Slashdot Mirror


Poor Pilot Training Blamed For Virgin Galactic Crash

astroengine writes: SpaceShipTwo co-pilot Michael Alsbury was not properly trained to realize the consequences of unlocking the vehicle's hinged tail section too soon, a mistake that led to his death and the destruction of the ship during a test flight in California last year. Responsibility for the accident falls to SpaceShipTwo manufacturer Scaled Composites, a Mojave, Calif., company owned by Northrop Grumman Corp, the National Transportation Safety Board (NTSB) determined at a webcast hearing on Tuesday (PDF). Poor oversight by the Federal Aviation Administration, which oversees commercial spaceflights in the United States, was also a factor in the accident, the NTSB said.

83 comments

  1. NTSB fines? penalties? by turkeydance · · Score: 1

    Chrysler got hit, now Northrop?

    1. Re:NTSB fines? penalties? by zamboni1138 · · Score: 5, Informative

      No laws were broken. There is no way to levy a fine. The NTSB is not in the business of fining individuals or organizations for violating rules or laws. That's the job of the FAA and other various agencies that oversee road vehicles, trains, and boats.

      The NTSB does their best to identify the probable cause(s) of the incident, what factors led up to that incident, and, most importantly, what measures to take to prevent any future incidents. It's up to agencies, like the FAA in this case, to implement suggestions from the NTSB.

      In this case, most of the blame appears to fall on the FAA.

    2. Re:NTSB fines? penalties? by Jane+Q.+Public · · Score: 2

      In this case, most of the blame appears to fall on the FAA.

      I would expect that it's classified as some sort of "Experimental" vehicle at this point, for which the usual rules do not apply. So I doubt the FAA has much to do with it either.

      Even so: given the known design of the craft, how could he possibly NOT know that unlocking the tail section prematurely was dangerous? I mean, seriously. "Oh, sure, let's just let it flap in the breeze at a few thousand miles per hour. No big deal."

      Sheesh.

    3. Re:NTSB fines? penalties? by sh00z · · Score: 2

      I would expect that it's classified as some sort of "Experimental" vehicle at this point, for which the usual rules do not apply. So I doubt the FAA has much to do with it either.

      No, TFS has it correct. It's classified as "Commercial Spaceflight," and the Federal Government deliberately moved jurisdiction from NASA to the FAA.

    4. Re:NTSB fines? penalties? by Jane+Q.+Public · · Score: 1

      No, TFS has it correct. It's classified as "Commercial Spaceflight," and the Federal Government deliberately moved jurisdiction from NASA to the FAA.

      It must have been relatively recent, then. Even so, I repeat that I doubt the "usual rules" apply here.

      Having said that, FAA would seem the logical organization, given that its mandate is about interstate commerce.

  2. If there was a criteria for safe unlocking by thegarbz · · Score: 4, Insightful

    If there was a criteria for safe unlocking of the hinged tail section then why wasn't it interlocked until the criteria was satisfied?

    A bigger error here is reliance on operator training. It's the least reliable form of ensuring a certain outcome.

    1. Re:If there was a criteria for safe unlocking by hawguy · · Score: 1

      If there was a criteria for safe unlocking of the hinged tail section then why wasn't it interlocked until the criteria was satisfied?

      A bigger error here is reliance on operator training. It's the least reliable form of ensuring a certain outcome.

      From TFA:

      Those ships will include an extra mechanical device to prevent pilots from inadvertently unlocking the tail sections, known as “the feather” early, Virgin Galactic wrote in a report obtained by Discovery News.

    2. Re:If there was a criteria for safe unlocking by sysrammer · · Score: 1

      It almost sounds like no-one was in the know that doing it too early would break it.

      --
      His ignorance covered the whole earth like a blanket, and there was hardly a hole in it anywhere. - Mark Twain
    3. Re:If there was a criteria for safe unlocking by decep · · Score: 2

      Because in rocket ships and other experimental craft, as much control as possible should be deferred to the human pilot. Even to the possible detriment of the pilot.

      If the pilot needs to purposefully destroy the craft to prevent greater harm or damage, even if it kills him, you do not want the equipment to respond with "I'm sorry, Dave. I can't let you do that."

    4. Re:If there was a criteria for safe unlocking by Dutch+Gun · · Score: 4, Insightful

      I can't imagine the engineers who designed this wouldn't be aware of those consequences. In fact, I'd go so far as to call this a partial failure of the engineering department as well - specifically, the ones who created the cockpit controls. I mean, the spacecraft basically had a single lever in the cockpit which if pulled at the wrong time would result in the fiery destruction of the spacecraft and death to all aboard. That's a hell of a consequence for a single mistake in the cockpit.

      Granted, clarity in hindsight and all that, but it just seems surprising to me that this possibility wasn't given more thought, given that this was a major feature of the spacecraft. You can imagine they're probably taking a second look at other systems and trying to figure out what the potential outcomes of human error might be and ways to mitigate those errors. At least, I hope they're doing that.

      --
      Irony: Agile development has too much intertia to be abandoned now.
    5. Re:If there was a criteria for safe unlocking by Mr+D+from+63 · · Score: 1

      It sure seems like they would at least have had a Ready indicator for unlocking. You want the pilot making as few decisions as possible, particularly during those critical moments of the flight.

    6. Re:If there was a criteria for safe unlocking by rmdingler · · Score: 2
      The cold, hard reality of many a tragedy is that outcomes not foreseen by developers wind up relevant, and thus, engineered out of the realm of probability.

      I can guaranfuckingtee you the engineers considered this event. Their take at the time? " Nobody is going to pull the feather actuator prematurely!"

