Slashdot Mirror


Computers Key To Air France Crash

Michael_Curator writes "It's no secret that commercial airplanes are heavily computerized, but as the mystery of Air France Flight 447 unfolds, we need to come to grips with the fact that in many cases, airline pilots' hands are tied when it comes to responding effectively to an emergency situation. Boeing planes allow pilots to take over from computers during emergency situations, Airbus planes do not. It's not a design flaw — it's a philosophical divide. It's essentially a question of what do you trust most: a human being's ingenuity or a computer's infinitely faster access and reaction to information. It's not surprising that an American company errs on the side of individual freedom while a European company is more inclined to favor an approach that relies on systems. As passengers, we should have the right to ask whether we're putting our lives in the hands of a computer rather than the battle-tested pilot sitting up front, and we should have right to deplane if we don't like the answer."

36 of 911 comments (clear)

  1. Irresponsible headline, summary by toby · · Score: 5, Insightful

    It's not surprising that an American company errs on the side of individual freedom while a European company is more inclined to favor an approach that relies on systems.

    How fond Americans are of reductionist dualities that are unhelpful, misleading and frequently downright dangerous: American pilot with The Right Stuff in an American plane would have saved everyone; dangerous European plane and computer killed hundreds. Oversimplified sniping, or childish fantasy?

    If I want real facts on flying, instead of wild-assed pseudo-political trollery, I'll go read Peter Ladkin or Patrick Smith: "The gist of the accident appears pretty clear: Air France Flight 447 was victimized by a terrible storm."

    --
    you had me at #!
    1. Re:Irresponsible headline, summary by Ethanol-fueled · · Score: 5, Insightful
      When I read TFA I had a knee-jerk reaction to hate on Airbus, as I believe that everything should have a manual override.

      Then I thought of Terrain-following radar and realized that things are not always that simple. Quote:

      Under these conditions terrain-following radar is a necessity, since a human pilot cannot react quickly enough to changing terrain heights, and is much more likely to cause a crash than an automated system in the same circumstances.

    2. Re:Irresponsible headline, summary by sodul · · Score: 5, Insightful

      And remember that the recent plane crash in NY was caused by human error: the autopilot responded to the ice buildup by diving to maintain speed, the pilot 'corrected' what he though was an error and the plane fell to the ground like a stone.

      The truth is, modern computers can be much much better pilots than 95% of the pilots out there. I don't think the autopilot would have even attempted the landing in the Hudson river, here the pilot was clearly one of the top pilots that I want on every single I fly. Also I'm pretty sure that good pilot was not overworked and was well rested before his flight. Whatever good training you have humans will always make mistakes and they get worse with fatigue. The computer does not get tired, or emotional.

      So with an average pilot, I think the autopilot is much more trustable. In case of exceptional emergency, a true outstanding pilot might pull it off where the computer will not. I'm not sure the data (if it exists) favor the humans though.

    3. Re:Irresponsible headline, summary by jd · · Score: 5, Insightful

      I would argue that instead of it being one or the other, it would be better if the inputs could be merged. Humans are generally better at ingenuity (unless the herustics are really good) and computers are generally better at speed of reaction (unless there's a deadlock between threads), but there's no universal rule.

      What's really needed is a way for the pilot and the computer to cooperatively function, such that the failure of either at a task is not a catastrophic failure that could destroy the aircraft.

      (I can just hear Boeing and Airbus chiming in: "Yeah, yeah, socialists and their cooperatives! Gimmie a good, old-fashioned dictatorship!")

      --
      It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    4. Re:Irresponsible headline, summary by abigor · · Score: 5, Insightful

      Bloggers need to say stupid shit like that in order to drive traffic via provocation. kdawson, you should be ashamed of yourself for posting this tripe.

    5. Re:Irresponsible headline, summary by shanen · · Score: 5, Interesting

      Gosh, that was such a terribly worded article summary I can't decide if the author is a regular 'editor' of /. or just a typical reflection of the poor taste and low competence of the /. editors. Would you prefer one lump of incompetence or two with your /. articles?

      Anyway, I'd hate to generalize from my poor abilities as a former pilot, but I tend to favor machines over humans. As Einstein noted, there are no limits to human stupidity, but you can design any degree of redundancy you want into mechanical systems. The simple question is cost versus probabilistic safety.

