>Toyota models, including Lexus, have figured in almost half of the carbon monoxide fatalities and injuries identified by The Times. Toyota says its keyless ignition system “meets or exceeds all relevant federal safety standards.”<p>That's quite significant, and I wonder why that is?<p>I have a hypothesis:<p>Personally I've had problems with Toyotas (specifically, Prius GenIII and Camry XV50) where trying to shut off the car <i>too fast</i>, eg using "muscle memory," results in the car not shutting off.<p>At first glance (and according to the manual), the steps to shutting off the Prius / Camry <i>appear</i> to be:<p>1. Shift the car into Park.<p>2. Press the ignition button.<p>3. Exit the vehicle.<p>Simple, right?<p>Well, it's not. If you don't <i>wait ~1 second</i> between step 1 and step 2, the car has a race condition where it doesn't realize that you already put it in Park, so it displays a "Shift to Park" message and fails to shut down. To fix, you have to shift the car into Reverse (or really, Anything-But-Park), shift it <i>back</i> into Park, and press the button again.<p>This sequence is extremely confusing, especially if you don't notice the error message. Neither conventional shifters nor conventional key-based ignitions make you wait -- when you put it in gear, it's in gear!<p>Toyota's system has <i>hidden state</i> that's related, but separate from the physical movements of the shift lever and the start button (unlike a conventional key and shifter).<p>So if you want to reliably shut off the car, here are the <i>actual</i> steps to shutting down a Prius / Camry:<p>1. Shift the car into Park.<p>2. Wait a beat (for the vehicle to realize it's in Park).<p>3. Press the ignition button.<p>4. Exit the vehicle.<p>The proper way for Toyota to do it would have been to buffer the inputs in order, so the same sequence of actions always results in the same result, and the mere act of speeding up one's muscle memory doesn't result in unexpected operation (ie, acting just like the old, more-easily-predictable physical controls).