V8 are all extremely solid technologies | that have stood the test of time, and there is nothing better | to build a user interface with today. | stevofolife wrote: | Taken from the article: "We leverage C#/MVC4/EF/SQL; | Javascript/Knockout/Handlebars/LESS/etc and a super sexy REST | API." | | Knockout.js, good times. | hu3 wrote: | I believe Trello uses Knockout.js | | And at least before Atlassian bought it (I haven't used since | then), it was a responsive and plasant piece of software. | benjamind wrote: | The Crew Displays do not use Knockout.js. As far as I am aware | this is possibly used in some other asset management software | developed in-house for manufacturing teams but definitely not | onboard Dragon. | nightowl_games wrote: | I'm sitting over here believing Knockout.js was better than | today's JS systems. | naringas wrote: | I would have expected them to use formal verification tools in | the vein of TLA+ and such... or maybe use ADA for mission | critical systems? | | But they only mention Astree[1] which seems to be a propietary | analyzer for C code | | [1] https://en.wikipedia.org/wiki/Astr%C3%A9e_(static_analysis) | Denvercoder9 wrote: | It's just a bad article. The whole section about Astree is | based on a quote on HN about the ATV, a European resupply craft | developed 15 years ago that has absolutely nothing to do with | SpaceX. | dahfizz wrote: | TLA+ is basically an academic tool. It allows you to verify | your specification, but it is useless to detect bugs in your | implementation. In my experience, the process of writing your | specification in TLA is a buggy enough process to make it all a | waste of time. | superqd wrote: | No, not just for academia. Apparently, Amazon uses it to | check their designs for correctness. | | https://lamport.azurewebsites.net/tla/formal-methods- | amazon.... | im_down_w_otp wrote: | I would have expected them to use SCADE, but given their choice | of stacks that are entirely unverifiable, due to a combination | of their complexity and their semantics, I can only assume that | "control panel" was basically decorative, and that actual | critical functions and alerts were handled by something with | much, much higher safety assurances. | fallingmeat wrote: | Does this article imply that RTCA/DO-178B is used as a means of | demonstrating compliance in some way, or otherwise is used to | define lifecycle processes for their | development/verification/systems teams? Anyone know where this | was mentioned by SpaceX? | drummer wrote: | It would be awesome if some SpaceX engineers would give a few | presentations at events like CppCon and talk about their software | development process including some code examples and demos. | extrapickles wrote: | When you think about it from a first principals perspective, | having multiple touchscreens is better than only having physical | switches. When a switch is damaged/fails, you are out of luck. | When a touchscreen is damaged/fails, you use the one next to it. | On a rocket you do not have the mass or room to have more than 1 | of all but the most critical of switches. | | There have been quite a few missions that nearly caused death or | mission failure directly due to a switch getting broken (Apollo | 11, lander return engine-arm switch) or going faulty (Apollo 14 | abort switch). | | What really matters is that they have no single point of failure | (touch screens can do everything switches can, an individual | touch screen is not important, and switches can cover | abort/return scenarios to protect the crew). For the software, it | only matters that its been fully tested, including random bit | flips and hardware failure. | | From a cost savings perspective, its vastly cheaper to verify | that 3 touchscreens are working correctly than the 600 switches | they replace. | colllectorof wrote: | _> When a switch is damaged/fails, you are out of luck. When a | touchscreen is damaged/fails, you use the one next to it._ | | This is a trivial problem to solve on a physical interface. One | solution could be what is commonly used on hardware | synthesizers. A shift button or switch. You engage it and all | controls begin to perform their secondary functions. You get | redundancy for the price of one extra control and a secondary | set of labels in a different color. | | Also, use of displays to virtually label buttonss is common. In | such case you can reassign a control if one fails. | | In any case Dragon capsule had physical buttons for important | functions as a backup. | theanirudh wrote: | The astronauts show parts of the touchscreen and physical | controls here: https://youtu.be/llbIzbOStt4?t=150 | chasd00 wrote: | at the bottom of the article they mention model rockets and the | three levels of certification. Each level grants you access to | more powerful motors and therefore higher or larger flights. The | hobby is self-goverend by NAR and Tripoli who manage level | certification. | | It's a fun hobby, although large motors get pricey. The largest | can be 4-5 figures per launch. However, you can get very advanced | and do things you wouldn't typically expect in a hobby. | | Here's a two stage ( 4" diameter booster, 3" diameter sustainer ) | reaching over 200k feet in altitude. The Karman Line is about | 330k feet. | | https://www.youtube.com/watch?v=g0imcpdLdB8 | chrisfinazzo wrote: | Hearing about the Flight Software and Avionics teams reminds me | of this, although they don't seem to be on that level quite yet. | | https://www.fastcompany.com/28121/they-write-right-stuff | dang wrote: | A thread from a few days ago: | https://news.ycombinator.com/item?id=23368109. The current | article quotes from it, in fact. | | This article looks like a fine overview but when it comes to | follow-up posts, the test is: does the new submission contain | enough SNI (significant new