Learning from failure

摘要

Cars are increasingly software-dependent, yet when lives are at stake what matters is not just building safe software, but how you react when problems start to appear. IT SHOULD NOT have been a surprise that software might be blamed - rightly or wrongly - for the recent high-profile cases of out-of-control Toyotas. After all, faulty software had already been fingered for crashes that were literally out of this world.