4 ms·
I studied control engineering, and I bet he forgot some things. A few things come to mind. How does he recognize sensor failure (pretty important in closed-loop
by carlmr 7y ago
I studied control engineering, and I bet he forgot some things. A few things come to mind. How does he recognize sensor failure (pretty important in closed-loop systems, like MCAS for example)? Did he use floating point math which may cause numerical issues? Does he use integrators and limit their output? If he does limit the output does he counteract windup? If he uses neural networks, did he gather enough data that we can be sure that this things works?
There's so many pitfalls here where teams of engineers with the whole part spec and from different disciplines have failed before. It sounds very dangerous.
- penagwin 7y agoFuzzing seems like a really useful test for this. Either way, I agree I'm not really subscribed to the idea that DIY life critical systems are a good idea beyond POC.
- roribob 7y agoMaybe it isn't life critical but only quality of life critical?
- DanBC 7y agoInsulin pumps are both.
- penagwin 7y agoIf it pumps too much you're dead - which is why I'm considering it life critical. Not enough is also bad but hopefully they'll notice and can act accordingly - still a threat too though. It's not that we're all saying this is an unsafe machine, we're saying that a random person DIY'ing and using such a solution is very risky, there's a reason why commercial medical equipment requires rigorous testing/certifications, etc.