Benz remotely controlled vehicle stuck in cruise control mode for 1h at 120km/h

https://www.facebook.com/PeoplesDaily/videos/1864757720242703/

by LiweiZ • 8 years ago

55 104 8 years ago

vinay4272• 8 years ago

This is a somewhat misleading title. The car was intentionally set to cruise control by the owner, but the cruise control could not be turned off until Mercedes remotely found a way to disable it about 100km later.

programbreeding• 8 years ago

Personally that's exactly what I got from the title; it says it was stuck in cruise control. To me that indicates cruise control had been enabled, and then became stuck on.

vinay4272• 8 years ago

I believe I was misled by "remotely controlled vehicle stuck in cruise control," which (to me) implies that the remote control feature was somehow relevant to not being able to disable the cruise control. The article did not talk about remote control until it mentioned using it to disable the cruise control.

Silhouette• 8 years ago

I'm not sure what is more disturbing here, the fact that the car had such a dangerous malfunction in the first place, the fact that there was no reliable hardware-based mechanism to bring it safely to a halt when the software failed catastrophically, or the fact that the service team could remote in and take control of the vehicle. Everything about this is not just bad in itself but betrays a more fundamental lack of safe and secure design.

cevn• 8 years ago

Totally agreed. Why can't he just slam the brakes? I thought they are supposed to be stronger than the engine?!

olliej2• 8 years ago

Electronic control - it’s not a direct physical connection anymore.

Follow on for mechanics/mechanical engineers: if the accelerator is down and you’re already moving, can the brakes stop a car? It seems like you’d either not stop or “break” abs and force the wheels to lock which is also bad at speed...

ceejayoz3• 8 years ago

I'd really like to know what else the remote access allows them to control.

olliej2• 8 years ago

I assume the entire ECU, that said maybe they treated it as stolen and triggered a remote stop through an anti theft mechanism?

martimarkov2• 8 years ago

I mean even Formula 1 cars have the breaking system being outside of the computer control. Like we have totally solved this problem before. Why would you remove hardware override is beyond me...

https://www.formula1.com/en/championship/inside-f1/rules-reg...

maxxxxx2• 8 years ago

That headline is misleading. I read it as them controlling it for 1 hour which wasn't the case.

I am a little surprised that the brakes didn't work. Are brakes "fly-by-wire" now? Otherwise you should be able to slam the brakes even if the car is full throttle. I have tried this with several cars and the brakes we always stronger than the engine.

kirillseva• 8 years ago

Brakes are fly-by-wire on new cars because slamming the brake is not the most optimal strategy for stopping the car as fast as you can. And it can also damage the car.

antris• 8 years ago

I'd choose damaging the car over this scenario any day.

djrogers3• 8 years ago

No - ABS works without drive-by-wire, and was available in cars for decades before DBW systems were.

wallace_f• 8 years ago

because

Would government getting control over our cars be that much more unbelievable than of our phones?

dannyw• 8 years ago

The handbrake / e-brake are all electronic and “break-by-wire” on many new vehicles. Many hybrids also use break by wire for their main breaks.

https://en.m.wikipedia.org/wiki/Brake-by-wire

jandrese3• 8 years ago

I agree, I'd like to see the incident report on this. According to the subtitles both the brakes and the shifter failed. The shifter could be one of those flappy paddle deals where it's entirely plausible that a computer crash would disable it.

Brake-by-wire seems like a bad idea. I really want to have those physical lines in there as a final redundancy, like the physical control lines on a 737.

These kinds of stories are only going to get more common as we put more and more automation (and complexity!) into our vehicles. This would require way too many improbable events to happen at once on an old manual transmission car.

Clutch lines fail, shifter somehow gets stuck in gear, brake lines snap, ignition has an electrical fault that prevents the car from being turned off, cruise control somehow short circuits...all at once. Impossible without an elaborate sabotage.

dsfyu404ed• 8 years ago

Kinda. It's a manual system with electronic controls in parallel. If a piece of code decides it doesn't want you pushing the brake you're not gonna push the brake. On a new car basically all vehicle systems are this way where the car can ignore or override your input if a piece of code tells it to do that.

taneq3• 8 years ago

Are brakes "fly-by-wire" now?

