<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Toyota Story Analysis</title>
	<atom:link href="http://www.satisfice.com/blog/archives/426/feed" rel="self" type="application/rss+xml" />
	<link>http://www.satisfice.com/blog/archives/426</link>
	<description>The Consulting Software Tester</description>
	<lastBuildDate>Fri, 03 Feb 2012 10:21:43 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Joe Strazzere</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-263492</link>
		<dc:creator>Joe Strazzere</dc:creator>
		<pubDate>Sun, 13 Feb 2011 22:18:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-263492</guid>
		<description>Time for a follow-up article, James?

Any comments or analysis about the NHTSA&#039;s 10-month study and recent report on Toyota?

&lt;em&gt;[James&#039; Reply: Yeah I should write a follow-up.]&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>Time for a follow-up article, James?</p>
<p>Any comments or analysis about the NHTSA&#8217;s 10-month study and recent report on Toyota?</p>
<p><em>[James' Reply: Yeah I should write a follow-up.]</em></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Stuiber Victor</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248593</link>
		<dc:creator>Stuiber Victor</dc:creator>
		<pubDate>Wed, 17 Mar 2010 14:24:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248593</guid>
		<description>I really liked your post. I can&#039;t believe they are really convinced there are no problems.
And if I were in their place, I would at least not declare that the driver story is inconsistent...

Because when something like this happens (http://www.straitstimes.com/BreakingNews/Money/Story/STIStory_503200.html - this is about a Norvegian who saw his Prius accelerate), they will look like fools (if not like liers :) ).

What is curious is that the Norvegian Toyota say exactly the opposite as US Toyota, they say that the driver story &quot;The (driver&#039;s) description strengthens our conviction that our client was in a situation where his vehicle accelerated in an uncontrollable manner&quot;.
Now, I wonder what will US Toyota say about this :).

I searched for more information on this, but I could not find the whole Toyota statement.</description>
		<content:encoded><![CDATA[<p>I really liked your post. I can&#8217;t believe they are really convinced there are no problems.<br />
And if I were in their place, I would at least not declare that the driver story is inconsistent&#8230;</p>
<p>Because when something like this happens (<a href="http://www.straitstimes.com/BreakingNews/Money/Story/STIStory_503200.html" rel="nofollow">http://www.straitstimes.com/BreakingNews/Money/Story/STIStory_503200.html</a> &#8211; this is about a Norvegian who saw his Prius accelerate), they will look like fools (if not like liers <img src='http://www.satisfice.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  ).</p>
<p>What is curious is that the Norvegian Toyota say exactly the opposite as US Toyota, they say that the driver story &#8220;The (driver&#8217;s) description strengthens our conviction that our client was in a situation where his vehicle accelerated in an uncontrollable manner&#8221;.<br />
Now, I wonder what will US Toyota say about this <img src='http://www.satisfice.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> .</p>
<p>I searched for more information on this, but I could not find the whole Toyota statement.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Scott Thomas</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248308</link>
		<dc:creator>Scott Thomas</dc:creator>
		<pubDate>Tue, 16 Mar 2010 17:37:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248308</guid>
		<description>Toyota is no doubt suffering in the court of public opinion. Their perceived lack of concern for their customers will have lasting affects. But Ford Motors comes in 2nd with over 50+ “Sudden Unintended Acceleration” cases. My Pontiac Car had a bad anti lock brake control unit so GM has also had serious recalls this year. I looked on http://www.carpedalrecall.com and found the recall info and local dealership listing; my co Worker had a pedal recall on his ford truck so just look out .</description>
		<content:encoded><![CDATA[<p>Toyota is no doubt suffering in the court of public opinion. Their perceived lack of concern for their customers will have lasting affects. But Ford Motors comes in 2nd with over 50+ “Sudden Unintended Acceleration” cases. My Pontiac Car had a bad anti lock brake control unit so GM has also had serious recalls this year. I looked on <a href="http://www.carpedalrecall.com" rel="nofollow">http://www.carpedalrecall.com</a> and found the recall info and local dealership listing; my co Worker had a pedal recall on his ford truck so just look out .</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John Andersen</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248298</link>
		<dc:creator>John Andersen</dc:creator>
		<pubDate>Tue, 16 Mar 2010 16:52:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248298</guid>
		<description>Not having knowledge about the car, couldn&#039;t the driver just turn off the engine?
Any got any knowledge about this?
&lt;em&gt;
[James&#039; Reply: This is from my dad...

