Slashdot Mirror


SpaceShipTwo's Rocket Engine Did Not Cause Fatal Crash

astroengine writes It wasn't SpaceShipTwo's hybrid rocket motor — which was flying on Friday with a new type of fuel — that caused the fatal crash, the head of the accident investigation agency said late Sunday. The ship's fuel tanks and its engine were recovered intact, indicating there was no explosion. "They showed no signs of burn-through, no signs of being breached," Christopher Hart, acting chairman of the National Transportation and Safety Board, told reporters at the Mojave Air and Space Port in Mojave, Calif. Instead, data and video relayed from the ship show its hallmark safety feature — a foldable tail section designed for easy re-entry into the atmosphere from space — was deployed early, causing the in-flight break-up.

39 of 150 comments (clear)

  1. Foldable tail? by rossdee · · Score: 2

    Why does it need a foldable tail? Its not like it reenters at orbital velocities...

    1. Re:Foldable tail? by LWATCDR · · Score: 4, Informative

      Because you do not need to be anywhere near orbital velocities for friction to be an issue. The SR-71 cruises at around 1/9th orbital velocity and had a lot of heat issues to deal with.
      It needs the foldable tail to create a stable, high drag configuration to get it safely down to denser air.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    2. Re:Foldable tail? by trout007 · · Score: 3, Informative

      The main issue is the aerodynamic forces are enough that if you aren't pointed in the right direction it could destroy the aircraft. The worry was during reentey but if this report is correct it shows you how the wrong orientation can cause breakup.

      --
      I love Jesus, except for his foreign policy.
    3. Re:Foldable tail? by AlecC · · Score: 3, Informative

      Because the foldable tail puts into a very stable configuration, removing the need for attitudinal jets, because reasonable sized flaps would not work in the very thin atmosphere.

      --
      Consciousness is an illusion caused by an excess of self consciousness.
    4. Re:Foldable tail? by CrimsonAvenger · · Score: 2

      Its not like it reenters at orbital velocities...

      Okay, I'm irritated at the world today...

      Pedant Mode...ON.

      "Orbital SPEEDS" is probably the phrase you were groping blindly for when you typed the above.

      Given sufficient speed, the direction vector that would turn that "speed" into "velocity" only has to meet one requirement - that it not intersect the ground.

      And even that is technically moot - even if your "orbit" intersects the ground, it's still technically a ballistic orbit as long as the forces acting on the body doing the "orbit" reduce down to "gravity".

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    5. Re:Foldable tail? by Applehu+Akbar · · Score: 2

      The shuttlecock-like folding tail is a key design element in both ApaceShip One and Two: it provides a simple way of decelerating during atmospheric re-entry without the need for complex control electronics. This will be even more important in an orbital design.

    6. Re:Foldable tail? by sjbe · · Score: 3, Informative

      Why does it need a foldable tail? Its not like it reenters at orbital velocities...

      Because it assists with the descent. The craft falls back to earth something like a badminton shuttlecock. Not a perfect analogy but it's a fairly clever way to ensure flight stability in a very simple manner.

  2. Bad week for Aerospace by T.E.D. · · Score: 3, Interesting

    Last week saw the Orbital Sciences Antares explosion on Tuesday, this fatal Virgin Galactic crash on Friday, and a plane crash in Wichita on Thursday that killed 4 (The pilot, and 3 in the building it crashed into).

    Hopefully we have some good weeks ahead to balance this.

    1. Re:Bad week for Aerospace by I'm+New+Around+Here · · Score: 4, Interesting

      The three in the building were in a flight simulator. How horribly ironic.

      "You can learn to fly in this machine. It's just like the real jet, except you cannot die."

      --
      If you think I voted for Trump because of this post, you're wrong. I voted for Dr. Jill Stein of the Green Party. Again.
  3. A missing detail by jbmartin6 · · Score: 4, Informative
    For those who won't read the article, it was unclear why the tail was deployed early. Pilot error was one possibility:

    Normally, the feather system wouldn’t be unlocked until the rocket-powered spaceship is moving about Mach 1.4, or 1.4 times faster than the speed of sound. Instead, the co-pilot moved the lever from locked to unlock when the spaceship was traveling at about Mach 1, Hart said. “I’m not stating that this is the cause of the mishap,” he added. “We have months and months of investigation to determine what the cause was.” In addition to the possibility of pilot error, Hart said the NTSB is looking a variety of other issues that may have caused or contributed to the accident

    --
    This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
    1. Re:A missing detail by Charliemopps · · Score: 3, Interesting

      Right, he may very well have been trying to save it by doing that. Or scrambling unsuccessfully to find the eject lever.

