Slashdot Mirror


Boeing 787 "Blacklisted" From Some Air Traffic Control Services (flightglobal.com)

An anonymous reader writes: A software glitch causes the Boeing 787 to report its position incorrectly, which has led Australia and Canada to 'blacklist' the aircraft from using ADB-S and until it is resolved the latest Boeing is treated as an aircraft without ADS-B capabilities. The practical implication is that the aircraft is not allowed to use reduced separation procedures and an maximum altitude limit of 29,000 feet was also considered. Boeing denies that the bug causes a safety hazard because existing services (radar) still allow safe operation. A bugfix is coming to restore ADS-B functionality.

96 comments

  1. It's not really a blacklist then, is it? by halivar · · Score: 2, Insightful

    It's graceful degradation.

    1. Re:It's not really a blacklist then, is it? by Anonymous Coward · · Score: 5, Informative

      It's graceful degradation.

      No, a graceful degradation would be the plane recognizing it's not operating correctly and falling back to the older service. This is a case where the plan is actually trying to use the newer/better service, failing to do so correctly, and it not aware that it is failing to do so. The humans involved are noticing the error and have had the blacklist the plan from the newer system and manually force a fallback to the old system.

      I mean seriously, the second sentence in TFA even says:
      Boeing says a service bulletin with instructions for operators to correct the position reporting error will be released “imminently"

    2. Re:It's not really a blacklist then, is it? by Anonymous Coward · · Score: 0

      No, it's a blacklist. Graceful degradation would be if a plane that supported the ADB-S capabilities flew in an area whose air traffic control systems did not make use of ADB-S.

      In this case, the plane claims to support ADB-S, but does so improperly and has had to be blacklisted as a workaround.

      If you're thinking in Web terms, it's the equivalent a browser having to include a blacklist of websites that improperly implement some standard, so that they continue to work with some degree of functionality rather than appearing to work but providing incorrect information.

    3. Re:It's not really a blacklist then, is it? by Anonymous Coward · · Score: 0

      More of a 404 instead of a 301.

    4. Re:It's not really a blacklist then, is it? by Anonymous Coward · · Score: 1

      no, it's one data type that's blacklisted, and the ATC system gracefully reverts to radar data as designed.

  2. at least is not tcas off by Joe_Dragon · · Score: 2

    as that can end deadly.

    1. Re:at least is not tcas off by digitig · · Score: 3, Interesting

      I'd be interested to know where the glitch is. If it's just in the ADS-B system then with the restrictions in the article it just costs time and money. But if it's in the navigation system then the aircrew and TCAS will have wrong information about where the aircraft is, which is far more worrying.

      --
      Quidnam Latine loqui modo coepi?
    2. Re:at least is not tcas off by Anonymous Coward · · Score: 2, Interesting

      From what I gather the pilot/co-pilot are receiving the correct information, the article notes one of the first instances where the issue was noticed "The controllers alerted the crew by radio, but the pilots insisted their instruments showed they were still on course." It sounds like there is a system to pass information from the aircraft system to a separate ATC-B beacon, for some reason that system under some circumstances only passes the lat or long, not both. The ATC-B beacon then has another (what I would call) fault where if it receives partial information it fills in the blank with whatever it last received without noting the degraded information. I can understand the beacon wanting to keep transmitting some information, but much as a phone based GPS it should note that in some way. And this doesn't just happen for a few seconds or throw off the location a few hundred feet, one of the situations resulted in the aircraft showing its location 38 nautical miles from where it actually was.

    3. Re:at least is not tcas off by Anonymous Coward · · Score: 0

      "I'd be interested to know where the glitch is."

      Work for Boeing do you?

    4. Re:at least is not tcas off by DesertNomad · · Score: 4, Informative

      I run a number of ADS-B receivers and feed the data into FlightAware. I have seen a number of a/c locally that are in very wrong positions (well over the 70 km mentioned in TFA) and suddenly jump into the "right" positions. Sounds like interface problems.

      The ADS-B system is fairly simple, and as long as the right lat-lon string is inputted, it should transmit the right position. Maybe it's a "units" issue similar to the "units" issue that caused the Mars spacecrafts more than a decade ago to make an unexpected and unfortunate (very) hard landing...

    5. Re:at least is not tcas off by parkinglot777 · · Score: 3, Informative

      Here is the cause on the TFA (which is what Boeing said)...

      In rare cases, after passing a planned turn upon crossing a waypoint, the data packets that arrived at the transponder would contain either the aircraft’s latitude or longitude, but not both. In those cases, the ADS-B transponder’s software would extrapolate the 787’s position based on the previous flight track before it made a planned turn at a waypoint. It would continue reporting the aircraft erroneously on the incorrect track until it received a data packet containing both the latitude and the longitude of the aircraft.