      --
      Happiness in intelligent people is the rarest thing I know.

      Ernest Hemingway

    7. Re:If there was a criteria for safe unlocking by DerekLyons · · Score: 2

      If there was a criteria for safe unlocking of the hinged tail section then why wasn't it interlocked until the criteria was satisfied?

      There are problems with interlocks that aren't often appreciated by the armchair engineer. They add weight and complexity to a system. They themselves can fail. They add to the maintenance burden. They add to training, Etc... etc... TANSTAAFL.
       

      A bigger error here is reliance on operator training. It's the least reliable form of ensuring a certain outcome.

      Yet, for being the least reliable, it's a method that works very well - presuming the operator is properly trained.

    8. Re:If there was a criteria for safe unlocking by Ol+Olsoc · · Score: 3, Insightful

      If there was a criteria for safe unlocking of the hinged tail section then why wasn't it interlocked until the criteria was satisfied?

      A bigger error here is reliance on operator training. It's the least reliable form of ensuring a certain outcome.

      From TFA:

      Those ships will include an extra mechanical device to prevent pilots from inadvertently unlocking the tail sections, known as “the feather” early, Virgin Galactic wrote in a report obtained by Discovery News.

      Which by the way, might be able to fail itself, and keep the pilot from unlocking the tail section when it needs to be unlocked. Killing the pilot and co-pilot.Hellova world, eh?

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    9. Re:If there was a criteria for safe unlocking by thegarbz · · Score: 1

      They add weight and complexity to a system. They themselves can fail. They add to the maintenance burden. They add to training, Etc... etc... TANSTAAFL.

      They add weight if they aren't free (i.e. electrical systems). They themselves fail typically when some other system fails too (the logic solver is the most reliable component of any system). They add to the maintenance burden (depending on how they are implemented, mechanical yes, electrical barely if any). They add to training .... Training people on the function of automated systems and the meaning of lights is much easier than training people on having to make the decision themselves. I do agree about the free lunch comment, but this sandwich very likely isn't as expensive as you think, unless the plane is truly purely mechanical (unlikely).

      Yet, for being the least reliable, it's a method that works very well - presuming the operator is properly trained.

      No it doesn't. Not even in the slightest. The single most reliable thing any industry has done is reduce reliance on the most fallible component. We create interlocks because operators are fallible, we install safety systems because primary control systems are fallible. When engineering protection systems any system that requires operator action can according to the standards at best be claimed to work 90% of the time, a well engineered safety system can achieve 4 orders of magnitude better reliability. But all of that is neither here nor there as fundamentally disasters are prevented by layers of protection. You add layers without common causes of failures to improve safety. Improving training is an expensive way to get an almost non-existent increase in safety.

    10. Re:If there was a criteria for safe unlocking by metlin · · Score: 2

      As a pilot, I cannot agree more. Some of the cockpit controls out there are downright obnoxious, especially for rotary wing.

      I have a friend who is a Harrier jet pilot, and I have heard some horror stories on landing those on aircraft carriers.

      Usually, we are told what *not* to do, and so unless explicitly forbidden (e.g., do not do X before this time), we will assume it will be alright. This is clearly an engineering and a documentation/training failure.

      It's easy to blame the pilot, but if anything, he's a tragic victim of poor design.

    11. Re:If there was a criteria for safe unlocking by DerekLyons · · Score: 1

      this sandwich very likely isn't as expensive as you think

      Only because, like most armchair engineers, you've breezily handwaved away issues you have quite cleary no clue about.
       

      Yet, for being the least reliable, it's a method that works very well - presuming the operator is properly trained.

      No it doesn't. Not even in the slightest.

      Millions (billions?) of man hours of operation of aircraft, spacecraft, submarines, etc... etc.. says just the opposite. Again, you have no fucking clue what you're talking about.

    12. Re:If there was a criteria for safe unlocking by Dutch+Gun · · Score: 1

      Which by the way, might be able to fail itself, and keep the pilot from unlocking the tail section when it needs to be unlocked. Killing the pilot and co-pilot.Hellova world, eh?

      True, but engineering is oftentimes about weighing risks against each other. The risk of pilot error in this case has been demonstrated to be a real threat. The mechanical interlock can also be designed with overriding backup systems that can be activated by the pilot in case it fails for some reason. It's far better to have the pilot use a dedicated toggle in case of a rare emergency than have to remember to flip a switch at the correct time on each flight or risk the destruction of the spacecraft.

      --
      Irony: Agile development has too much intertia to be abandoned now.
    13. Re:If there was a criteria for safe unlocking by Anonymous Coward · · Score: 0

      I over ride most of the safeties on my equipment because they're fricken stupid. I can understand having a special switch that can't be accidentally pressed...but if I press the damn switch I want it to work!!!

      Even if that means I die.

      Can't even put your ridding lawnmower in reverse while mowing or get off the seat slightly without the damn thing powering down.

    14. Re:If there was a criteria for safe unlocking by Anonymous Coward · · Score: 0

      It may be that this particular control function could have been better designed, but cockpits are full of levers that, if pulled at the wrong time, would be disastrous.

    15. Re:If there was a criteria for safe unlocking by Anonymous Coward · · Score: 0

      Those systems are put there in in response to cases where people were severely injured or killed. No one would spend time and money designing safety systems if there had been no accidents.

    16. Re:If there was a criteria for safe unlocking by Anonymous Coward · · Score: 0

      Yet, for being the least reliable, it's a method that works very well - presuming the operator is properly trained.

      No it doesn't. Not even in the slightest. The single most reliable thing any industry has done is reduce reliance on the most fallible component.