Absolutely not. Cars have dual redundant hydraulic systems which are operated mechanically by the brake pedal. Other systems affect this (such as vacuum assist, ABS, AEB etc.) but the foot brakes should still work (poorly) even if the car is totally unpowered.

yalogin• 8 years ago

Interestingly this has nothing to do with self driving. Though, if the dealer could control is remotely why did it take an hour to do so?

ptero2• 8 years ago

May be the (designed) logic flaw. My guess is on a safety override that painted itself into a corner. For example, no remote override of a cruise control while moving.

tritium• 8 years ago

This makes me want less software control in my vehicle. Ideally none.

mulmen6• 8 years ago

So carburetors and no abs or traction control?

endianswap2• 8 years ago

ABS is a solved problem without requiring software.

Skunkleton6• 8 years ago

Im not saying I agree with OP, but you picked three things that existed in cars before computers.

ag56• 8 years ago

Why couldn't you just hit the ignition to turn the engine off?

telesilla• 8 years ago

New cars these days don't all have this option: electronic starters have keyless ignition, activated when the key is nearby.

http://www.worldwidemotors.com/blog/how-to-use-push-button-s...

Personally, I'm concerned there is no manual brake override.

If I drove a Mercedes I'd test using manual ignition, maybe pulling the key out would stop the car.

gruez• 8 years ago

activated when the key is nearby.

throw the key out the window?

buildbot• 8 years ago

At least in Audi’s, holding the start stop button will turn off the car at any speed.

Source: Don’t rest your hand in the center console on the freeway.

vegardx6• 8 years ago

There is no such thing as "manual break override". You will always be able to use breaks in any car, regardless of what systems they're running. You might be without a booster, but still.

You can also just shut the engine down with the ignition switch.

Gerardo1• 8 years ago

I've never been in a car with a push-button ignition that would let you turn the engine off while the car was moving. Too easy to bump the button.

F22• 8 years ago

You typically have to hold it for multiple seconds

martimarkov2• 8 years ago

I'm not sure how much i believe a post from facebook from "People's Daily, China". The video can for sure be named: "Police high speed chase through toll booth"

vegardx6• 8 years ago

Lots of stuff is completely off with this. If you're stuck in cruise control at 120km/h for an hour you will drive 120km, not 100km.

Also, what about just turning the engine off? Or... break.

smilekzs• 8 years ago

Xue, an amateur car racer himself, tried opening the car door slightly to help slow the car down, which slowed to 60km/h, but nothing else could be done

And likely push-button ignite --- otherwise you can just pull the key out.

ceejayoz3• 8 years ago

Also, what about just turning the engine off? Or... break.

It says the brakes didn't work, and push-button start cars don't have an easy way to "just turn the engine off".

jakebellacera• 8 years ago

More and more vehicles are shipping with electrical controls which replace physical levers, switches, etc. It could be possible that the brake lever was really an electrical control which happened to fail and become unresponsive.

slx26• 8 years ago

I would like to see a better source for this, but this point is explained in the post, saying the driver opened the door slightly, managing to bring the car's speed down to 60km/h, which sounds weird too, but I sure have never tried.

LiweiZ• 8 years ago

Sorry for the misleading title. I tried my best to contain the title short enough to submit. Please change the title for a better one. Or suggest a better one, I will change it ASAP. Thanks.

matthewmacleod4• 8 years ago

So I'd be really interested in knowing how a failure like this happens in a human-safety-critical application.

I assume every software engineer under the age of ~50 would have learned about events like the Therac-25 incidents during their education. Is there genuinely no robust software quality regime in place for critical systems like this in vehicles?

There are so many worrying things here: such a bad failure occurring in the first place; the lack of any physical fallback or failsafe; the ability of the dealer to remotely control the car's operation (!!) – any of these by themselves fills me with dread.

hinkley• 8 years ago

There have been a lot of revolutions in the practice of software development but by and large, self reflection has evaded us.

One of the leads and myself are the only people who call out the fact that we are humans and we will make mistakes. And on a 24/7 operation that means production issues will happen.

The other lead insists we all act like robots and he gets frustrated when people don’t like his proposals.

oconnore• 8 years ago

Reliability is expensive and slow. Companies hate expensive and slow, especially when you have a demo that basically does what you want sans edge cases.

quadcore2• 8 years ago

Oh actually, let say you compute a+b with a computer. Believe it or not, you aren't 100% sure the computer is gonna gives you the right answer. There is 3 types of failures that could happen, 1) a hardware failure, 2) a software failure, 3) a bit could be flipped by a cosmic particle.

matthewmacleod4• 8 years ago

Right, but surely every engineer working on safety-critical systems would be aware of that, right? There are mitigations available, that I guess I naïvely assumed would be in place for a system that could end up killing dozens of people if it went wrong.

jandrese3• 8 years ago

Or the owner attempted to flash his own ECU and messed it up. Granted, this is more common in the rice-burning crowd than the Benz driving crowd, but there is still some overlap.