information) to support a | substantially different discussion? In this case it looks like | not, but I can't really tell. | | https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu... | | https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que... | randtrain34 wrote: | Note that the data within the post is from an AMA ___7 years ago_ | __ | Fiahil wrote: | Tech moved a bit in that timeframe! | | > We leverage C#/MVC4/EF/SQL; | Javascript/Knockout/Handlebars/LESS/etc and a super sexy REST | API. | | Nowadays it would be ".Net Core/SQL; Typescript/React/GraphQL" | pjettter wrote: | Webassembly | theanirudh wrote: | I wonder how they manage not to have accidental taps on the touch | screen during liftoff and or re-entry. As I understand there are | a lot of G's and violent vibrations and I would assume it's hard | to keep a steady hand? | | (Atleast this is my understanding from watching Apollo | documentaries/movies etc.) | bkanber wrote: | Liftoff and re-entry are completely automated. The astronauts | are passengers and don't interact with the craft during these | maneuvers. This was the case even for Apollo. | | The Crew Dragon seats also have physical arm-rest controls. | Those arm-rest controls are what the astronauts use under | acceleration, and IIRC they're primarily comms controls. | NikolaeVarius wrote: | The screen compensates, and they train with vibrations in mind. | rrss wrote: | and they also don't have anything to do during launch except | maybe abort with the physical handle. | theanirudh wrote: | Impressive, especially considering some of the touch targets | are pretty small. | NikolaeVarius wrote: | They probably aren't bothering with using non critical | buttons on a launch that is automated anyway | tericho wrote: | Watching the launch, I noticed they seem to have finger rests | below the screens. I wonder if this is the reason. | karatestomp wrote: | I doubt anything on screen can affect flight during lift-off or | re-entry. Anything it might had damn well better be locked-out | anyway. Lift off's automated and I'd think any significant | failure of that automation would be a cue to abort (physical | control for that); as for re-entry, by the time you're deep | enough in atmosphere that things are vibrating you're really | just falling with style, and there's no "flying" to do nor | anything to control. | 0xDEEPFAC wrote: | No mention of Ada or their methods of writing the important | software. I wonder what they use. | | "Avionics Test team | | ...The main objective is to write very comprehensive and robust | software to be able to automate finding issues with the hardware | at high volume...." | wlesieutre wrote: | Interesting read. I've wondered about their use of big | touchscreen interfaces having heard a friend's experience with | the similar setup in a Model 3. | | On multiple occasions they've had to pull off the highway to turn | their car off and on again to get the screen working. Not really | an option on your way to space. | theanirudh wrote: | They have physical buttons Incase the touch functionality | misbehaves. | remarkEon wrote: | But there's only a handful of buttons, no? Unless I'm missing | something. Might be a dumb question but the Apollo control | panels had hundreds. How would you manually fly the Dragon in | the event of a screen failure? I'm assuming this question was | answered somewhere, since the thing was certified to fly, but | I must've missed it. | | Edit: Is the answer simply "it doesn't, it gets flown | remotely from Mission Control"? | [deleted] | garaetjjte wrote: | You probably don't fly manually, just use predefined abort | procedure or receive configuration from ground control. It | looks humans now are just another cargo and screens are | only for non-critical flight information purpose (in other | case I cannot see how they would get away with touchscreen | only and software running on Chromium). | | It's interesting to wonder whether if Apollo 13 style fault | happened, modern ships would be easier to reconfigure and | rescue or harder? | jon-wood wrote: | Give their docking simulator[1] a go on a phone or tablet - | I was dubious at first, but even on an iPhone I managed to | complete manual docking on the first attempt. It turns out | flying a spaceship is very different to flying a plane, and | rapid inputs just aren't massively important. Generally | your edit is probably true as well - in standard flight | everything is meant to be on autopilot using predefined | routines for the mission, computers are just significantly | better at performing a 16 second burn at 82% thrust at | precisely T+12:48:16. | 0xffff2 wrote: | You managed to dock in a simulation in which it's | guaranteed that nothing goes wrong. Most of the switches | and buttons are there for when something does go wrong. | | I think the main reason there are so few buttons on | Dragon is that it evolved from an uncrewed vehicle that | was designed to be flown from the ground, so everything | is much more connected and software controlled than was | even practical in the shuttle era. | JoeAltmaier wrote: | That makes sense. Flying a plane is all about responding | to perturbations to keep on an even course. A spaceship | has literally zero perturbations. It goes exactly as you | direct it to go, within the precision of your burns. So | its all about carefully issuing bang-bang control signals | (burn for 2 seconds) then measuring the response against | expectations. | e_y_ wrote: | It's close to zero over short distances (ignoring solar | wind and LEO atmosphere), although you're still trying to | dock with a moving target. | | If you've played KSP or read about Gemini 4, the relative | motion can be unintuitive due to orbital mechanics. The | SpaceX docking simulator puts you right next to the ISS | with low relative velocity -- as it