    6. Re:at least is not tcas off by nadaou · · Score: 2

      The problem is incomplete messages being broadcast. Sometimes the lat is missing, sometimes the long is missing. In these cases the system was using dead reckoning to extrapolate the missing value based on the previous ones. Not ideal but roughly giving you the right answer when traveling in a straight line. Gives the wrong answer after turning at a waypoint. When a complete message finally does make it through the plane jumps back to it's correct position.

      --
      ~.~
      I'm a peripheral visionary.
    7. Re:at least is not tcas off by Obfuscant · · Score: 1

      Maybe it's a "units" issue similar to the "units" issue that caused the Mars spacecrafts more than a decade ago to make an unexpected and unfortunate (very) hard landing...

      TFA explains what the error is. It's a missing lat or lon in data being sent to the ADS-B system by the internal packet data network, and the system is interpolating the missing data until correct data is provided. The problem appears most after the aircraft has made a course change ("turn") at a navigation waypoint, because the interpolation doesn't know about the turn and continues straight ahead.

      It's not an error in the navigation systems, and the pilots know where they are. The ground-based radar knows where the airplane is. It's the ADS-B system that has the wrong info.

    8. Re:at least is not tcas off by Kalendraf · · Score: 1

      Ultimately, this appears to be an issue with data atomicity. If the function is dependent upon receiving both lat and lon information, then from an architecture standpoint, the containerization of that data should be structured to be atomic if possible. However, the he network design may be using ARINC-429 words which are only large enough to contain lat or lon data, but not both. A possible fix would be to use a larger network data object (NDO) that contains both pieces of data if the network supports it. Otherwise, the design would need to be improved to mitigate or improve the handling of situations where only 1 piece of lat/lon data is available.

      Considering that ADS-B is not yet mandatory in most air space, and the feature is being added to more or and more new aircraft designs, it is possible that this type of bug could affect other makes and models of aircraft if the designers aren't careful in how the lat/lon data is handled.

    9. Re:at least is not tcas off by Anonymous Coward · · Score: 0

      the data packets that arrived at the transponder would contain either the aircraft's latitude or longitude, but not both.

      How does one even design a piece of nav software that would do this? From an object analysis point of view, latitude and longitude are just properties of a 'position object', which would be invalid if either were to be incorrect. Furthermore, it has been several hundred years since latitude and longitude have even been determined by separate means. John Harrison's clock solved that problem. Today a GPS, for example, determines both properties as a function of timing signals. And I can't imagine a failure mode in which one but not the other could be calculated. Splitting them apart anywhere in a communications protocol would be more effort than it is worth.

      And now for tin-foil hat time: ADS-B (and similar protocol) traffic surveillance are much farther along in adoption in Europe and the rest of the world than in the USA. Here, these technologies have yet to be adopted by the FAA and won't be for some time to come. Could this whole screw-up be part of a plot to throw a wrench into the ATC machinery developed to date so that a (Boeing sponsored and licensed) alternative can be proposed? From my time working at that company, one of their favorite tactics in pushing against a competing system was not to fight it outright but to get on board the development team and then royally fuck it up from the inside.

    10. Re:at least is not tcas off by PPH · · Score: 1

      Otherwise, the design would need to be improved to mitigate or improve the handling of situations where only 1 piece of lat/lon data is available.

      This is a good point. And it seems that the existing design accounts for the loss of one piece of data by the use of an estimation algorithm. This algorithm is the one that takes the last known heading and 'projects' an assumed position (sometimes incorrectly) along that route.

      But here's the problem: That estimation algorithm is a Boeing-built (or subcontracted) piece of software, which means that it is tightly coupled to its data source. And rather than ensure that the bandwidth exists between avionics components to handle such a critical function, Boeing saw fit to 'fake' the data. And worse yet, transmit what appears to be valid ADS-B position data without flagging it as degraded. Even worse, we can assume that complete data actually exists on the aircraft data buses, since we are not hearing complaints from pilots that their nav displays are suddenly jumping 70 km.

      I imagine that ATC software is capable of doing a reasonable amount of error detection and correction, displaying a last known position within an indicated error volume in airspace. And that ADS-B developers have considered how to handle missing transponder packets. So perhaps the best approach would be to send partial data, properly flagged and let ATC sort it out. Of course, this might result in lots of warning flags next to Boeing products on their displays.

      --
      Have gnu, will travel.
  3. So the plane tells ATC where it is... by Viol8 · · Score: 2

    ... instead of ATC relying on radar. What could possibly go wrong?