      As should be expected from /., the treatment of the design trade-off in the article summary was amazingly shallow. In extreme cases, the designers create planes that cannot possibly be flown by humans. Such fly-by-wire planes may involve control optimization with negative dynamic stability and feedback loops that can only be satisfied at computer speeds. In particular I'm thinking of a fairly recent jet fighter that had to have PROPER corrective feedback something like every tenth of a second.

      As regards the storm, I actually came close to getting killed when something like that caught me off guard. Scaling those possibilities up... Well, that's a big chunk of the reason I mostly avoid flying these years.

      With regards to planes, my fuzzy recollection is that the DC-10 had the worst safety record for commercial airplanes. However, every time I look at a 747 it boggles my imagination that the thing can fly. Continuing with Airbus, I remember an interesting crash in Nagoya a few years ago that involved the pilots essentially getting into an argument with the fly-by-wire system...

      --
      Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
    6. Re:Irresponsible headline, summary by Schraegstrichpunkt · · Score: 5, Funny

      Next up: how this crash is actually the fault of RIAA and Airbus should have used Linux.

      Wow. I've been reading Slashdot long enough that I know exactly what arguments could be made to advance those two statements.

    7. Re:Irresponsible headline, summary by neapolitan · · Score: 5, Informative

      Yes, it is an annoying debate tactic but weak and relatively easy to recognize. Diligent readers can recognize this though, and the glaring errors often come painfully to light in the discussions.

      Anyway, the Airbus systems have multiple levels of computer massaging of the pilot's input, called different "flight laws." Read up about it here:

      Airbus flight laws

      In the most direct law, yes, the system will still not allow you to do things like rip the rudder off the airplane (A300 was not FBW) or clearly overstress the aircraft and destroy the wings. This is a good thing -- of course, there is perhaps some imaginary situation where it would be better to destroy the aircraft to ameliorate some aspect of an impending crash, however, the vast majority (all ever recorded in an actual crash?) of inputs that can destroy aircraft are not intentional nor required. Also, the 'direct law' will allow a pilot to potentially overstress the aircraft in the event of computer failure or discordant input.

      The role of conflicting pilot input is also well thought out (described in the link), and the airbus designers were aware of these (pseudo)philosophical objections to excessive computer control. I do not think there is much of a conflict among people familiar with the operation and implementation.

      --
      Slashdotter, ID #101. UIDs are in binary, right?
    8. Re:Irresponsible headline, summary by Ethanol-fueled · · Score: 5, Insightful

      well, unless the plane nose dives and the computer proves/indicates it is unreliable.

      Good point. Disclaimer: I am a former Air Force avionics tech, F-15 TISS. Military fighters and civillian airliners are different beasts but I understand that the F-15 had a quad-redundant (trivia: the transporters in Star Trek: TNG have quad-redundant buffers) flight control computer.

      Google searches reveal that Airbus' flight control computers are pentuple-redundant (two primary and three secondary flight control computers).

      Another factor to take into consideration is that not all airline pilots are experienced. I don't like to dichotomize (like the poor summary of the article, dammit KDawson) but a pilot's first storm could bring hardening experience or crushing defeat.

    9. Re:Irresponsible headline, summary by __aaklbk2114 · · Score: 5, Informative

      It's like the pilot that landed his plane in the river after losing an engine to birds. I don't think a computer would have taken that option and not only would it have been likely that all the passengers would have been killed, but bystanders as the planes computer attempted to correct and eventually goes down in a populated street.

      For the record, it was an Airbus A320 (a full FBW aircraft) that was flown into the Hudson.

    10. Re:Irresponsible headline, summary by Anonymous Coward · · Score: 5, Informative

      "Only with Boeing is that possible, with airbus, regardless of the situation, the computer takes precedence."
      "It's like the pilot that landed his plane in the river after losing an engine to birds."

      In that instance, the plane WAS an Airbus. The summary saying that Airbus doesn't have control overrides is imply lying. It's not true. All Airbus aircraft allows pilots to override computer control. You're right though, if that flight HAD been controlled by computer, then it would have crashed - not because of computer error but because it's simply not possible to plan that scenario. Even if you could program a computer to look for water landings in such an instance, and give it detailed waterway charts, it couldn't know if there was a ferry there or not, possibly killing everyone on board AND everyone on the ferry. Its simply impossible to allow for all scenarios. This is where having the option of human override is good - and thats why all planes allow it.