  4. KSP by Thanshin · · Score: 4, Funny

    Typical KSP. You click the wrong button, unfold the lander module's legs during take off and everything goes to heck.

  5. shift inter-locks by bill_mcgonigle · · Score: 5, Insightful

    Normally, the feather system wouldn't be unlocked until the rocket-powered spaceship is moving about Mach 1.4, or 1.4 times faster than the speed of sound.
    Instead, the co-pilot moved the lever from locked to unlock when the spaceship was traveling at about Mach 1, Hart said.

    Modern cars have a feature where you can't take the key out of the ignition if you forget to put the thing in park. This feature saves me from stupid about twice a year. Humans are error-prone - there's a whole field, poka yoke dedicated to preventing these sorts of errors.

    Test pilots are the best of the best. If one of them can make a catastrophic mistake then so can any commercial pilot.

    Now, they may have figured that that sort of safety gear was "for later" and test craft are often bare-bones, and test pilots are often relied on to not make those kinds of mistakes. Assuming the premise here, we might see more automation early in the design process going forward. Virgin might be able to survive a year-long investigation but that kind of delay is an ongoing liability. It may turn out to be faster and cheaper in the long run to add in those costs up front, if delays are calculated into the cost.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    1. Re:shift inter-locks by FlyHelicopters · · Score: 5, Insightful

      It is possible that there's an unforseen circumstance where activating the feather system at the wrong time is exactly what the pilot needs to do, and he doesn't want the system telling him not to do that.

      This...

      As a commercial pilot, I can tell you that automatic everything is nice, when it works...

      But you always want to have a manual reversion mode just in case...

      And when all else fails, a professional crew who can think can do amazing things:

      http://en.wikipedia.org/wiki/U...

    2. Re:shift inter-locks by fisted · · Score: 3, Informative

      $() is POSIX. Backticks are, too, but usually discouraged, for they don't nest.
      Sibling's claim that this was bash- or zsh specific is wrong.

    3. Re:shift inter-locks by FlyHelicopters · · Score: 3, Interesting

      Does this rocket plane really require pilots?

      No, probably not... most airplanes no longer "require" pilots in the sense that computers can do the job better, cheaper, and more reliability for the most part...

      The question becomes, how many passengers TODAY would get onto an airplane with no human pilots? I would, because I know better. But most people don't know any better.

      For a self-driving car I'm guessing the right emergency response is 90% braking, 9% turning, 0.9% accelerating to get out of harm's way and maybe 0.1% getting creative like unbuckling and bailing because the car's going over a cliff.

      Self-driving cars are likely to be far safer and more reliable than human-driven cars. But tell that to the mother of the dead child killed in a self-driving car? She doesn't care that 20,000 fewer people are dead in these new cars, she only cares that HER child is dead.

      Take helicopters... Here is an odd fact for you... More people are injured and killed practice autorotations than we have engine failures in helicopters.

      An autorotation is what you do when the engine quits, it lets the helicopter glide to a safe landing (sort of glide, mostly drop, but it does work).

      Frank Robinson, the owner of Robinson Helicopters (who makes the R-22 which is the most common training helicopter today) has said that he would prefer that practicing for this was no longer done for most pilot training.

      And he is right, fewer people would die if we simply accepted that anyone in a helicopter that lost the engine would just die with 100% certainty than by requiring helicopter pilots to keep practicing this over and over.

      Fully 1/4 of helicopter pilot training is practicing for losing an engine, something that doesn't actually happen to most pilots over their entire careers. Lots of pilots are hurt during training while practicing it however.

      But humans have a problem with picking any path that has a 100% certainty of death, regardless of how many people actually die on the path that is not certain.

  6. Re:Way to jump the gun (or do I mean shark?) by wonkey_monkey · · Score: 2

    To continue my rant, the article even includes this quote:

    “I’m not stating that this is the cause of the mishap,” [Hart] added.

    No-one knows why SS2 crashed yet.

    --
    systemd is Roko's Basilisk.
  7. Confused Reporter by sycodon · · Score: 2, Insightful

    What the reporter states doesn't make sense.

    If there was a structural failure related to the tail, one would imagine it would be because it was deployed while the vehicle was traveling faster than the design speed for the tail, causing greater than planned aerodynamic stresses. Saying it failed because they were going slower than the normal deployment speed just doesn't make sense. Things break when you overstress them, not when you under-stress them.

    Am I missing something?

    --
    When Fascism comes to America, it will call itself Anti-Fascism, and tell you to give up your guns.
    1. Re:Confused Reporter by trout007 · · Score: 5, Insightful

      The tail is supposed to be deployed during rentey at an altitude where the air is thin. So even though you are going faster the air is thin so the loads are less.