would be in real life | if everything went as planned -- but it would be much | more challenging if you needed to do it manually from a | greater distance and relative velocity. | johntb86 wrote: | They have 3 screens. If one screen fails, they can probably | continue using the others. | NikolaeVarius wrote: | You don't manually fly it? The physical buttons correspond | to pre-programmed procedures/abort modes. | | They use a touchscreen so they don't need to have hundreds | of buttons for things that aren't necessary to have around | all the time. | theanirudh wrote: | Im not sure, even I would like to know the answer to this. | SiempreViernes wrote: | Well, Apollo did a lot of complicated stuff in space and on | the moon, while the spacex capsule just goes up and then | down. | | Only questionable bit is how they do the docking without | the screens. | servercobra wrote: | The docking is automated as well. | jaywalk wrote: | The docking is automated. | mnd999 wrote: | There is a manual option if there is a crew onboard. I | can't really think of any reason outside of a dire | emergency to use it though. | Aperocky wrote: | with a rusty script that succeed 99% of the time. | modeless wrote: | Your friend is dangerously misinformed. There is no need to | pull off the road to fix any problem with the screen. There are | physical controls for everything essential to driving and they | work independently of the screen. Dragon is reportedly the | same. | Diederich wrote: | > On multiple occasions they've had to pull off the highway to | turn their car off and on again to get the screen working. | | This is false. Teslas have, roughly speaking, two computers. | One drives the big touch screen, and the other manages the core | automotive functions. | | The media computer sometimes hangs/crashes; this has no impact | whatsoever on the basic function of the car. | | When that happens, it's an easy matter to reset it while the | car is in motion; one just holds one button under each thumb on | the steering wheel for a few seconds. The big screen will come | back within a couple of minutes. | vonseel wrote: | Makes you wonder if the software for media computer is simply | less rigorously tested since it's less critical, kind of sad | if that is the case. | wlesieutre wrote: | I'm aware there are two computers and the UI crashing has no | impact on the basic function of the car, but turning the car | off and on makes the media computer restart. Not sure if he | was aware about the steering wheel reset function, it was a | while ago that he told me that story. Also possible I've | misremembered it. | Diederich wrote: | I should not have said 'this is false'; the story very well | could be accurate. Please pardon the harsh tone. | | It's more correct to say that stopping and re-starting the | whole car is not the easiest way to restart the MMU. It's | quite possible there are people who aren't aware of the | 'two thumb salute' method. | rootusrootus wrote: | > On multiple occasions they've had to pull off the highway to | turn their car off and on again to get the screen working. | | Surely not? The touchscreen is run by the media computer which | does not control the car. You can reboot it with the 'two | finger salute' while you are driving down the highway. Some | things will be unavailable (you cannot, for example, engage | autopilot while it is rebooting), but the car still runs & | drives. | | I hope they just miscommunicated the situation to you, | otherwise they are really working too hard just to fix a | touchscreen. Turning the entire car off is kind of a pain in | the ass. I've never done it. And I have only rebooted the | touchscreen a couple times ever. Your friend may want to | schedule a service appointment if they really do have to power | cycle the whole car, because that is super abnormal. | VMisTheWay wrote: | > I have only rebooted the touchscreen a couple times ever | | 0 of the OEMs I worked for would consider this acceptable. | | Reminds me how Tesla ranks high with customer satisfaction | but had objectively low quality vehicles. | wlesieutre wrote: | I'm not suggesting it had any function on that automotive | functions, but I was also not aware of the media center | reboot with steering wheel buttons. From what he described to | me I don't think he was either, I'd have to check and will | pass that along if not! | | I'm a little surprised that the media computer doesn't have a | built-in heartbeat check and know to reboot itself if it | stops responding. I've heard of other cars and embedded | systems doing that. | | EDIT - asked him about reboot via steerling wheel: | | _> It's not great because you lose lots of feedback. No | speedometer, no sound from turn signals, etc. But it does | work._ | extrapickles wrote: | It probably does, but you always have issues where the task | that feeds the watchdog works fine, but another does not | (eg: GPU gets in an odd state). | | In single core systems its somewhat solvable, but in | multicore and if you want to include multiple chips in the | crash domain it gets very hard with off the shelf chips. | rootusrootus wrote: | In my experience the couple times I've had a touchscreen | glitch, the watchdog will activate and reboot it after a | bit. It's not very aggressive, though, for sure, it can | take a minute or so. | | > It's not great because you lose lots of feedback. No | speedometer, no sound from turn signals, etc. But it does | work. | | Yep, this is very true. You are driving blind, as it were, | because the touchscreen is the dash. Fortunately it doesn't | take long to reboot, but it is still much less than ideal. | mav3rick wrote: | It's called a watchdog. And it's 99% running Android and | should have that. ___________________________________________________________________ (page generated 2020-06-03 23:00 UTC)