      However, if computers had control, then many other flights which have crashed killing all on board would have been avoided. Plane crashes are virtually always either a) mechanical error or damage (such as the Hudson landing), b) weather/micro-burst related (such as Air France), or c) pilot error - either making the wrong decision, misinterpreting the information the computer was giving them, or blatantly ignoring the advice of the computer and resulting in a plane crash. There are very few incidents (if any) where computer control of an aircraft has led to its crash.

      You seem to have bought into the summary, thinking that Airbus planes don't allow manual control. I assure you, thats not the case, as seen in the Airbus A320 on the Hudson River landing. It is unfortunate though, that in computer vs human scenarios, the vast majority of the time humans make the mistakes, not the computers. As discussed in many places here the Buffalo flight where the computer started diving and the human overrode it - people will say he's an idiot but the fact is the pilots flying all planes are just as capable of making similar mistakes, no matter how good their training. Computers can't make such a mistake, unless programmed incorrectly.

    11. Re:Irresponsible headline, summary by Suzuran · · Score: 5, Informative

      There IS a manual override. The crew can force a reversion to direct law. This has never been done because it's never been necessary. You and the press do not understand how the Airbus works. There are multiple levels of fail-over down to full manual reversion available, and the system degrades automatically. You don't have to turn around and FORCE the computer to direct law because when the shit hits the fan the computer figures it out faster than the pixels change on the displays and degrades out for you. But hey, I only have experience with the aircraft and lots of documentation - Don't let the facts contradict someone's political agenda!

      Airbus autoflight is not the demon that Boeing and the press would like you to believe. They keep rehashing old shit like the Habsheim Chainsaw and reiterating the same tired talking points without considering that the software is vastly superior now than it was in 1988. In any event, THE SYSTEM WILL NOT FIGHT THE PILOTS.

      Let me restate that again, just in case you missed it - THE SYSTEM WILL NOT FIGHT THE PILOTS. The system just gives me the best the airplane can do at the moment without me having to stop and consider my conditions.

      If I as the pilot deflect the stick left, if the autopilot is engaged, it will be disengaged for me. The load factor is considered and the airplane will begin a maximum-rate roll in the direction I deflected the stick. I keep holding the stick and the airplane will keep rolling up to the limiter. That's when Normal Law is active. If we're in Alternate or Direct law, there is no roll limit and I can roll the airplane onto its back and crash it if I desire.

      The same thing applies to hauling the stick back. If I haul the stick back, I get maximum-rate climb, and if I forget to push the throttles the computer will do that for me too when I hit alpha floor. That means instead of trying to fly the airplane and avoid the other airplane or granite cloud or whatever it was outside that I am trying to not hit, I can just concentrate on avoiding the whatever and the airplane will manage everything else.

      I never have to "disengage the computer" to get the airplane to do something. I just move the controls and the airplane follows. If I recenter my controls the airplane will DO WHATEVER *I* ORDERED LAST. It -WILL NOT- go back to whatever it was doing before until I tell it that it can do that.

      Let's say I get a TCAS. The offending traffic is dead ahead and I can't see him. All I do is haul the stick back (or shove it forward depending on the TCAS instructions) and then INSTEAD OF LOOKING INSIDE THE AIRPLANE AT MY SPEED/THRUST SETTING/ETC, I can direct my attention OUTSIDE OF THE AIRCRAFT TO SEARCH FOR THE CONFLICTING TRAFFIC. This will give me a far better chance to determine whether or not the other guy is doing what TCAS told HIM to do and avoid him if necessary than if I have to divide my attention between the airplane and outside. The airplane will kill the thrust or whatever it needs to do to avoid overspeed. The other pilot can be looking outside as well, so we have two sets of eyes looking for (and ideally seeing) the other airplane and working to avoid him.

      Now, when shit hits the fan and things break - Airbus has MULTIPLE REDUNDANT SYSTEMS that continually cross-check each other as the flight goes on. If there is a discrepancy in data, the affected system IS DISABLED. The airplane will NEVER follow erroneous sensor data unless it sees the SAME ERRONEOUS DATA on BOTH SIDES SIMULTANEOUSLY, *AND* THAT ERRONEOUS DATA MATCHES HEURISTICS.

      When certain important systems fail the computer WILL NOT simply use the other computer since it now has no means to cross-check it. What I get instead is a CONTROL LAW REVERSION. That is, the airplane takes the protection logic OUT OF THE LOOP ENTIRELY, since it can't provide protection with faulty data. There are three layers of reversion until you get to DIRECT LAW, which is "737 Mode". The system reverts automatically in response to the data it sees.