    1. Re:So the plane tells ATC where it is... by brambus · · Score: 4, Informative
      I know you were trying to be snarky, but you did accidentally ask a good question where the answer isn't trivial:
      • Since the dawn of radar ATC, civilian radar has been SSR - Secondary Surveillance Radar, meaning, it requires cooperation from the aircraft. SSR gives you the horizontal location of the target, but not its elevation. Instead, together with the actual radar return, the aircraft responds using a short digital code that identifies it and tells you its altitude (as read from the onboard altimeter by the SSR equipment on the aircraft). SSR has numerous advantages over PSR, mainly its not as complex, doesn't require as much power and has greater range, all of which are useful in a civilian environment. Also, it has no military application, so it carries far fewer export concerns.
      • Even so, SSR is still very expensive and providing good coverage is difficult to impossible. Even modern industrialized countries such as the USA have many places where radar coverage is simply unavailable (especially at lower altitudes). In less well of places, such as large areas of Africa, radar coverage is nonexistent.
      • The vast majority of all aircraft (and nearly all commercial aircraft) have some sort of navigational equipment that is completely independent of radar coverage and is reasonably accurate to provide traffic separation services. Put simply, aircraft are able to navigate without any ground assistance.

      And so the natural evolution is to largely abandon SSR (except for areas of extremely high traffic density) and instead place around the country only small receiver stations that listen to aircraft position reports. Using those then, ATC can build a complete traffic picture and provide separation services without having to maintain expensive ground equipment.

    2. Re:So the plane tells ATC where it is... by Anonymous Coward · · Score: 0

      Since ATC is there to regulate traffic of cooperative planes, I don't really see what could go wrong. Yes, you could have a bug in the ADB-S, or it could be hacked. But the ATC system could also have bugs or be hacked.

    3. Re:So the plane tells ATC where it is... by Anonymous Coward · · Score: 0

      Radar isn't exactly know for it's pinpoint accuracy it's really more of "eh, there's a plane abouttt... there". This is especially true as distance from the radar station increases or you run into extreme atmospheric conditions. In addition, radar doesn't tell you who the plane is just that there is a plane there which in a busy airspace like NYC is kind of a no go.

    4. Re:So the plane tells ATC where it is... by Viol8 · · Score: 2

      "Using those then, ATC can build a complete traffic picture and provide separation services without having to maintain expensive ground equipment."

      Until some pilot decides to switch the transponder off and the plane effectively becomes invisible. But that would never happen. Oh , wait...

    5. Re:So the plane tells ATC where it is... by brambus · · Score: 1

      ADS-B Out, which is the system I'm talking about, cannot be switched off. It becomes active as soon as the avionics stack is powered up.

    6. Re:So the plane tells ATC where it is... by Anonymous Coward · · Score: 0

      You know that if a pilot decide to not follow ATC instructions, they cannot use a radar to change the path of the plane? Even with the most sophisticated radar, this will not work.

    7. Re:So the plane tells ATC where it is... by Chris+Mattern · · Score: 1

      ADS-B Out, which is the system I'm talking about, cannot be switched off.

      I guarantee it can be switched off. You might have trouble switching it on again, but then, the guy who turned it off may not care much about that.

    8. Re:So the plane tells ATC where it is... by BostonPilot · · Score: 2

      ADS-B Out, which is the system I'm talking about, cannot be switched off. It becomes active as soon as the avionics stack is powered up.

      What happens if I:

      1) Hit the "off" button on my Garmin GTX-330 ES (1080 extended squitter)?
      2) Pull the breaker?
      3) Turn off the GPS that is feeding it data?
      4) Similar stuff if I have a 978 UAT ADS-B out?

      Sure *seems* like I can turn it off if I want to. I'd be breaking a rule for sure, but not sure what you think prevents me from turning it off?

    9. Re:So the plane tells ATC where it is... by Viol8 · · Score: 1

      Err, yeah. And? This is about making sure other aircraft don't collide with him amd knowing where the hell he's going and you need to know his location to do that. Clear? No? Never mind.

    10. Re:So the plane tells ATC where it is... by Yoda222 · · Score: 1

      Just inform all the plane where the ADB-S was that there is a plane not visible by ATC in the area and that they need to take precautions. There is a lot of airspace where no radar information is available, I'm not sure when was the last time a collision occurs in these area. What's your scenario, exactly, if I take into account your previous comment? Someone takes control of a plane, deactivate the ADB-S on purpose, and then tried to take down another plane by colliding with it? Looks good for a hollywood movie.