&lt;strong&gt;I took the Prius up to the speed limit on a long straight main road (40 mph), moved the shift lever to N and held it there for two to four seconds.  

The gearbox (or Drive-O-Matic or whatever’s inside) went into neutral and stayed there till the car stopped (the brakes stopped the car without undue pressure).  It would not shift into any other mode from N while the car was rolling with the system energized...select Drive and it simply beeped a couple of times and remained in N.  Stopped at the side of the road, I shut the system off, pressed it ON again a few seconds later and all worked normally.

To shut the system off while underway at about 10 mph, I had to hold the start button down in the OFF position for three to five seconds (unlike shutting it off while stopped, when a one-second touch kills the displays), at which the automobile went dead (at this speed the brakes seemed to work normally).  It would not restart while the wheels were rolling.  After it was stopped, it restarted normally with the ON button.

I have no idea if this is what the Prius is designed to do...this is what our 2008 Prius did while moving straight ahead under relatively low-speed, cool-weather, dry-road, low-humidity conditions with a cellphone present and ON but not activated in the vehicle; with the radio off, the lights off, turn signals off, emergency flashers off, wipers off, heating system on LOW, windshield heater ON, doors and windows closed, no passengers in the car, one third of a tank of fuel on board, and the “Maint Req’d” light illuminated probably because it was programmed to come on the instant the mileage hit some magic number for warrantee service and not because maintenance is in fact required.&lt;/strong&gt;
]&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>Not having knowledge about the car, couldn&#8217;t the driver just turn off the engine?<br />
Any got any knowledge about this?<br />
<em><br />
[James' Reply: This is from my dad...</p>
<p><strong>I took the Prius up to the speed limit on a long straight main road (40 mph), moved the shift lever to N and held it there for two to four seconds.  </p>
<p>The gearbox (or Drive-O-Matic or whatever’s inside) went into neutral and stayed there till the car stopped (the brakes stopped the car without undue pressure).  It would not shift into any other mode from N while the car was rolling with the system energized...select Drive and it simply beeped a couple of times and remained in N.  Stopped at the side of the road, I shut the system off, pressed it ON again a few seconds later and all worked normally.</p>
<p>To shut the system off while underway at about 10 mph, I had to hold the start button down in the OFF position for three to five seconds (unlike shutting it off while stopped, when a one-second touch kills the displays), at which the automobile went dead (at this speed the brakes seemed to work normally).  It would not restart while the wheels were rolling.  After it was stopped, it restarted normally with the ON button.</p>
<p>I have no idea if this is what the Prius is designed to do...this is what our 2008 Prius did while moving straight ahead under relatively low-speed, cool-weather, dry-road, low-humidity conditions with a cellphone present and ON but not activated in the vehicle; with the radio off, the lights off, turn signals off, emergency flashers off, wipers off, heating system on LOW, windshield heater ON, doors and windows closed, no passengers in the car, one third of a tank of fuel on board, and the “Maint Req’d” light illuminated probably because it was programmed to come on the instant the mileage hit some magic number for warrantee service and not because maintenance is in fact required.</strong><br />
]</em></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Amy</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248295</link>
		<dc:creator>Amy</dc:creator>
		<pubDate>Tue, 16 Mar 2010 16:41:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248295</guid>
		<description>Fascinating article. 