    12. Re:Irresponsible headline, summary by syousef · · Score: 5, Insightful

      On the other hand, the flight computer has the experience of every simulated and real emergency any plane has ever been through. Sure, humans can practice in the simulator as well, but the reality is that costs mean that no individual gets that much time in the simulator

      What utter nonsense! All the computer has is a set of heuristics derived from various situations that have been selected by its human programmers to represent the set of scenarios likely to be encountered. The heuristics aren't perfect. The choices made by the programmers aren't perfect. The computer has no magic database of all accidents that you describe. How the FUCK does this lame bullshit get modded up?

      Due to the magic of software when one flight computer knows how to handle some situation, they all do.

      Are you even paying attention to what you're typing? You're trying to be clever by using the term "magic" to encompass all the knowledge the computers encapsulate, but you've done so in such a way that it makes you sound like a fool who believes there's literally something magical about the software.

      Computers can ONLY do what they're programmed to do. If the situation encountered is not one that was planned for and tested, the computer can make stupid nonsensical judgements that no human of sound mind would ever contemplate making. There's no sophisticated AI flying the computer that understands the context of the flight (even if there are "AI" components in the flight programming).

      --
      These posts express my own personal views, not those of my employer
    13. Re:Irresponsible headline, summary by damburger · · Score: 5, Interesting

      What got me was how quick people were to attribute a divine hand into it - 'The Miracle on the Hudson' and so on. They aren't calling AF 447 'The Arbitrary Smiting over the Atlantic' are they?

      --
      If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
  2. What the heck is 'battle tested' supposed to mean? by Omnifarious · · Score: 5, Insightful

    What a dumb phrase. Do you only want former airforce pilots who've actually seen combat flying commercial planes? How exactly is that going to keep you up in the air in a civilian airliner experiencing an electronic or mechanical malfunction?

    And if what you really mean is experienced pilots, what about some pilot who's been flying for years and has never had an emergency situation and then makes a mistake and then (s)he makes a judgement error in a critical situation? Are you then going to call for the iron calm of a computer rather than a fallible human pilot?

    No, the answer is statistics. What's safer and more reliable in the long run? How many crashes have we had due to computer error rather than human error given x hours flown by each?

    The very wording of this ridiculous post presupposes an answer. And in the future it is very likely the wrong answer. Sure computers will make errors. But in general people will make them more often, and computers are just going to get better.

    And casting this as some kind of bizarre collectivist vs. individualist ideology debate is ridiculous as well. What does towing some ideological line have to do with safely getting to your destination in an airplane?

    This Slashdot article is full of simplistic drivel designed to provoke ideologically based knee-jerk responses instead of any kind of reasoned debate.

    The linked to text is much, much better, even though offering people a choice is problematic given how the whole non-refundable ticket system and airline logistics systems currently work, not to mention that making a choice at the gate when you get on the plane will throw off your schedule.

  3. Hrmm by acehole · · Score: 5, Funny

    "What are you doing Dave?"

    --
    Be you Admins? nay, we are but lusers!
  4. Pick your poison by Anonymous Coward · · Score: 5, Insightful

    The Continental flight that crashed in Buffalo on the 12th of February crashed because the inexperienced pilot pulled up when the plane stalled. A computer controlled system might have nosed down to get airspeed and saved 50 lives. Of course I doubt a computer controlled system would be able to make a flawless landing in the Hudson.

  5. Re:What the heck is 'battle tested' supposed to me by acehole · · Score: 5, Funny

    What a dumb phrase. Do you only want former airforce pilots who've actually seen combat flying commercial planes?.

    Who wouldnt want to be on a commercial flight where random barrel rolls, climbs and dives occur?

    --
    Be you Admins? nay, we are but lusers!
  6. This isn't a political decision by HangingChad · · Score: 5, Insightful

    It's not surprising that an American company errs on the side of individual freedom...

    Eh? You mean the freedom to work under-paid pilots 14-16 hours a day like Colgan Air? And the FAA let them slide because Colgan had friends in that office? Some of their pilots could make more flipping burgers. Like the pair that were tired, under-paid and not paying attention who turned Continential flight 3407 into a giant lawn dart.

    This isn't political. I don't care if it's human, machine or a trained goat. Whatever gets the aircraft down in one piece is what I want managing the control surfaces.