      Perhaps you should take a look at this book: The Glass Cage, by Nicholas Carr. The main idea: not all automation is beneficial, especially if it makes the operator less knowledgeable about his job. This is backed by a lot of data from a wide range of industries (medical, law, aviation [Air France flight 447 out of Rio], etc.).

      Improving training is an expensive way to get an almost non-existent increase in safety.

      Do you honestly believe this? Do you think a person who has never driven a car is almost good at driving a car as someone who has been driving it for years (thus, properly trained)?

    17. Re:If there was a criteria for safe unlocking by Anonymous Coward · · Score: 1

      Fun fact: The unlock is done fairly early (Mach 1.4) because if it doesn't work, they have to abort the ascent, dump rest of the oxidizer and land. Full burn to apogee without unlockable feather will kill everyone on re-entry (vehicle breakup).

      The design kinda hinges (pun intended) for the feather to work right every time. There is no backup.

    18. Re:If there was a criteria for safe unlocking by thegarbz · · Score: 2

      Nice try mate, but as a protection systems engineer I have more clue than most, especially about the cost and reliability of various factors. The airline industry is a model upon which many other industries are shaping their systems, precisely due to the careful control taken away from pilots.

      Specifically you may want to look up the accident statistics and the current trend in which it is moving. Most notable was the introduction of better control systems for airplanes in the 70s which has led to a steady decline in the number of aircraft accidents. None the less there are still 5-10 fatal accidents per year and many 100s of near misses (My favourite from last year was the pilot who overshot the airport because he was playing on an iPad)

      While you're looking up the statistics check out the cause of failure. Pilot error accounts for more than double the number of the sum total of all other failures. Even when you take out weather and adverse conditions, unforced pilot errors are still larger than all other factors put together.

      But why stop there. Why not read about classic disasters in history, in the oil industry, construction industry, or general transport industry. Read up a bit about psychology and then readup the standards on harzard and operability studies. The best thing about the internet age is that you don't need to take my word for it anymore.

      Fortunately I get paid a lot of money to have a clue because people like you think "training" can solve a problem. In my line of work there's no such thing as operator error. There's only the errors in the system and organisation that allowed the operator to have an accident in the first place.

    19. Re:If there was a criteria for safe unlocking by KGIII · · Score: 1

      Spoken like someone who has never made stuff for users. If you put a big read button on it and it has a label that says, "Do not push!" The first thing I am going to do, after you leave the room, is push that. Imma pushing it hard too. General Principle (and his army of ants) has told me to do so, I am not one to disobey orders lawfully given.

      --
      "So long and thanks for all the fish."
    20. Re:If there was a criteria for safe unlocking by KGIII · · Score: 1

      Too soon! No, not really. He seems to have gotten the lyrics wrong though, he should have stuck with the original. "Rocky Mountain high..." He went with the opposite as I recall.

      --
      "So long and thanks for all the fish."
    21. Re:If there was a criteria for safe unlocking by KGIII · · Score: 1

      Your Darwin Award gleefully awaits your coming to receive it. I hope you do the right thing and hold it up in the air proudly as winner. Assuming such is possible in the after life, of course.

      --
      "So long and thanks for all the fish."
    22. Re:If there was a criteria for safe unlocking by Ol+Olsoc · · Score: 1

      Which by the way, might be able to fail itself, and keep the pilot from unlocking the tail section when it needs to be unlocked. Killing the pilot and co-pilot.Hellova world, eh?

      True, but engineering is oftentimes about weighing risks against each other. The risk of pilot error in this case has been demonstrated to be a real threat.

      I'm in total agreement there. My point - if there is much of one - is that hindsight is 20/20. Some times we talk about these things as if there was some major negligence by someone - It's thte old "Something happened, so someone has to go to jail" outlook. There will be more problems, and more fixes.

      In the end though, if we make the thing the mythical "safe enough", it might be too heavy to fly.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    23. Re:If there was a criteria for safe unlocking by Anonymous Coward · · Score: 0

      I hate to use a car analogy here, but, the steering wheel in your car, pulled at the wrong time, results in the fiery destruction of the vehicle and death to all aboard, too.

    24. Re:If there was a criteria for safe unlocking by Viceroy · · Score: 1

      but this sandwich very likely isn't as expensive as you think, unless the plane is truly purely mechanical (unlikely).

      As a former Scaled engineer, I can tell you, the plane is almost purely mechanical. SS1 was completely mechanical, except for an electric trim mechanism for the horizontal stabilizer. SS2 was identical, except the horizontal stabilizer was boosted by a self-contained electromechanical system that took a long time to design with failure modes that were controllable. That means pushrods and cables/pulleys to the control surfaces, large springs for gear extension, and mechanical actuators for the feather and feather locks. Aside from the avionics, one of the few electrical flight controls was the switch to arm and ignite the rocket.

    25. Re:If there was a criteria for safe unlocking by thegarbz · · Score: 1

      I can't imagine the engineers who designed this wouldn't be aware of those consequences.

      My line of work deals with exactly this kind of thing. Engineers are in many cases obligated ethically or via business requirements to find the most inherently safe design that fits the design criteria, but one thing we (engineers) fail at most spectacularly is taking into account human factors, especially operator actions.

      It has been seen in some spectacularly bad decisions over the years. The introduction of control systems removed costs of adding alarms so they put alarms on everything overwhelming the operator and in turn making them meaningless. The upgrading of control systems has allowed people to cram as much information on screens as they see fit, and rather than putting "information" on they put on 3D graphics, context less numbers, and hard to read bargraphs. (I should mention the airline industry is the model of perfection for operator interfaces that many other industries are following as they resolved these issues years ago).