      --
      I love Jesus, except for his foreign policy.
    2. Re:Confused Reporter by xxxJonBoyxxx · · Score: 2

      >> What the reporter states doesn't make sense.

      I've seen even worse coverage of this. A local TV station bubblehead read the text of the Virgin accident story against the video of the Antares rocket exploding. (No footage of the Virgin crash, no tie-in between Antares and Virgin explained, just "private space death" story audio over the biggest explosion they could find.)

    3. Re:Confused Reporter by MightyYar · · Score: 2

      Not "deployed", "unlocked". Presumably there is an "arm" step and then a "deploy" step.

      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    4. Re:Confused Reporter by Anonymous Coward · · Score: 3, Interesting

      Supposed SOP was to unlock (NOT DEPLOY, unlock) the feather at Mach 1.4.

      Logic being that if it doesn't unlock, thrust is cut and the flight aborted. Past that point you are committed to climbing at such speed that the re-entry without the feathering system could be fatal.

      Actual deploy would happen only past apogee and the feather mode would stabilize the fall and give high drag before the craft enters denser parts of the atmosphere.

      For some reason the deploy happened uncommanded right after unlock and Bad Things followed (any feather deploy during powered flight is pretty much instant game over as the craft will unavoidably flip due to the thrust and breakup is almost guaranteed).

    5. Re:Confused Reporter by Anonymous Coward · · Score: 2, Informative

      Indeed. From The Guardian:

      Christopher Hart, the acting chairman of the US National Transportation Safety Board, told a press conference on Sunday night that the co-pilot, Michael Alsbury, had unlocked the feathering system, but that the second stage of the process, which moves the wings into the feathering position, happened “without being commanded”.

      And here's a short video from the press conference.

    6. Re:Confused Reporter by ConfusedVorlon · · Score: 4, Informative

      the video seems to state:

      1) SOP is to unlock at 1.4
      2) the co-pilot moved the lever to unlock at 1.0

      "the lock unlock is not to be moved into the unlock position until acceleration up to mach 1.4. Instead, that occurred at approximately mach 1.0"
      http://www.bbc.co.uk/news/worl... (2:50)

      I don't know if that difference is significant. It sounded to me like 'we're not casting blame formally yet, but look over here at this pilot error'

    7. Re:Confused Reporter by Kevin+Fishburne · · Score: 3, Insightful

      Maybe I've been watching too much Star Trek (okay, not maybe), but shouldn't the execution of operations that could single-handedly destroy the craft require an override when being executed outside safe parameters? I understand the danger of having the computer prevent you from doing what you think needs to be done at the time, but having an "are you sure?" prompt when the computer thinks you're fucking up sounds like a good idea to me.

      --
      Buy your next Linux PC at eightvirtues.com
  8. Re:Then how did the pilot die? by trout007 · · Score: 2

    If this deployed it would have created a massive pitch up manuver. The G forces may have been enough to knock the pilots unconscious.

    --
    I love Jesus, except for his foreign policy.
  9. Re:Let's still cancel everything by Applehu+Akbar · · Score: 4, Insightful

    This factor, not mere ideology or efficiency of free markets, is the reason we need to privatize risky technologies. The problem with a government effort is not that it is marginally less 'efficient' than a private one, but that in a Luddite-dominated culture a government effort, unless we can make it military and secret, will be doomed by its inevitable first accident. The Challenger crash caused a two-year delay of NASA's most advanced manned system, and the Columbia crash killed it for good.

  10. Re:Odd... by ray-auch · · Score: 5, Insightful

    Nope - under ICAO, for air crashes, preliminary report is supposed to be within one month.

    Plus, this was a test flight, and was probably instrumented to death - very likely they have full real time telemetry before they even need to go near recorders in the wreckage. Apparently they have cockpit video too - something the aviation industry has always resisted (at least the unions).

  11. Re:Then how did the pilot die? by pehrs · · Score: 5, Informative

    Eh? No, the crew of Columbia did not survive all the way down. Perhaps you are thinking of challenger, where there is some debate on if they survived until impact. In the case of Columbia the crew was dead four times over before impact. The lethal factors NASA identified were:

    1. Depressurization of the crew module at or shortly after orbiter breakup.
    So, we start with denying the crew oxygen. None closed their helmets when pressure dropped to 0 in a fraction of a second at the start of the breakup.
    2. Exposure of unconscious or deceased crew members to a dynamic rotating load environment with a lack of upper body restraint and non-conformal helmets.
    Then we bang them around a bit in what can be best described as a rolling garbage compressor full of sharp and heavy things, in helmets not designed to protect against this kind of force and without proper seat belts.
    3. Separation of the crew from the crew module and the seat with associated forces, material interactions, and thermal consequences.
    Then we break the box apart, exposing the crew to an unprotected reentry into atmosphere
    4. Exposure to near vacuum, aerodynamic accelerations, and cold temperatures.
    Finally we let them free-fall back to earth...