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
  7. Re:Give the pilot control! by Anonymous Coward · · Score: 5, Informative

    "If the Gimli Glider or Flight 1549 had been on an Airbus, there would have been a lot of dead people"....

    fyi- Flight 1549 was an Airbus A320. Perhaps you would like to rethink your conclusion?

  8. Is summary accurate? by pongo000 · · Score: 5, Informative

    Summary states:

    Boeing planes allow pilots to take over from computers during emergency situations, Airbus planes do not.

    According to this link, the Airbus does, in fact, have a manual override mode.

    Which would make the argument as presented a moot point.

    1. Re:Is summary accurate? by Anonymous Coward · · Score: 5, Informative

      That is completely true - the computer in the Airbus can not override the pilot. After the computers overrode the pilot's input at the Paris Air Show, causing the airplane to crash, Airbus added a mode called "direct law" that allows the pilot absolute control over the aircraft. There are several different flight control laws, depending on which of the three redundant flight computers are in operation, and in what mode:

      Normal Law - computer prevents pilot from excessive pitch or bank, excessive speed, stall from insufficient speed, excessive load factor, and augments yaw (rudder) control.

      Alternate Law - Aids in low and high speed stability, and excessive load factor, as well as yaw damping.

      Abnormal Alternate Law - yaw damping and excessive load factor protection only

      Direct Law - No protection, pilot can do anything they want

      Disclaimer: I am a commercial pilot, but I am not an Airbus pilot. I have studied Airbus systems, and have about 10 hours of A320 (full motion) simulator time.

    2. Re:Is summary accurate? by Napoleon+The+Pig · · Score: 5, Informative

      In order to get to the manual override mode in an Airbus (IIRC) you have to navigate through several screens on the flight control computer and disable everything via menus. In order to activate the manual override mode on a Boeing plane you just have to move the yoke. In an emergency situation where, for whatever reason, the automated flight controls aren't working or are working improperly the Boeing override implementation is vastly superior to that of the Airbus. Not to say that autopilots and fly-by-wire systems aren't useful, but they aren't infoulable and limiting the pilot's ability to respond to a situation just seems like a really bad idea.

  9. Nagoya crash by Anonymous Coward · · Score: 5, Informative

    China Airlines Flight 140 was a route from Taipei, Taiwan to Nagoya, Japan. On April 26, 1994, the Airbus A300 on the route was due to land at Nagoya Airport. The Airbus A300 was completing a routine flight and approach, however just before landing, the First Officer pressed the Take Off/Go-Around button (also known as a TOGA) which raises the throttle position to the same as take offs and go-arounds.

    Pilot Wang Lo-chi and copilot Chuang Meng-jung[1] attempted to correct the situation by manually reducing the throttles and pushing the yoke downwards. The autopilot then acted against these inputs (as it is programmed to do when the TOGA button is activated), causing the plane to have a very nose-high attitude. This nose-high attitude, combined with decreasing airspeed due to insufficient thrust, resulted in an aerodynamic stall of the aircraft
    -- http://en.wikipedia.org/wiki/China_Airlines_Flight_140

    1. Re:Nagoya crash by LurkerXXX · · Score: 5, Informative

      For anyone interested in details of the crashes:

      Nagoya, Japan
      http://aviation-safety.net/database/record.php?id=19940426-0

      Mulhouse-Habsheim, France
      http://aviation-safety.net/database/record.php?id=19880626-0

    2. Re:Nagoya crash by highways · · Score: 5, Interesting

      It was later shown that FBW was not at fault. The aicraft sunk too fast anyway and by the time the pilots realised it, it was too late.

      Jets take a number of seconds to spool up. If yu find a video with sound, you'll notice that the jets spool up just before it hit the trees - some 5s after the pilots commanded them.

      AND, there were a bunch of pilot procedural failures at the same time (e.g. never below 100ft AGL), not to mention poor managerial decisions in allowing the flight plan to go ahead in the first place.

    3. Re:Nagoya crash by timeOday · · Score: 5, Insightful
      China Airlines Flight 140, cited above, is an example of pilot error overriding autopilot causing a crash. The plane crashed because one pilot pressed the takeoff/go-around button, then the other pilot fought the autopilot, driving the plane into the ground. Apparently the plane would have been fine had they simply let it do what they told it to do.

      That alone makes the anectodal score 1 to 1.