      We engineers know a lot about the things we design, we know how to break it. Unfortunately we also go out of our way to write bad interfaces and give the operator sufficient rope to hang himself. Nearly all jobs in safety systems and interlocking across various industries right now is in retrofitting processes, and in nearly all of these cases the hazards have always been well known and well understood.

    26. Re:If there was a criteria for safe unlocking by sysrammer · · Score: 1

      ... " Nobody is going to pull the feather actuator prematurely!"

      And I imagine if they *called* it the "feather actuator", perhaps nobody would have done it. From the story, every reference to the switch is as a feather unlock. To me, unlock doesn't mean actuate.

      I'd be curious as to what the official nomenclature for the switch is.

      --
      His ignorance covered the whole earth like a blanket, and there was hardly a hole in it anywhere. - Mark Twain
    27. Re:If there was a criteria for safe unlocking by rmdingler · · Score: 1
      Unlocker... actuator...

      Let's say we agree the "official" name has probably been replaced by something way more crafty in light 0f the incident.

      The Feather actuation procedure (FAP), or fapping, per conversacronyming.

      --
      Happiness in intelligent people is the rarest thing I know.

      Ernest Hemingway

  3. He didn't think to ask? by Anonymous Coward · · Score: 1

    I'm no expert on pilot training... far from it.

    But if I were learning to fly a spaceship, the first question out of my mouth would be "what all could kill me?"

    1. Re: He didn't think to ask? by Anonymous Coward · · Score: 0

      Every. Goddamned. Thing.

      This is rocket science.

    2. Re:He didn't think to ask? by PPH · · Score: 1

      This switch will kill you ... sometimes. Other times it is essential to save your life.

      --
      Have gnu, will travel.
  4. Maybe he thought that "Unlock" would only unlock by perlwannabe · · Score: 3, Interesting

    From the report:
    The unlocking of the feather during the transonic region resulted in uncommanded feather operation because the external aerodynamic loads on the feather flap
    assembly were greater than the capability of the feather actuators to hold the assembly in the unfeathered position with the locks disengaged.

    So maybe the copilot thought that he was preparing for the future feathering operation by unlocking it, and he did not think he was initiating the feathering. Usually an "unlock" switch is only a permissive, and it does not initiate the actual operation.

  5. A "safety feature" by Dutch+Gun · · Score: 2

    It's interesting as the unique tail section was actually touted as a "safety feature" by the company. I'm not necessarily saying it can't be the case, but like any feature, even a safety feature (see: exploding airbags), defects or improper use can cause more harm than in it's absence.

    The moveable booms are intended to provide a fail-safe mechanism for positioning SpaceShipTwo during the fiery re-entry into the atmosphere. Scaled pilots were well aware of what could happen if they unlocked the feather too late, but training about its early release were ignored, accident investigations found.

    It's a bit strange, as it seems like such a fundamental error - not some obscure feature that could be overlooked. What pilot would say to himself "Hey, I know I'm supposed to unlock the tail at time X, but what the hell, why not just do it now?" It seems really strange that they wouldn't have precise procedures for this, since it's such a critical part of the entire design.

    It's a hard way to learn a lesson like this.

    --
    Irony: Agile development has too much intertia to be abandoned now.
    1. Re:A "safety feature" by SimonInOz · · Score: 1

      >> It's a hard way to learn a lesson like this.

      I don't think he learned the lesson.

      But we did.

      --
      "Cats like plain crisps"
    2. Re: A "safety feature" by Anonymous Coward · · Score: 1

      It's no mere coincidence that the attitude change and breakup occurred at Mach 1.0 during deceleration.

      The feathering mechanism operated in much the same way flaps do on a conventional aircraft. Flaps create additional drag and serve to change the angle of attack (to increase forward visibility) during descent. The feather was supposed to stabilize SpaceshipTwo's attitude in much the same fashion.

      Flaps cannot safely be deployed above a defined velocity, and this speed is specifically called out in every aircraft operation manual. The locking mechanism would have been designed to ensure there was no chance of deployment, especially during supersonic flight when airflow and turbulents are markedly different than during subsonic flight.

      If the operations manuals failed to include specific definition of safe procedures, this would account for NTSV's determination of the failure on the part of Scaled and FAA as it relates to both training and certification.

    3. Re:A "safety feature" by Rinikusu · · Score: 1

      Agile development. Deploy early, fail quickly.

      --
      If you were me, you'd be good lookin'. - six string samurai
    4. Re:A "safety feature" by DerekLyons · · Score: 1

      It's interesting as the unique tail section was actually touted as a "safety feature" by the company. I'm not necessarily saying it can't be the case, but like any feature, even a safety feature (see: exploding airbags), defects or improper use can cause more harm than in it's absence.

      An improperly implemented safety feature (emergency ballast blow system) contributed to the loss of USS Thresher... In the same way, the Apollo 1 crew died (in part) because of a system (a well locked down hatch) that had been installed to prevent a repeat of an earlier accident. (Which, by morbid coincidence, one of the crew had been involved in.)
       

      It's a bit strange, as it seems like such a fundamental error - not some obscure feature that could be overlooked. What pilot would say to himself "Hey, I know I'm supposed to unlock the tail at time X, but what the hell, why not just do it now?" It seems really strange that they wouldn't have precise procedures for this, since it's such a critical part of the entire design.

      It's not so much that, as the pilot appears to have become confused due to a) the simulator not properly conditioning them, b) lack of recent and overall experience with the vehicle, and c) high cockpit workload at that point in the flight compounding a) and b). At least that's how I read the report. (The abstract and summary of which is not clearly linked of the summary or TFA but which can be found here.)

