Given that gate-charge memory such as flash and eeprom can slowly degrade after a few years it would probably be a good idea to avoid this type of memory. Especially since a failure is no longer a simple ECM replacement to get the car running again, it has now become a "How do I stop this thing!" type of problem.
The alternative is PROM, but IC sockets also have issues unless soldered in, so buggy code could not be easily upgraded unless the entire ECM is replaced.
Probably best to not let the software have any control of speed at all.
Other than the Toyota UA issue and perhaps the Honda UA in Japan, the rest of these are rather ho-hum. Yes I know the GM key issue was hyped up big time in the press, but the issue itself was minor. The real issue there is poor driver training.
A Book For All Reasons Bernard Cole1 Comment Robert Oshana's recent book "Software Engineering for Embedded Systems (Newnes/Elsevier)," written and edited with Mark Kraeling, is a 'book for all reasons.' At almost 1,200 pages, it ...