      Almost any incident of controlled flight into terrain also counts, since autopilots are very good at not absent-mindedly flying into the ground. Eastern Airlines flight 401, which crashed into the everglades in 1972, is an example of this. The pilot accidently turned off the altitude hold autopilot and the continued to let the plane fly right into the ground.

  10. Overrides for when computers go mad. by dinther · · Score: 5, Insightful

    As an ex airline pilot and current software developer I would say that an override must be available in any system. Of course computers are much better in quick decision making and collecting all the facts than humans are. In fact with a glass cockpit, the computer knows the data before the pilot does anyway. But there is the occasion that software fucks up. Plain and simple.

    From my own personal experience:

    1 - Autopilot with suicide attempt

    Boeing 737-400 cruising at FL310 everything happy, clear skies. I'm Pilot flying and the captain suggest I have lunch. With the tray on my lap I eat while glancing at the instruments every once in a while. The captain was supposed to have control. So after a particular tasty piece of chicken I look up only to see the horizon at an angle and way too high. I glance across and see the captain reading the news paper. Look at the instruments which indicate a gentle diving turn. The VNav path on the displays indicate nothing out of the ordinary but this Autopilot decided to go for a turn and decent anyway. The whole thing would have only lasted a few seconds but there was absolutely no reason for the computer to do this manouvre. AP disconnect and reconnect sorted it all out.

    2 - Lazy plane

    Yeah, uh again during my mean and again I had handed control over to the captain while eating. This time at night. Cruising FL330 when auto throttle decides to close the throttles to idle. Auto pilot maintains altitude. WTF to I push the throttles back up. They stay up for a few seconds and yet again move to idle. Got rid of my food and disconnected the auto throttle. Set cruising power manually and checked everything. Nothing wrong. Re-engaged the auto throttle and things were fine.

    3 - Dutch roll gone bad

    Climbing through 10.000 feet on auto pilot, the plane begins a slight rocking left and right. No more than a few degrees. As we continue to climb the rocking gets worse. 5 deg bank either way. Auto pilot is working hard to compensate or so it seems because the control column moves noticeably. Again my luck to be pf. We thought the Autopilot had gone mad so after strapping ourselves in tightly we disconnected the ap. I tried to hand fly and stabilise but things got out of control rapidly as the plane started to buck left and right well past 10 degrees bank. I was obviously losing control. Nah, let's face it, I had no control and told the captain. He took over and at least was able to not allow it to get worse. Glad I was with this guy because he flicked off the yaw damper that is an automatic control system to stop an aerodynamic effect called Dutch roll. The plane steadied immediately although we were left with the Dutch roll effect but that was not too bad.

    So there you go. In all three cases it was not a matter of pilots being better than computers. Overrides are required when the computer goes mad. I always valued having the mechanical controls as a backup in the 737. I travelled in Airbus aircraft and I no longer fly but I would still hesitate to be a servant to a fly by wire system.

  11. On top of that by einhverfr · · Score: 5, Interesting

    what people are forgetting is that the airbus plane DID return nearly full control to the pilot (nearly because there are still limits to things like how much roll one can request, but these COULD be built in mechanically in the absence of fly-by-wire).

    The real issue here is that the computer system detected invalid input and handed the control back to the pilots (under "alternate law" which means most safety rules are disabled), but the pilots may not have had enough information to know whether the control was handed back to them in a safe state, and if not, how to correct.

    On top of that, the airplane was flying fairly close to the coffin corner (where the airplane is capable of going too fast and too slow simultaneously, and at this point, in this situation, computers are really helpful). One possible issue is that a gust of wind could have caused "mach tucks" if they were going a little too fast (thus causing downward pressure on the nose during gusts). These could have placed significant stress on the airframe until things started to fail. I have some other theories and observations about debris and ACARS messages, but this isn't the time for that now. All I will say is that all indications are the airplane was flying too fast, and there is NO indication that the instructions Airbus has sent to pilots will remedy that problem because it is unlikely that the pilots would have had sufficient information to act on them.

    There are two issues involved here that need additional discussion though:

    1) Are airplanes built to withstand forces as well as they used to be? Would, say, a DC8 be able to withstand more turbulance than an A330?

    2) Do FBW systems provide sufficient feedback for a pilot to feel the plane? Could accidents be avoided in cases like this by adding additional feedback?