      From my experience in the Navy, I can say that obtaining those reflexes isn't easy, and neither is maintaining them (regardless of experience).

    5. Re:A "safety feature" by Dutch+Gun · · Score: 1

      Thanks for the link. The report's gist seemed to be "Everyone should have realized that you shouldn't rely on the pilot to not flip a switch at the wrong time, the results of which will cause the spaceship to be destroyed", and then describing in detail the procedures that should have been in place to catch those sorts of issues, along with recommendations for future procedures to prevent this from happening.

      As you said, it's a bit morbid, but this is generally how we learn how to make things better and safer on the bleeding edge of technology and engineering. After a serious accident, we examine the causes and look for ways we can do things better and more safely, at least in the ideal case.

      --
      Irony: Agile development has too much intertia to be abandoned now.
    6. Re:A "safety feature" by Viceroy · · Score: 1

      They do have precise procedures about this. Its called the flight test card. The test pilot flies the procedures exactly as they are written on the card. They do nothing else unless some other anomaly during the flight requires them to fall back to basic flight training and just fly the airplane. They brief to that card before the test flight. The practice and train to that card on the simulator. If you know that the cockpit environment is going to be busy, you train your muscle memory to follow that card even if you can't look at it to check off each step.

      We've all had things we've done a hundred times in a row, and for no particular reason, that one time, we forgot a step. Mike's muscle memory may have failed him this time and he ended up doing a procedure on the card out of order.

  6. Experienced test pilot? by godel_56 · · Score: 1

    You're an experienced test pilot of a rocket powered ship and you have to be specifically trained to anticipate the effects of slamming on the brakes while traveling at supersonic speed?

    I suspect he knew full well the likely outcome but just had a brain fade. Probably what was missing was some kind of hardware interlock so that this couldn't have happened, or else it required both pilots acting at once to enable it.

    1. Re:Experienced test pilot? by 0123456 · · Score: 4, Informative

      You're an experienced test pilot of a rocket powered ship and you have to be specifically trained to anticipate the effects of slamming on the brakes while traveling at supersonic speed?

      As touched on in a comment above, he didn't deploy them, he unlocked them. As I understand it, he unlocked them too early, so the deployment mechanism was unable to prevent them from deploying under the stress of supersonic flight at relatively low altitude.

      You want to unlock them early, because, if you can't unlock them, you can still cut the engine and glide back. You don't want to unlock them too early, because this happens.

    2. Re:Experienced test pilot? by Mass+Overkiller · · Score: 1

      This. It makes sense to unlock the feathers early for the reason you stated. It was probably not thought about in the cockpit at the time, that unlocking them NOW would cause them to deploy NOW. All aircraft have some engineering compromises and this apparently was one of them. Unfortunate as it is, now we know.

  7. What will kill me next? by sjbe · · Score: 1

    But if I were learning to fly a spaceship, the first question out of my mouth would be "what all could kill me?"

    Almost everything. The question I hear astronauts apparently ask is "what is going to kill me next?" It seems to be about 90%+ of their training. Trying to figure out all the ways they can die and how to mitigate the chances of it actually happening.

    1. Re:What will kill me next? by Whiternoise · · Score: 4, Informative

      That's pretty standard for all aviation training. Flying is easy, much easier than driving in a lot of ways. Not killing yourself is a lot harder. That's why pilots have reams and reams of checklists covering pretty much every conceivable problem that can happen. Similarly when training in a simulator, the operators can pretty much throw the book at you to see how you react to losing all your instruments and a wing while flying through a thunderstorm.

      NASA's generic rulebook is over 2000 pages long and is well worth a flick through if you're a space geek http://www.jsc.nasa.gov/news/c...

  8. Re:Maybe he thought that "Unlock" would only unloc by sysrammer · · Score: 1

    Perhaps that's one reason other spacecraft use names that are very specific. I always wondered why they would, say, command the pilot to "disengage the IVVIM (Intra-Vehicular Visual Illumination Mode)" instead of telling them to "turn the light out". If the unlock switch had some god-awful name describing exactly what it did, then maybe the pilot wouldn't have thought "let's unlock this now so we'll be ready".

    --
    His ignorance covered the whole earth like a blanket, and there was hardly a hole in it anywhere. - Mark Twain
  9. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  10. Re:Maybe he thought that "Unlock" would only unloc by Mr+D+from+63 · · Score: 1

    If the unlock switch had some god-awful name describing exactly what it did, then maybe the pilot wouldn't have thought "let's unlock this now so we'll be ready".

    You mean like "self destruct button"?

  11. Re:Maybe he thought that "Unlock" would only unloc by JustAnotherOldGuy · · Score: 2

    It appears that unlocking it just allowed dynamic forces outside the craft to move the feather without being commanded to. The external forces simply overcame the mechanical system that was holding it retracted. A transonic slipstream exerts a hell of a force.

    In my view this is a dual failure- a failure by the pilot who (apparently) wasn't trained on when not to unlock the system, and an engineering failure as well- it seems a common-sense thing to lockout potentially (or positively) fatal mis-operations. I'm sure that one or more existing sensors could have been used to prevent unlocking the feather if current conditions could/would cause a catastrophe.

    And yes, I'm playing Monday-morning quarterback, and yes, I have the benefit of hindsight, but still- foreseeing the "what could go wrong" possibilities is what good engineering is all about.

    --
    Just cruising through this digital world at 33 1/3 rpm...
  12. Re:Maybe he thought that "Unlock" would only unloc by Anonymous Coward · · Score: 4, Insightful

    It appears that deploying the feather was a multi-step operation. The flap covering the feather is unlocked, then the flap is opened, then the feather is deployed. The pilot probably knew that the feather could not be deployed at the speed they were going, but did not know/understand that the flap could not stay closed if unlocked at the speed they were going. Thus, the pilot unlocked the flap, and from there, whatever other latch that made step 2 work broke, the flap opened and the feather deployed on its own.