I was struck by the fact that &lt;i&gt;[He said dispatchers tried to talk him through ways to stop the car, but nothing helped.]&lt;/i&gt; so can I assume that they didn&#039;t suggest to try the break pedal and the emergency break at the same time? I&#039;d love to hear that call...</description>
		<content:encoded><![CDATA[<p>Fascinating article. </p>
<p>I was struck by the fact that <i>[He said dispatchers tried to talk him through ways to stop the car, but nothing helped.]</i> so can I assume that they didn&#8217;t suggest to try the break pedal and the emergency break at the same time? I&#8217;d love to hear that call&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Robert P</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248283</link>
		<dc:creator>Robert P</dc:creator>
		<pubDate>Tue, 16 Mar 2010 16:10:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248283</guid>
		<description>Just because it&#039;s a physical mechanism in the emergency brake doesn&#039;t mean there isn&#039;t a signal generated and sent to the onboard computer.  What, do you think, turns on the light on the dash that indicates the e-brake&#039;s position? ;)</description>
		<content:encoded><![CDATA[<p>Just because it&#8217;s a physical mechanism in the emergency brake doesn&#8217;t mean there isn&#8217;t a signal generated and sent to the onboard computer.  What, do you think, turns on the light on the dash that indicates the e-brake&#8217;s position? <img src='http://www.satisfice.com/blog/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David Gilbert</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248254</link>
		<dc:creator>David Gilbert</dc:creator>
		<pubDate>Tue, 16 Mar 2010 12:45:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248254</guid>
		<description>Good post man.  And regardless of what the reality is and how it all falls out, this really brings the issue of software quality and it&#039;s true importance to the forefront.  While airplanes and rockets falling out of the sky are horrible, they are few, far in between, and &quot;happen to other people&quot;.  But Prius&#039;s screaming uncontrollably down the highway are you and your friends.  It is real, common, and at the moment apparently consistent enough to have everyone&#039;s attention.  We can only hope that this gets and stays big enough long enough to force companies to really begin to take seriously the commitment to proper risk assessment in software implementation.  Having to reboot your laptop because your browser crashed is annoying.  Mass carnage on the highways is a tad more serious.

David</description>
		<content:encoded><![CDATA[<p>Good post man.  And regardless of what the reality is and how it all falls out, this really brings the issue of software quality and it&#8217;s true importance to the forefront.  While airplanes and rockets falling out of the sky are horrible, they are few, far in between, and &#8220;happen to other people&#8221;.  But Prius&#8217;s screaming uncontrollably down the highway are you and your friends.  It is real, common, and at the moment apparently consistent enough to have everyone&#8217;s attention.  We can only hope that this gets and stays big enough long enough to force companies to really begin to take seriously the commitment to proper risk assessment in software implementation.  Having to reboot your laptop because your browser crashed is annoying.  Mass carnage on the highways is a tad more serious.</p>
<p>David</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Oliver</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248253</link>
		<dc:creator>Oliver</dc:creator>
		<pubDate>Tue, 16 Mar 2010 12:34:05 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248253</guid>
		<description>Hi James,

interesting. Wonder if the lawyer will be calling you.

This is the age-old question again. What do you do with non repeatable defects? I&#039;d say in this case investigate but be aware there might be no answer. Wait for more cases. That migt sound cruel but:

a) Compared to accident stats for the Prius this is not even a blip so relevance can be questioned
b) just imagine they introduce a fix. And that they fixed the wrong thing (they can&#039;t test it because it is not repeatable). Isn&#039;t then the danger of damage even higher? Should not be erred on the side of less risk? Like the aviation guys do?

There is a whole world of uncomfortable business and risk decisions here that are not really customer compatible but reality nonetheless. I have the distinct feeling someone is trying to get Toyota. They are finally vulnerable and the media is exploiting that out of proportion. So go figure. 

Anyway I still liked your disection. Really good example of staying objective. 

Thanks
Oliver

&lt;em&gt;[James&#039; Reply: One of my posts from long ago, here is all about reproducing intermittent bugs.