Edit: Just saw that the driver was an "amateur car racer", which exponentially increases the chances that he re-flashed his ECU.

matthewmacleod4• 8 years ago

That's interesting, in the sense that it might explain a software failure, but it doesn't really explain why this wasn't failsafe anyway (given the possibility of a non-flashed ECU failing) nor why remote access was possible. I guess something doesn't add up here.

taneq3• 8 years ago

You say that and yet people are letting self-driving software on Android phones control their vehicles. I don't get it either.

Humdeee2• 8 years ago

the ability of the dealer to remotely control the car's operation (!!)

This could be misleading. From the small article at least, the only action I assume that was done was the cruise control being disengaged from it's faulty state. There is no evidence that a rogue service employee could play real life mario kart from afar (although it wouldn't surprise me).

I also somewhat expected this from a high end car manufacturer in this day and age. Why is this inherently a bad thing? Surely it would do more good than bad, would it not?

What bothers me is the poor response time.

inb4 privacy concerns, big brother, etc. I'm thinking engine shutdowns during car chases (expensive vehicles are a target), etc.

matthewmacleod4• 8 years ago

It's quite possible that there's no ability to actually drive the vehicle as such, but remote access is inherently a massive security hole regardless. Remember the remote Jeep hack from a couple of years ago, where the vehicle could be remotely controlled over DAB? (https://www.wired.com/2015/07/jeep-hack-chrysler-recalls-1-4...)

sjclemmy• 8 years ago

Reminds me of reading the Fortean times when I was younger. Sounds like a made up or exaggerated story.

Telltale statement > “According to a local media report”. So this is a report of a report. Hmmmm.

mmjaa• 8 years ago

Covert intelligence operation (hit-job) gone awry? Maybe the driver was a target of the CIA ..

thesumofall• 8 years ago

Feels difficult to believe. He reduced speed by 60kmh by opening a door “slightly”? Why did the cruise control not compensate for it? Both brake systems failed at the same time? In addition, the automatic gearbox was somehow stuck in D? Sorry, but I’m sure it’s either human error or a publicity stunt

Edit: I didn’t know the C class has any remote control capabilities. Does anyone know more?

oliv__• 8 years ago

What I mostly took away from this is that automakers can remotely force stop your vehicle if they so desire. Kind of creepy.

Humdeee2• 8 years ago

I don't find it more or less creepy than what we discover companies doing under the hood on our smartphone apps, computers, sharing personal info, etc.

djrogers3• 8 years ago

Nothing about this story makes sense, and it's so sketchily sourced I'm surprised to see it here on HN.

For starters if the problem was with cruise control, how would opening the drivers side door 'slightly' slow the car to half it's speed? Setting aside the physics here, cruise control would simply increase the throttle until it got back to it's set speed.

Also questionable is the idea that MB would be able to remotely control the vehicle when every system other than the throttle had failed. Brakes failed, ignition failed, transmission failed, but the throttle and cruise control were still hunky-dory? That sounds a lot more like either a complete fabrication or someone who screwed up while trying to hack their car's CAN-BUS...

lfowles4• 8 years ago

Cruise control on both of my cars is closer to "set throttle" than "set speed". Neither will increase throttle to keep speed when going up a hill for example.

endianswap2• 8 years ago

That's not typical for cruise control; even cars in the 80s with cruise control would increase throttle uphills.

taneq3• 8 years ago

That's not cruise control then, it's... 'throttle hold'? Even the cruise control on my 30-year-old Toyota will vary the throttle as required to maintain the set speed.

Johnny5553• 8 years ago

How old is your car? Cruise control in every automatic transmission car I've owned (dating back to the 70's) will use enough throttle to downshift the transmission and maintain speed on any freeway hill.

In a manual transmission, then sometimes it needs a downshift and any use of the clutch switches off the cruise control.

blattimwind• 8 years ago

I've never seen a cruise control that worked like that. Set speed or min/max speed and the tachometer is nailed.

Piskvorrr4• 8 years ago

Depends on the car; a VW with automatic transmission has a "speed set" cruise control, the car will change gear and vary throttle at will to keep the speed; won't brake though, except by downshifting.

djrogers3• 8 years ago

Dang, even my old hoopty from the 80s would do a reasonable job of keeping speed, and that was in a GM crapbox. There's no chance a modern MB doesn't do so as well.