    If the unlock switch had some god-awful name describing exactly what it did

    Maybe the button will be renamed "Remove Restraints Holding Feather Flap Closed During Transonic Region".

  13. Re:Maybe he thought that "Unlock" would only unloc by Tracy+Reed · · Score: 1

    Nobody likes to "get behind the airplane". I execute checklists as soon as practical and get things set up for the next phase of flight as soon as possible so we're ready. Exceptions being things in the class of the feather on the ship in question: Flaps, landing gear, mostly airspeed and aerodynamics dependent items.

    - A commercial pilot

  14. heheh by Anonymous Coward · · Score: 0

    The old sell them on the trade bit......
    The collegiate whim worders vs the barnstormers
    And the propeller in the mansion has just been installed.

  15. Always the same thing, ALWAYS by Saffaya · · Score: 0

    If the pilot is dead in the airplane crash, then it is the fault of the pilot.
    ALWAYS.
    You know, the guy who can't defend himself anymore. Put everything on him.
    It's not the maker's fault, the designer's fault, the maintenance's fault, the ergonomics' fault, the company's fault, nothing of these.
    Always the pilot's.
    This is sickening.

    1. Re:Always the same thing, ALWAYS by KGIII · · Score: 1

      Except this is, you know, "poor pilot training" (as well as other things listed). Perhaps you misunderstood (or I do)? Poor pilot training is, you know, not the pilot's fault but the fault of the trainer and not the trainee. It is as if I teach you how to solder components into a PCB and you follow my instructions and still do it wrong then it is not your fault but my own fault for having improperly trained you.

      Your rant is nice, I will give credit where it is due, but does not have much to do with reality. Especially where the NTSB is concerned. The NTSB tries hard to not "blame" anyone. Instead they do not worry about blame at all and have a whole culture designed around this. What they look for is what went wrong and make recommendations as to how to avoid it in the future. They are actually very good at not blaming anyone but you probably get your information from news blurbs.

      --
      "So long and thanks for all the fish."
    2. Re:Always the same thing, ALWAYS by sysrammer · · Score: 1

      Good answer. Here's a fish.

      --
      His ignorance covered the whole earth like a blanket, and there was hardly a hole in it anywhere. - Mark Twain
  16. I don't believe it. by cyn1c77 · · Score: 0

    I think this is a case of "Blame the dead guy, because he can't defend himself."

    I cannot believe that an experienced test pilot, in his right mind, would not have thought through the possible consequences of actuating that lever at a higher speed than it was designed for. I simply cannot believe it. Especially given than history is littered with examples of airplanes not being able to pull out of dives due to control surfaces not responding properly (or ripping off) in supersonic or transonic flow. Alsbury would have been intensely aware of these concepts.

    I think that it is more likely that that, if he actually did pull the lever, Alsbury was disoriented or mentally compromised due to some other factor.

    1. Re:I don't believe it. by Spy+Handler · · Score: 1

      Especially given than history is littered with examples of airplanes not being able to pull out of dives due to control surfaces not responding properly (or ripping off) in supersonic or transonic flow. Alsbury would have been intensely aware of these concepts.

      Well it's not exactly like deploying flaps at high speed and having them rip off the plane and damaging stuff. He didn't deploy anything, he only unlocked it. He thought the motors would hold the feather in place and nobody at Virgin or Scaled drilled into his head that prematurely unlocking feather = DEATH. Quite possibly because they also didn't think the feather would move by itself just from air pressure and vibration. We know it NOW, but before?

      Unlocking the feather while going up was part of the procedure. He did it too soon but was not adequately informed of the disastrous consequences of mistiming the unlock. So yeah, I do agree they're blaming the dead guy too much.

      Also, Alsbury was an experienced pilot but not exactly a Chuck Yeager. As to whether pilots would think through all the possible consequences of every action in a cockpit jam packed with switches and levers and knobs, under a heavy workload, well it's easy to say while we're sitting in a desk but reality is not that sterile.

      Keep in mind the SS1 was a scary ride and I assume SS2 is no cupcake either. When that rocket lights, it kicks your ass not just with monster acceleration but also crazy vibration and deafening noise. It scared Brian Binnie shitless and he was used to flying F-18s off carriers. Even Mike Melville who is about as cool a customer as they come (and an excellent, excellent pilot btw) was quite impressed shall we say. A good pilot would get used to it pretty quick I'm sure, after doing it a couple times. The first time? It would mentally compromise most anyone including experienced pilots and you'd have to have superhuman levels of the Right Stuff to function at 100% the first time you're on that crazy rocket ride.

    2. Re:I don't believe it. by KGIII · · Score: 1

      Wow... Two in a row?!?

      Nobody, except you and the last guy, are blaming the pilot. Well, you two are specifically not blaming the pilot. If you read then you should be able to pick this up. They are blaming poor pilot training. That is not the pilots fault and nobody is saying that it is. Perhaps, in your zeal to seek a reason to be displeased, you failed to either read the article (or summary) or failed to comprehend it? The pilot did what they did because they were improperly trained. That is hardly the fault of the pilot and nobody is saying that it is their fault. NTSB works really damned hard to help in these situations and they work really damned hard at not assigning blame so much as they work to make things better in the future.