    The Columbia Crew Survival Investigation Report is a 400 page long and very dark document, but the executive summary is just a couple pages. You can find it here:
    http://history.nasa.gov/columb... The bodies of the astronauts were mangled beyond recognition, which is hinted in the report, but out of respect of the astronauts details of the injuries are redacted from the report.

  12. shift inter-locks by Anonymous Coward · · Score: 3, Insightful

    Normally, the feather system wouldn't be unlocked until the rocket-powered spaceship is moving about Mach 1.4, or 1.4 times faster than the speed of sound.
    Instead, the co-pilot moved the lever from locked to unlock when the spaceship was traveling at about Mach 1, Hart said.

    Modern cars have a feature where you can't take the key out of the ignition if you forget to put the thing in park. This feature saves me from stupid about twice a year. Humans are error-prone - there's a whole field, poka yoke [wikipedia.org] dedicated to preventing these sorts of errors.

    Test pilots are the best of the best. If one of them can make a catastrophic mistake then so can any commercial pilot.

    Now, they may have figured that that sort of safety gear was "for later" and test craft are often bare-bones, and test pilots are often relied on to not make those kinds of mistakes. Assuming the premise here, we might see more automation early in the design process going forward. Virgin might be able to survive a year-long investigation but that kind of delay is an ongoing liability. It may turn out to be faster and cheaper in the long run to add in those costs up front, if delays are calculated into the cost.

    In test aircraft, you start with highly trained pilots and allow them to do what they need to do with the controls, since you don't know when an unusual use of the controls might save the crew or the ship. In later iterations, you build automation to model what the pilots did successfully.

    Even in light airplanes, with only a few seats, it is frequently possible to set the controls in a way that will damage the engine or airplane, with no interlocks. It's why learning to fly takes time and has some expense. It's also why there are additional ratings for more complicated airplanes. On most business jets that are 20 years old or more, you can damage the engines by starting them incorrectly. You can certainly set the engines to a fuel burn that will overheat the engines during flight, the pilots can choose 115 to 120% of normal power for a few minutes during takeoff (safely, and routinely) but cannot use that for cruising flight.

    Also, automation works well when all variables are known and controlled. In this case, the ship is not meant to feather while the engine is running, and also not while the ship is in the thicker atmosphere. It's supposed to only feather when the ship is in the higher, thinner air and the engine is shut down. At that higher altitude, Mach 1.4 could be under 200 miles per hour of indicated airspeed. Mach changes with altitude, which is why it's used instead of indicated airspeed. Reentering from the edge of the atmosphere would likely be a bit complicated for automation, but can be taught to a test pilot in a few days in the simulator.

    As much as we may not like to admit it, the human brain has a much more advanced sensor pack and faster processing power than dedicated computers, plus the ability to handle edge cases very well.

    I'd point out that if they had some kind of automated interlock, and that system prevented feathering (incorrectly) when feathering was needed, that would also cause loss of the vehicle due to letting it get too fast upon reentry.

  13. Re:Way to jump the gun (or do I mean shark?) by wonkey_monkey · · Score: 2

    I guess I should always trust my physics and chemistry classes over reporters.

    Frankly it's a wonder you've stayed sane this long if you've only just realised this.

    That's assuming you have stayed sane, of course.

    --
    systemd is Roko's Basilisk.
  14. Unlocking the feathers during powered flight by _bug_ · · Score: 5, Interesting

    Why unlock the feathers during powered flight?

    Because if you get into space and find you can't unlock them, the aircraft is going to burn up on reentry. So you unlock them during powered flight. If they don't unlock, you can shut down the engines and still have enough atmosphere to control the aircraft and direct it out of its trajectory into space.

    Why do this during powered flight and not before, perhaps just before the aircraft is released from its carrier?

    Because the aerodynamics and stress on the aircraft at engine start are dynamic to say the least. Once under stable, powered flight there's much less risk in unlocking the feathers. The aerodynamic loads should not be high enough that they would overcome the hydraulics keeping the feathers in place after being unlocked.

    The big question right now is why did the feathers deploy. The NTSB says they saw nothing to indicate the pilots had tried to deploy them; the handle used to do this was untouched based on the internal cockpit video they have.

