[iancarroll]

> And I'd be willing to bet their processes and standards are much better than big auto.

Comma has a neat product, but I really do not agree with comments like this. The auto industry is terrible, but they are miles ahead of Comma in the process realm.

The industry has spent a lot of time on safety standards like ASIL and AUTOSAR. They would never allow Comma to ship, because it is written in Python, a pausable language (absurd), and without any hardware protections like lockstep processors or watchdogs, if only because it is literally a consumer phone. A system connected to the steering and acceleration of a vehicle freezing while still in control is ridiculous.

Comma will kill someone; it is only a matter of when, not if.

[chrisjs95]

All the critical pieces are written in C. He's talked about it many, many times.

[iancarroll]

This just isn't true as far as I am aware. The vehicle interfaces[0] and control loop are all in Python. It doesn't help if other components are in C if your commands to the vehicle are interrupted by GC pauses.

Even if it was true, and it was all in C, it is only better because there is no GC -- there are still a myriad of potential issues that the auto industry routinely addresses in both software and hardware that Comma either cannot or does not. Not to say they are perfect, but Comma is well below any sort of bar.

[0] https://github.com/commaai/openpilot/tree/master/selfdrive/c...