    --

    LedgerSMB: Open source Accounting/ERP
    1. Re:On top of that by goombah99 · · Score: 5, Informative

      What you claim, is I think in extreme doubt. The airbus is 100% fly-by-wire. When everything is working correctly The airbus allows a pilot an envelope of operation. But it will not allow a pilot to stray outside that envelope. When sensor data is erroneous the envelope is erroneous.

      To give you an understanding of this: at the altitude the airbus is flying their is a 25 knot windw between Stall and super-sonic, both of which are fatal if you happen to be in a thunderstorm. So the pilot has almost no controll. He can hardly turn the plane because that would require more thrust than the engines could provide and maintain the 25 knot range. If the instruments reading the air density, air speed and air pressure malfunction or the computer miscalcualtes the pilot is screwed.

      My father, god rest his sole, was a lead designer on boeing flight systems and instrumental on it's philosophy. Interestingly he hated computers and loved world war 2. WWII was when designers got lots of feedback on how to design because they made so many errors and planes were pushed to their limits. They did so many post mortems that they learned the process of error free design.

      Laugh if you will, but all those software design processes you were taught and all thoe iso compliance rules were not invented by computer scientists. They were borrowed from the airplane industry. There are methods to engineering that work and they learned these by error.

      In any case, it was not until the 757 and 767 that boeing had the cahones to build al plane without fully mechanical controls from the cockpit. and even then they let the pilot over ride the computers. By the way there is not one computer. There are 3, and they vote. if one of them disagrees, the other two vote him off the island. They don't trust computers.

      This however is changing. Even during my father's tenure they were envious of the weight savings that Airbus was getting with it's fly by wire approach. TO stay competative boeing has had to go that way too.

      --
      Some drink at the fountain of knowledge. Others just gargle.
    2. Re:On top of that by nairnr · · Score: 5, Informative

      What you claim, is I think in extreme doubt. The airbus is 100% fly-by-wire. When everything is working correctly The airbus allows a pilot an envelope of operation. But it will not allow a pilot to stray outside that envelope. When sensor data is erroneous the envelope is erroneous.

      If you read any of the ACARS data that has been released you would see that you claim is false. The autopilot disengaged, and when the ADIRU faulted, the plain went into ALTERNATE law which does not offer the same envelope protection as normal, because the computer knows that its own inputs can't be trusted. Fly by wire has got nothing to do with it. When it knows the envelope data is erroneous it downgrades its protection. This has got nothing to do with what a Boeing plane will let you do versus Airbus.

      Anyway it will take the black boxes to confirm what happened. Anything before that is pure speculation.

    3. Re:On top of that by einhverfr · · Score: 5, Informative

      What you claim, is I think in extreme doubt. The airbus is 100% fly-by-wire. When everything is working correctly The airbus allows a pilot an envelope of operation. But it will not allow a pilot to stray outside that envelope. When sensor data is erroneous the envelope is erroneous.

      Not quite sure. Airbus airplanes have three distinct FBW modes, called "laws." Depending on how you count, there are three or more of them. In Normal Law, it is as you say. The airplane won't let you go into a mach tuck, won't let you stall out by going too slow, won't let you apply the rudder too hard, has strong yaw dampering, etc.

      When things go wrong, the control laws are designed to degrade gracefully. To my knowledge, the airbus does not give pilots the choice of flight laws, which is what you are complaining about. If multiple systems fail, the system goes into "alternate law" which provides speed safety and yaw dampering only. Note that in alternate law, any changes that the computer requests can be overriden by the pilot. If ADR systems fail, the speed safety, rudder travel limiter, etc. are also disabled. This means that the plane is being flown pretty much in "direct law" but with yaw dampering.

      Additionally, in alternate law, if the plane enters an unusual attitude, flight laws degrade further.

      If additional failures occur, the plane reverts to "direct law" which is supposed to be an equivalent to mechanical control over the airplane. In direct law, some manual/mechanical backup systems are actually used.

      If all FBW systems fail, there are limited mechanical backups to the rudder and elevators.

      Sourse: http://www.airbusdriver.net/airbus_fltlaws.htm

      --

      LedgerSMB: Open source Accounting/ERP
  12. Stop trolling by mrwolf007 · · Score: 5, Informative

    the simple fact is we think this particular French Airbus crashed do to design failure, specificity computer related and not human failure and this only strengthens the case for humans to still be able to fully operate complex machines.

    The autopilot disengaged at 23:10, 4 minutes before the last automated messages indicating failing cabin pressure were sent by the plane.