This has become such a large PR problem for them that I&#039;m sure they want to find and fix the problem just on general principles.]&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>Hi James,</p>
<p>interesting. Wonder if the lawyer will be calling you.</p>
<p>This is the age-old question again. What do you do with non repeatable defects? I&#8217;d say in this case investigate but be aware there might be no answer. Wait for more cases. That migt sound cruel but:</p>
<p>a) Compared to accident stats for the Prius this is not even a blip so relevance can be questioned<br />
b) just imagine they introduce a fix. And that they fixed the wrong thing (they can&#8217;t test it because it is not repeatable). Isn&#8217;t then the danger of damage even higher? Should not be erred on the side of less risk? Like the aviation guys do?</p>
<p>There is a whole world of uncomfortable business and risk decisions here that are not really customer compatible but reality nonetheless. I have the distinct feeling someone is trying to get Toyota. They are finally vulnerable and the media is exploiting that out of proportion. So go figure. </p>
<p>Anyway I still liked your disection. Really good example of staying objective. </p>
<p>Thanks<br />
Oliver</p>
<p><em>[James' Reply: One of my posts from long ago, here is all about reproducing intermittent bugs.</p>
<p>This has become such a large PR problem for them that I'm sure they want to find and fix the problem just on general principles.]</em></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Travis Jones</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248214</link>
		<dc:creator>Travis Jones</dc:creator>
		<pubDate>Tue, 16 Mar 2010 07:36:39 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248214</guid>
		<description>James, I was shocked as well that Toyota can suggest repeating the bug report didn&#039;t reproduce the problem in 2 hours of testing. I&#039;ve spent more time than that trying to isolate bugs by repeating the reported bug steps, finding out information, asking more questions, trying a different set of input steps, finding out information, etc.  before finally discovering the sequence that reproduced the bug.

In the AP article it stated &quot;In Sikes&#039; case, Toyota said it found he rapidly pressed the gas and brakes back and forth 250 times, the maximum amount of data that the car&#039;s self-diagnostic system can collect.&quot; So the log maxed out at 250. Could it have been hundreds or thousands more instances of alternating pedal presses? This sounds like a potential infinite loop problem. Perhaps Mr. Sykes sequence of gas/brake &quot;clicks&quot; put him in a loop. 

If I was a tester assigned to investigating this bug report I would want to know: 

Were these the only items in the log file? Were they at regular or irregular intervals and how long between events i.e. do the events look more like a computer produced them or human?

Additionally, is there different logic for braking depending on speed and force of the pedal press? I would guess there is. Perhaps there is a bug only at certain speeds at boundary conditions.

It will be interesting to follow this story in the coming weeks</description>
		<content:encoded><![CDATA[<p>James, I was shocked as well that Toyota can suggest repeating the bug report didn&#8217;t reproduce the problem in 2 hours of testing. I&#8217;ve spent more time than that trying to isolate bugs by repeating the reported bug steps, finding out information, asking more questions, trying a different set of input steps, finding out information, etc.  before finally discovering the sequence that reproduced the bug.</p>
<p>In the AP article it stated &#8220;In Sikes&#8217; case, Toyota said it found he rapidly pressed the gas and brakes back and forth 250 times, the maximum amount of data that the car&#8217;s self-diagnostic system can collect.&#8221; So the log maxed out at 250. Could it have been hundreds or thousands more instances of alternating pedal presses? This sounds like a potential infinite loop problem. Perhaps Mr. Sykes sequence of gas/brake &#8220;clicks&#8221; put him in a loop. </p>
<p>If I was a tester assigned to investigating this bug report I would want to know: </p>
<p>Were these the only items in the log file? Were they at regular or irregular intervals and how long between events i.e. do the events look more like a computer produced them or human?</p>
<p>Additionally, is there different logic for braking depending on speed and force of the pedal press? I would guess there is. Perhaps there is a bug only at certain speeds at boundary conditions.</p>
<p>It will be interesting to follow this story in the coming weeks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jtbandes</title>
		<link>http://www.satisfice.com/blog/archives/426/comment-page-1#comment-248173</link>
		<dc:creator>jtbandes</dc:creator>
		<pubDate>Tue, 16 Mar 2010 05:16:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.satisfice.com/blog/?p=426#comment-248173</guid>
		<description>Excellent points, James; I agree with your analysis of the situation. Thanks for giving a perspective that needed to be given.

I have one point to question, though. You say:
&lt;blockquote&gt;
I don’t know much about the design of a Prius, except that my understanding is that there are no physical cable linkages. It’s software driven. When you press the brakes you are essentially double clicking on the “brake” icon with your foot mouse, hoping that the operating system agrees to apply the real brakes. A Prius is basically a video game console connected to a car. You drive the console, not the car.
&lt;/blockquote&gt;

and:

&lt;blockquote&gt;
&lt;blockquote&gt;
Eventually, a California Highway Patrol officer was able to catch up to Sikes and used the patrol car’s public address system to instruct Sikes to apply the brakes and the emergency brake at the same time. That tactic worked, and he was able to stop the car.
&lt;/blockquote&gt;
I’d like to know if Sikes had tried the emergency brake alone, before this. Had he tried both at once before this.

