# 421: Paint the Iceberg Yellow

- Show: [Embedded.fm](https://hardwarepodcasts.com/podcast/embedded-fm)
- Published: 2022-07-21
- Length: 1h 16m
- Episode: 421
- Page: https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow
- Listen: https://embedded.fm/episodes/421

## Summary

Chris Hobbs, who works in kernel development at BlackBerry QNX and authored 'Embedded Software Development for Safety-Critical Systems,' explains the distinction between safety-critical and standard embedded systems, emphasizing safety culture and the concept of SOTIF (Safety of the Intended Functionality). He details how modern systems, such as autonomous vehicles and medical devices, face risks from 'accidental systems' where interactions between components create unforeseen hazards, citing examples like a radar system dependent on jammed GPS. Hobbs advocates for goal-based standards like UL 4600 and the use of Safety Cases with Goal Structuring Notation to demonstrate safety rather than relying on prescriptive checklists. He also discusses the challenges of verifying machine learning algorithms, the limitations of languages like C and Rust in safety contexts, and the importance of structured risk analysis using tools like Bayesian fault trees and LaTeX for traceability.

## Chapters

- [0:06](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=6) Introduction: Chris Hobbs and Safety-Critical Systems
- [1:47](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=107) Defining Safety-Critical Systems: From Pacemakers to Coke Machines
- [3:52](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=232) Safety Culture and Lifetime Requirements
- [8:05](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=485) SOTIF and Accidental Systems: When Nothing Fails
- [17:35](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=1055) Hazard and Risk Analysis: The Iceberg Analogy
- [28:28](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=1708) Prescriptive vs. Goal-Based Standards (UL 4600)
- [32:36](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=1956) Assessing Failure Rates and Bayesian Fault Trees
- [37:18](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=2238) Machine Learning, Intellectual Debt, and Auditing
- [46:09](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=2769) Safety Cases and Goal Structuring Notation (Socrates)
- [53:38](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=3218) Liability, Morality, and the Engineer's Responsibility
- [1:01:35](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=3695) Fault Tolerance with Non-Dedicated Hardware
- [1:07:58](https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow#t=4078) Language Choices: C, Ada, SPARK, and Rust

## Topics

- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [AI & machine learning](https://hardwarepodcasts.com/topic/ai-and-machine-learning)
- [Certification & compliance](https://hardwarepodcasts.com/topic/certification-and-compliance)
- [Careers & education](https://hardwarepodcasts.com/topic/engineering-careers-and-education)

## Most relevant to

large enterprises

## Mentioned

- BlackBerry QNX (company)
- Embedded Software Development for Safety-Critical Systems (other)
- UL 4600 (other)
- IEC 61508 (other)
- ISO 26262 (other)
- Socrates (tool)
- MISRA C (other)
- Rust (other)
- Ada (other)
- SPARK Ada (other)

## Related episodes from other shows

- [Systems Architecture with Maik Pfingsten](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2022-10-19-systems-architecture-with-maik-pfingsten) (The Pragmatic Embedded Podcast)
- [Phil Koopman on Autonomy | Life after Nokia, Graphcore CEO](https://hardwarepodcasts.com/podcast/ee-times-current/2019-04-19-phil-koopman-on-autonomy-life-after-nokia-graphcore-ceo) (EE Times Current)
- [Why Testing Sucks](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2021-05-11-why-testing-sucks) (The Pragmatic Embedded Podcast)
- [Arm’s bold new path | Teenage autonomous drivers | Dealing with the data deluge](https://hardwarepodcasts.com/podcast/ee-times-current/2019-10-18-arms-bold-new-path-teenage-autonomous-drivers-dealing-with-the-data-deluge) (EE Times Current)
- [Voice-Activated Everything on the Cheap | Jets & Hoverboards & Reliability | AVs: How Safe is Safe?](https://hardwarepodcasts.com/podcast/ee-times-current/2019-09-27-voice-activated-everything-on-the-cheap-jets-hoverboards-reliability-avs-how-saf) (EE Times Current)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/embedded-fm/2022-07-21-421-paint-the-iceberg-yellow. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Embedded.fm.