Skunkleton6• 8 years ago

Actually, if the cruise control system had some how locked up it would make sense that the throttle was set to some fixed position. Any changes to the aerodynamics of the car would effect the speed at a fixed throttle.

That said, this really is just low quality sensational spam.

ghaff2• 8 years ago

FWIW, it was in the Daily Mail too with more detail. That probably still falls under the general category of "sketchy sources" but there are enough specifics it's not obviously totally made up out of whole cloth. But I'd put a lot less faith in any of the details.

http://www.dailymail.co.uk/news/article-5509373/Horror-ride-...

melq• 8 years ago

Also questionable is the idea that MB would be able to remotely control the vehicle when every system other than the throttle had failed.

None of these things failed per se, they just weren't under user control.

ptero2• 8 years ago

The story is sketchy and if true as written I would have by now expected the major networks to have it on front pages -- with a catchy title this is a sure way to increase views.

But to me that idea that opening the door slows the fly-by-wire car is not outlandish. In fact, this (and unbuckling for a few seconds) were first thoughts I had on how I would have tried to break out of the stuck fly-by-wire mode or at least activate a safer "limp to safety" mode.

Johnny5553• 8 years ago

I'm skeptical:

During a tense time of waiting and praying, Xue, an amateur car racer himself, tried opening the car door slightly to help slow the car down, which slowed to 60km/h, but nothing else could be done

If the car was trying to maintain 120kph, I'm skeptical that opening a door partially (or even all the way) slowed it to 60kph.

m3kw9• 8 years ago

The fact that it was able to be remotely controlled is exposing it to a whole world of bugs and hacks

rusbus• 8 years ago

FWIW, this happened to a friend's Ford explorer with faulty electronics, self driving cars don't have a monopoly on automobile malfunctions

yason• 8 years ago

In the "good" old days there were several things you could do:

- turn off the ignition (now purely software-controlled in keyless systems)

- put transmission to neutral (a physical link doesn't necessarily exist anymore in automatic transmissions, still possible in manuals)

- jump on the brake pedal as hard as you can (I suspect that a hydraulic link to brakes must still exist, possibly by law, but there are ABS and stability control units in between that can add to or remove from the brake pressure so it's not entirely driver controlled anymore, could lead to a failure path)

- use parking brake to assist in braking (now often controlled by an electric motor automatically, doesn't engage while driving)

There were occasional similar failures like the accelerator pedal getting stuck under the floor mat or throttle cable getting stuck but you could do a number of things listed above. Cruise controls systems were heavily designed to disengage at the slightest disturbance because they were separate control modules: early vacuum-operated designs could—plausibly, I don't have first hand knowledge—have a microswitch in the brake pedal that would just pull a relay to shut off current from the control module, restoring normal accelerator operation. Pretty much bullet proof.

Software is indeed capable of creating failure modes that were pretty much unimaginable previously.

4a0508659f7c6a12• 8 years ago

I'd start pulling fuses, Die Hard style.

Yetanfou• 8 years ago

While this newish whiz-bang Mercedes Benz might be too modern to have a physical ignition lock these stories always make me wonder: why do all these people who are confronted with runaway vehicles forget the simple solution of switching off the engine? Just turn the key in the lock to the 'off' position but don't remove it, the engine will switch off and the car or motorbike will come to a halt. I've done this several times with my motorbike when one of the Bowden cables between the throttle grip and a carburetor froze during travel (as in 'water in cable freezes to ice', I ride the thing in wintertime here in Sweden). By switching the lock between 'on' and 'off' I've used it in a similar way as the 'blip switch' in early airplanes with rotary engines which lacked an adjustable throttle, they were either 'on' or 'off' and could be pulsed on landing by using the 'blip switch'.

When I mention this people often start about losing power steering but that is of no concern, power steering is only effective at lower speeds anyway. Servo brakes are powered by the intake vacuum so that won't be an issue either, even it the vacuum fails or the power comes from another source (e.g. an electric or engine-driven pump) there is generally a pressure reservoir which holds enough pressure for several brake actions. And even in case the servo totally fails the brakes still work, as does the parking brake.

To conclude, as long as you're in a vehicle with a physical ignition lock the first thing to try is just to switch off the engine. As long as you keep the key in the lock the steering lock should not engage (something to test next time you turn off the engine).

Benz remotely controlled vehicle stuck in cruise control mode for 1h at 120km/h

Related Stories