I can understand if he did not try both at once, because a normal driver would think if they don’t work individually, why would they suddenly work together? But  in a drive-by-wire system, everything is mediated by software, and software can get into strange states. It’s technically plausible that only with both brake controls activated the software could be bounced out of whatever strange trance it got into.
&lt;/blockquote&gt;

However, I&#039;m not sure that&#039;s entirely true. While the regular brakes may certainly be (and probably are) controlled by software, so as not to harm the engine, it&#039;s my understanding that the emergency brake of a Prius works just like the emergency brake of any other car; that is, it&#039;s a physical mechanism.

Having driven a Prius several times myself, though I haven&#039;t examined it in detail, I&#039;ve experienced the ratcheting/clicking sound and haptic feedback when engaging parking brake that all parking brakes have, and when releasing it, it still feels like a physical mechanism. I&#039;m not inclined to think that the emergency brake is applied through software and remains applied when the car is completely turned off. I&#039;d also be surprised if there were no single, purely physical fallback braking mechanism and the Prius instead relied solely on software for its braking; that sounds like an accident waiting to happen (even more so than latent and elusive software bugs).

So this leads me to question not (only) the order in which these things were tried, but the accuracy of the statement that applying both of the braking mechanisms at the same time was the actual solution. Thoughts?

&lt;em&gt;[James&#039; Reply: I want to know more about this. I Googled a bit and didn&#039;t find the specs right offhand. My Dad has a Prius, so I&#039;ll ask him.]&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>Excellent points, James; I agree with your analysis of the situation. Thanks for giving a perspective that needed to be given.</p>
<p>I have one point to question, though. You say:</p>
<blockquote><p>
I don’t know much about the design of a Prius, except that my understanding is that there are no physical cable linkages. It’s software driven. When you press the brakes you are essentially double clicking on the “brake” icon with your foot mouse, hoping that the operating system agrees to apply the real brakes. A Prius is basically a video game console connected to a car. You drive the console, not the car.
</p></blockquote>
<p>and:</p>
<blockquote>
<blockquote><p>
Eventually, a California Highway Patrol officer was able to catch up to Sikes and used the patrol car’s public address system to instruct Sikes to apply the brakes and the emergency brake at the same time. That tactic worked, and he was able to stop the car.
</p></blockquote>
<p>I’d like to know if Sikes had tried the emergency brake alone, before this. Had he tried both at once before this.</p>
<p>I can understand if he did not try both at once, because a normal driver would think if they don’t work individually, why would they suddenly work together? But  in a drive-by-wire system, everything is mediated by software, and software can get into strange states. It’s technically plausible that only with both brake controls activated the software could be bounced out of whatever strange trance it got into.
</p></blockquote>
<p>However, I&#8217;m not sure that&#8217;s entirely true. While the regular brakes may certainly be (and probably are) controlled by software, so as not to harm the engine, it&#8217;s my understanding that the emergency brake of a Prius works just like the emergency brake of any other car; that is, it&#8217;s a physical mechanism.</p>
<p>Having driven a Prius several times myself, though I haven&#8217;t examined it in detail, I&#8217;ve experienced the ratcheting/clicking sound and haptic feedback when engaging parking brake that all parking brakes have, and when releasing it, it still feels like a physical mechanism. I&#8217;m not inclined to think that the emergency brake is applied through software and remains applied when the car is completely turned off. I&#8217;d also be surprised if there were no single, purely physical fallback braking mechanism and the Prius instead relied solely on software for its braking; that sounds like an accident waiting to happen (even more so than latent and elusive software bugs).</p>
<p>So this leads me to question not (only) the order in which these things were tried, but the accuracy of the statement that applying both of the braking mechanisms at the same time was the actual solution. Thoughts?</p>
<p><em>[James' Reply: I want to know more about this. I Googled a bit and didn't find the specs right offhand. My Dad has a Prius, so I'll ask him.]</em></p>
]]></content:encoded>
	</item>
</channel>
</rss>