    It's way too early to even speculate that it even might be pilot error. That the unlock happened a couple seconds early should not have caused the feathers to deploy on their own. Unless the transition to supersonic speed induces stresses that could overcome the hydraulics and force the feathers to deploy and the unlock happened just before or during that transition.

    We need to find out why the feathers deployed before we start blaming anyone or anything.

  15. Re:Then how did the pilot die? by Anonymous Coward · · Score: 4, Insightful

    If Orrin Hatch had not used his power to keep the shuttle booster manufacturing in Utah then the crew of Columbia would be alive today.

    Since Utah is nowhere near where the shuttle is launched they had to be made in pieces so they could be shipped across the country. A less safe design. The original design called for the boosters to be made completely in one piece. O ring seals can't fail when there aren't any O rings to begin with.

    The crew of Columbia died because of pork barrel politics.

  16. Re:Then how did the pilot die? by jeremyp · · Score: 3, Insightful

    Ha! Rather than merely point out that you have confused the names "Columbia" and "Challenger" everybody has decided you needed a new arsehole tearing.

    --
    All I want is a secure system where it's easy to do anything I want. Is that too much to ask ~~ Randall Munroe
  17. Re:Way to jump the gun (or do I mean shark?) by CrimsonAvenger · · Score: 2

    I am terrified by the fact that new services almost always get really stupid things wrong like Newsweek saying that Earhart ran out of jet fuel!

    I managed to miss that one.

    So now you have to make me aware of a new realm of stupidity in media. Gee, thanks....

    --

    "I do not agree with what you say, but I will defend to the death your right to say it"
  18. Best case scenario of a bad situation by TheSync · · Score: 2

    This is a horrible event, but for the future of Virgin Galactic it is one of the better scenarios for the failure not to be in the rocket engine itself (which is always a challenging situation, putting the strength of materials at the edge of breaking), but instead on a faulty deployment of the feathering system. Hopefully it should be simply to work out a solution to avoid pre-mature feathering.

  19. Feather deployed when it wasn't supposed to by Spy+Handler · · Score: 4, Interesting

    I'll bet the cause will be something really simple and stupid and mundane, like a technician installing a bolt or a relay upside down.

    I read in Bob Hoover's book, in the 50's a number of F-86's crashed when their ailerons locked up if the wings flexed a certain amount. It was due to an aileron bolt mounted upside down. They traced the source to one technician at North American factory who, when interviewed said of course he knows how those damn bolts are supposed to go, he's been doing it that same way for 15 years, ever since before WW2!

    They didn't have the heart to tell that guy how many pilots he killed.

    Coincidentally in Chuck Yeager's book, he tells the story of a pilot in his F-86 squadron -- at the time Yeager was the squadron commander -- named Emmett Hatch. (Hatch was the lone black pilot in the squadron). He was coming down on approach one day, was feeling good so he did some rolls. Then his ailerons locked up, lost all control and had to eject.

    The wing commander was a man named Col. Ascani, a really meticulous numbers guy who was obsessed with keeping the accident numbers down. When the Col. heard about this accident he went ballistic and poor Emmett was going to have his azz court-martialed. So when the Col. asked Yeager, "Why the hell was Hatch doing a roll down so low?"

    Yeager replied, "All ours pilots do that, we do a roll on final approach to make sure we're not landing on top of somebody else." And so he saved Emmett's career.

  20. I think you mean the Challenger... by Akardam · · Score: 4, Informative

    Unless I'm missing something, the Columbia event had nothing to do with the SRBs

  21. Railway signalling by M0HCN · · Score: 4, Interesting

    There is an interesting counterpoint to this in victorian era railway signalling systems.

    Now the operator interface for these consisted of banks of levers that worked the signals and points by means of a system of wires running over pullys, visibility from the signalboxes was not always brilliant and especially in fog keeping track of what was where was problematic.
    In a fit of absolute genius it was realised that the (mechanical) logic could be implemented so as to prevent a signal being set at green if the segment was occupied and also to prevent the points in an occupied section being moved (this in an age before Turing, you will note). This was clearly a good thing, right?

    Well, the signal men protested that sometimes they had to do the unusual and that they were highly experienced professionals (all the usual) and the system was modified so that a special key could be used to override the interlock logic, this key being held by the supervisors office.
    So many train crashes over the following few years featured that key, that it ended up being UK practise that any collision between trains that caused a fatailty would automatically result in the signalman being arrested on suspicion of manslaughter.

    It is a fine line between stopping the professional applying an override to fix a critical situation and leaving them able to tear the wings off by accident.

    Regards, Dan.