      My only suggestion, if you wish to understand, is to stop taking regular media at face value and to actually spend some time learning about the NTSB and actually checking into their reports when they come out. They usually have an abstract which is easy enough for me to understand and I am purely a layman. The NTSB is not about blame, they are about preventing future disasters. They are one of the few US government agencies that actually still has value. They are so good that they are called in to help on things that they have absolutely no remand to do so. They help other countries with craft that have never even landed in our country or even flown over our territories. There is a reason for this - they are that good. They are like the Navy - so good that they are a leading model across the globe and highly sought after because of this.

      --
      "So long and thanks for all the fish."
    3. Re:I don't believe it. by ryllharu · · Score: 1

      Just want to highlight the quick mention you made of the Navy. The US Navy's safety programs are mature and thorough enough that NASA has several meeting with Navy personnel about their SUBSAFE program after the Columbia disaster to improve the NASA programs. It says a lot about the Navy's SUBSAFE program that the best rating stops at merely "satisfactory."

    4. Re:I don't believe it. by KGIII · · Score: 1

      I spent a wee bit of time on a ship and guarded a detention facility for a while. I was in the Marines at the time (obviously) and was impressed. "They run a tight ship." They are, hands down, the model for a blue water navy and safety is paramount. Look at their firefighting as well. US Navy, taking shit seriously since the start. They also have a very strict culture about adhering to rules (and have good rules in place for a reason).

      --
      "So long and thanks for all the fish."
    5. Re:I don't believe it. by Viceroy · · Score: 1

      Like every test pilot at Scaled, Mike was a competent engineer in his own right, in addition to being a test pilot. I guarantee that everyone knew that if the loads were high enough the feather would move if it was unlocked, including the pilots. Like I said in another comment, I also guarantee that Mike flew the procedures on that test card plenty of times on the simulator and threw the feather unlock at the Mach 1.4 callout correctly every time. But in a high workload environment, no matter how much training you go through, sometimes the muscle memory that you're trying to train can fail you and you end up doing steps out of order.

      You can't design out *all* the failure modes. If you try to, you end up with computer flying the plane and you still end up with some failure modes you can't work around. You can argue that's why spacecraft shouldn't be human piloted, but in this case, there were pilots there for a reason. Developing all that software for the computers takes time and money to write and to design out those failure modes. Scaled is good at flying experimental planes, and good at training pilots to do so. They applied that experience to spacecraft pretty successfully over the course of 17 flights for SpaceShipOne and 54 flights for SpaceShipTwo and did so much more quickly and cheaper than it would have been done if it were all controlled by computers.

    6. Re:I don't believe it. by Anonymous Coward · · Score: 0

      Such expertise and cultural dedication did not take place in a vacuum. In 1967 the USS Forrestal had what Wikipedia calls a "devastating fire and series or chain-reaction explosions". This resulted in the complete overhaul of the Navy's fire fighting paradigm. Many good things came out of the investigation of this disaster. Amazingly one of the bad things that happened was the 20 year ossification of the Navy's fire fighting equipment list and training, which was made evident by the Iraq attack on the USS Stark in 1987.
      The first incident convinced the Navy that everyone had to be trained as a fire fighter. The second incident taught them that they must continually strive to take advantage the latest modern equipment and that their training must continue to evolve to changing circumstances.
      Having learned those two lessons the present Navy is at the top of their game in this area, and as stated a model followed by others.

  17. I call BS (pending the full report) by tipo159 · · Score: 3

    I have read the NTSB Executive Summary. As far as I have seen, the full report has not yet been made available.

    The claim made by the report is the accident was the result of human error because one of the pilots unlocked the feather prematurely and that the actuators that control movement of the feather were overcome by aerodynamic forces (while going through trans-sonic speeds) and the feather moved. Deploying the feather is a two-step process, unlocking, which one pilot can do, and commanding it to move, which require both pilots to take action.

    What I didn't see in the Executive Summary was whether Scaled Composites expected the actuators to be able to control movement of the feather while the vehicle was going trans-sonic.

    Just after the accident, there were statements attributed to Scaled that the actuators should have been able to hold the feather in position after it was unlocked. If the people working on and with the vehicle thought this, how could it be human error for the feather to be unlocked when it was?

    If it turns out that those earlier statements were incorrect and Scaled knew that it was a bad idea to, say, unlock while going through trans-sonic, then the Executive Summary should have indicated that. I just find it odd that it doesn't say anything about what Scaled had communicated to its pilots about the capabilities of the actuators for the feather once it was unlocked.

    1. Re:I call BS (pending the full report) by Anonymous Coward · · Score: 0

      From TFS: "Afterward, the aerodynamic and inertial loads imposed on the feather flap assembly were sufficient to overcome the feather actuators, which were not designed to hold the feather in the retracted position during the transonic region."

  18. Bullshit by Anonymous Coward · · Score: 0

    He was a highly experienced test pilot. A good test pilot knows to operate the craft as designed and, where not, you do things according to a plan. Test flight has NOTHING to do with taking exciting chances (this isn't Hollywood).

    He knew when to unlock this thing but chose to do it earlier. He knew the craft couldn't fly with the tail feathered, yet he chose to unlock this earlier. It should not have feathered, but any vaguely competent engineer knows you don't tempt fate like this. Anyone of the tens of thousands of Scaled Composites fanboys knew this - BEFORE the crash.

    No amount of training would have stopped this sort of error. He was trying to be clever.

  19. You're sh17ing me! by Anonymous Coward · · Score: 0

    A pilot with years of experience didn't understand that additional drag would be a problem?

    I suspect that it wasn't a training issue, but that the pilot was mistaken and performed the operation in error (we are human), or that he was incompetent.

  20. Re:Maybe he thought that "Unlock" would only unloc by KGIII · · Score: 1

    Imma pushin' that button too.