  13. manual crash by rduke15 · · Score: 5, Informative

    provide us with 2 examples where the pilot decided to manually override the flight computer and crashed.

    Here is 1: http://en.wikipedia.org/wiki/Bashkirian_Airlines_Flight_2937.

    Basically, the on-board computers gave the correct advice, but one of the pilots "disregarded the TCAS instruction to climb and instead began to descend, as instructed by the [air traffic] controller, thus both planes were now descending."

    The controller was later assassinated by someone who had lost wife and children in the accident.

  14. But which planes crash the most? by Toreo+asesino · · Score: 5, Insightful

    From where I'm sitting, it seems boeings fall out the sky with more often and with more devastating results than Airbuses - http://news.bbc.co.uk/2/hi/in_depth/2008892.stm

    I particularly liked when the A320 came down in the Hudson how, it was "all thanks to the pilot"...and yes, in part it was, but the minute another airbus falls out the sky and it's fatal this time (as crashes often are) it's clearly because of poor design philosophy?

    Meh, this whole thing stinks of US vs EU chest-bashing.

    --
    throw new NoSignatureException();
  15. 99% of the audience is unqualified by icebrain · · Score: 5, Informative

    More accurately, there are very few people on Slashdot who have any fracking clue how a fly-by-wire system works. It's evident from the comments; just like everything else, people go spouting off and making claims about what they think things are like based on just a tiny bit of knowledge and their own prejudices, rather than looking at the facts and finding out what things actually are.

    (Full disclosure: My day job is developing and testing a new FBW system, and I took an entire course dedicated to this in college.)

    FBW systems are not the autopilot. They are not autonomous AIs, they do not make their own decisions, they do not just arbitrarily "decide" to go do something against the pilots' wishes. FBW systems are, in essence, little more than simple feedback control loops, similar to the familiar PDI controllers we all remember from control theory classes. All they do is compare the current state (pitch/yaw/roll angle and rate) with the one commanded through the stick, and try to make the two match by moving the control surfaces. The biggest difference is the presence of limiters which will prevent the aircraft from exceeding certain parameters (usually G load and angle of attack). That's it. That's all there is to a fly-by-wire system. It's just a controller.

    In fact, let's compare a "traditional" manual system with a (simplified) FBW one from the pilot's perspective. In a traditional system, the stick/yoke in the cockpit is directly mechanically connected to the control surfaces through pushrods, bellcranks, cables, pulleys, etc. A given deflection of the stick will always result in the same deflection of the surface. For our purposes, we'll assume it's roughly linear, so Dsurface = K * Dstick. Now, let's look at the airplane as a whole. A given deflection of a control surface will not always achieve the same result--at low speeds, you need more deflection for a given response than you do at high speed. The net effect is that, at low speeds, the pilot needs to make large deflections of the stick make a given maneuver. At high speeds, he only needs to move the stick a little bit. It's kind of like your car--the steering gets more sensitive the faster you go; you wouldn't use the same inputs on the freeway as you do in a parking lot. Matching the desired response with the control input is the pilot's job--he's the feedback loop connecting control surfaces with the desired flight path.

    A FBW system, on the other hand, doesn't have mechanical connections between stick and surface. Instead, the stick uses force or deflection sensors to read the pilot's input. That input is fed to the FCC, which then sends signals to the actuators on the control surfaces. Instead of commanding a given control surface deflection, the pilot's input will usually command something else, eg. roll rate or G load. Rather than varying according to speed and aircraft position, this will be constant--in other words, the command for 20 deg/sec will be the same at really low speeds as it will at high speeds. Basically, the pilot is telling the aircraft "do this", and the FCC figures out how to achieve that by moving the surfaces.

    A FBW system will also often have limiters, which prevent the aircraft from exceeding certain parameters. Most common are angle-of-attack and G limiters. Angle of attack (AOA) is the relative angle of the aircraft to the oncoming air. Imagine sticking your hand out the window of your car, palm downwards. As you slowly rotate your hand so your palm faces forwards, notice that your hand wants to go up--you're making lift, and the angle of your palm to the airflow is your hand's AOA. Notice, though, that once you rotate too far, you stop generating lift--that's a stall. On a wing, the amount of lift generated is roughly linearly proportional to AOA, at least up to a point. Past that critical AOA, the air stops flowing smoothly over the top of the wing and gets all jumbled, causing a loss of lift. That's what a stall is.

    --
    The meek may inherit the earth, but the strong shall take the stars.