    --
    "So long and thanks for all the fish."
  21. What the NTSB actually said by Required+Snark · · Score: 1
    From Phys.org./

    In determining the probable cause of the accident, board members were focused on how well officials prepared for the worst. NTSB member Robert Sumwalt said Scaled Composites "put all their eggs in the basket of the pilots doing it correctly."

    "My point is that a single-point human failure has to be anticipated," Sumwalt said. "The system has to be designed to compensate for the error."

    Accusing the test pilot of being untrained and/or incompetent or whining about the risks of interlocks is both irrelevant and stupid. Single point operator failures should be designed out of any system that can cost a human life. That's why there are airbags, seat belts, and crumple zones in cars: because people fuck stuff up. If a new car that costs $15,000 can have these safety features then leaving equivalent features out of a spacecraft is engineering malpractice and possibly criminal negligence.

    But no one will be held personally accountable. And whatever safety culture does result won't last. By the time there is a 20% staff turn over it will be completely gone. Why? Because: we're makin money here, if you don't get that then get the fuck out.

    Just like in the Challenger disaster, when a technical person objects a manager will say "Take off your engineering hat and put on your management hat." And people will die and nothing will change.

    --
    Why is Snark Required?
    1. Re:What the NTSB actually said by Viceroy · · Score: 1

      As a friend of Mike, a former Scaled Engineer, and one that was directly involved in a previous Scaled accident, I have to completely disagree with your statements.

      The culture at Scaled has been and will continue to be focused on nothing but safety. This was the first flight accident that Scaled ever had in its existence since 1982, with dozens of first flights of new aircraft designs and hundreds of follow up test flights. There had been engineering mistakes on many flights previously (I certainly made some), but the safety culture that Burt Rutan instilled in everyone focusing on "Question, Never Defend" was prevalent and always managed to get the aircraft home. The report mentions that no one ever thought about what would happen if a pilot pulled the unlock lever early. I guarantee you, everyone did. But just like a pilot knows not to put the gear down above max gear speed, or do full control movements when faster than the max maneuvering speed because things will break (and there are no interlocks on those things either), it could easily be expected that a pilot would never throw the feather unlock except when they are supposed to. Test pilots fly the test card and nothing but the test card. They are highly trained to follow the procedure on the test card. I'm certain Mike did that card over and over on the simulator and threw the feather unlock at the Mach 1.4 callout correctly every time. For some reason he uncharacteristically did the steps out of order on this flight. The result was catastrophic.

      Your analogies don't hold up. If I'm in a car at 60mph and I turn a little too early, directly into a tree instead of on to a highway exit ramp, it can be pretty catastrophic to the car and its occupants. Until our autonomous cars show up, you can't design out the steering wheel. If you don't have time to look at the checklist for your next step because of the environment or because the workload is high and your muscle memory fails and you end up doing steps a little too early, it might also be catastrophic. If the procedure or checklist isn't followed exactly, catastrophic things can happen even on highly automated airlines.

      Similarly, since a car's crumple zone, seat belt or airbag probably won't save an occupant that crashes into a tree at 200mph (lets up the speed since Mach 1+ is quite a bit higher than most average planes), you can probably understand that at certain speeds, you can't design in similar safety systems. This is called tradeoff analysis and is part of engineering, not malpractice.

    2. Re:What the NTSB actually said by sysrammer · · Score: 1

      Good answer, and sorry about the loss of a friend. While I understand his venom towards management of large corporations, I think SC is in a different league.

      --
      His ignorance covered the whole earth like a blanket, and there was hardly a hole in it anywhere. - Mark Twain
  22. Responder timberland pas cher timberland femme by Anonymous Coward · · Score: 0

    nike tn 2015 Basketball shoes maintenance have two purposes: one is the maintenance of function and the other is maintenance of appearance.Responder
    timberland pas cher
    timberland femme The main methods for the maintenance of the fuction are correct preservation while the maintenance of appearance is mainly embodied in cleaning the shoes correctly. But some times they are both needed. As for the methods, the shoes should be preserved properly because the basketball shoes are made from various raw materials, such as leather
    Air max tn

  23. place with good air condition and avoid direct sun by Anonymous Coward · · Score: 0

    nike tn requin cleaning process more complex since these individual materials need to be glued. It is these different materials that make the shoes work well. Therefore a proper cleaning is needed to keep the texture of the consisted materials. While doing so, the following tips worth. First, the shoes should be kept in a relatively dry place with good air condition and avoid direct sunlight, because damp environment will lead the shoes corrupted and the direct exposure under the sun will lead to cracks and discoloration. But the storing place should not be too dry to causing discoloration and deterioration. Second, the shoes should be lined with soft spitball to keep it dry since the paper can absorb moistures left in the shoes. In addition,
    timberland pas cher

  24. THAT'S what Scaled Composits does?!? by Anonymous Coward · · Score: 0

    All this time, I thought they made false teeth for reptiles!

  25. Re:Maybe he thought that "Unlock" would only unloc by sysrammer · · Score: 1

    You must be fun in elevators.

    --
    His ignorance covered the whole earth like a blanket, and there was hardly a hole in it anywhere. - Mark Twain
  26. Re:Maybe he thought that "Unlock" would only unloc by Anonymous Coward · · Score: 0

    Fun for whom? That is an important question.

    KGIII - I blathered too much and the most anyone can post is 50 times per day so AC it is.

  27. The donk dropping off was the reason he died. by Anonymous Coward · · Score: 0

    He died because the bird broke in two after it's donk decided to go off on it's own all of a sudden. The boomcam footage is irrefutable. Next time make the man can break off safely at any speed and have it's own chute, m'kay?