    11. Re:So the plane tells ATC where it is... by Viol8 · · Score: 1

      "Someone takes control of a plane, deactivate the ADB-S on purpose, and then tried to take down another plane by colliding with it"

      I guess people like you would have laughed about 3 airliners being hijacked and flown into buildings killing thousands prior to 2001.

      Also were you away on Mars or something when MH370 disappeared taking 200 people with it.

    12. Re:So the plane tells ATC where it is... by Yoda222 · · Score: 1

      The speed of building is about 100% less than the speed of another airplane. (not completely 100% if you use the air speed, but close) I have missed the news about the MH370 colliding with another airplane. Could you point me to the article?

    13. Re:So the plane tells ATC where it is... by Anonymous Coward · · Score: 0

      How do you propose that "precautions" are taken in instrument flight conditions? Conditions in which pilots rely on automation since they can't see the runway until it's less than the plane's length in front of them. Aircraft only have weather radar and can't see other aircraft on it so they rely on ATC. Not to mention that there have been mid-air collisions in clear skies with ATC having told both aircraft where they should see the other one.

      You're also wrong regarding radar coverage. Apart from across the oceans aircraft do not fly in areas without radar coverage and one of the reasons for changing to a system of planes reporting their position to ATC instead of being seen on radar is that certain routes will become shorter since they will no longer have to be routed through the nearest areas with radar coverage. Across the oceans there's enough space for vertical separation since there are far fewer flights than over land with congestion from all sorts of short commuter hops.

    14. Re:So the plane tells ATC where it is... by Viol8 · · Score: 1

      So its impossible to get up close to another airplane? You'd better tell that to the airforce.

      Idiot.

    15. Re:So the plane tells ATC where it is... by Yoda222 · · Score: 1

      What I propose? They could use a system where the plane broadcast it's own position to ATC. They could also use some kind of communication signal between plane. Oh wait, I think some people already got that idea.

    16. Re:So the plane tells ATC where it is... by Yoda222 · · Score: 1

      No, it's not impossible. But even an idiot can understand that it takes less time and that you don't give any advance warning if you don't start by disabling the ADS-B.

    17. Re:So the plane tells ATC where it is... by Anonymous Coward · · Score: 0

      To quote your incoherent post: "Just inform all the plane where the ADB-S was that there is a plane not visible by ATC in the area and that they need to take precautions. "

    18. Re: So the plane tells ATC where it is... by MarkH · · Score: 1

      So at basics it is a trust relationship with the aircraft to provide accurate altitude and positional information?

      The article is about specific model but is there not scenario for a small drone to lie and pretend position? I couldn't see anything in spec about shared verification.

    19. Re:So the plane tells ATC where it is... by brambus · · Score: 1

      I should have qualified that a bit:
      1) I was trying to primarily address large transport aircraft and issues of flight safety.
      2) I'm NOT trying to address attempts at tampering.
      Obviously as soon as you start pulling breakers, we're well past the accidental disconnection stage. SSR wouldn't help you here much either from the POV of ATC. What would you expect ATC to do with it if an aircraft intentionally disables the transponder? Fire missiles at the uncooperative aircraft? They have buddies wearing green who are far better equipped at talking sense into people looking to cause trouble. Moreover, as I mentioned, SSR will be retained where traffic density requires it. ADS-B Out makes sense in places where providing radar coverage is uneconomical and more-or-less unnecessary.

    20. Re:So the plane tells ATC where it is... by brambus · · Score: 1

      I'm trying to talk simple language here to people who are not into aviation. I'm not trying to imply you can't switch it off for nefarious purposes. Btw: SSR wouldn't help you much there either. You see a blip on the radar that doesn't communicate with you and doesn't give ID or altitude. Good job. What now? You are not the air force. Your job is not to secure the border. If you have security concerns you call the people who have the equipment that doesn't care if the target cooperates. You'd do exactly the same in case of lost contact on a passive system ala ADS-B Out.

    21. Re: So the plane tells ATC where it is... by brambus · · Score: 1

      The civilian ATS (Air Traffic Service) is not designed to deal with openly hostile aircraft. That's what the Air Force is for. Also, SSR isn't anywhere near sensitive enough to resolve small objects like drones. I know most people in the public at large think the national airspace is tightly controlled, but it really isn't like that. The highly controlled parts (e.g. in the vicinity of major airports) are the significant minority. Even places you might think of are tightly regulated (e.g. over most cities with the notable exception of Washington DC) are actually open to anybody taking pretty much anything and flying around with it (on paper you and your aircraft should be properly licensed, but you're not gonna get pulled over in the air by anybody to check).

    22. Re:So the plane tells ATC where it is... by BostonPilot · · Score: 1

      Ok, fair enough. Previous poster said "Until some pilot decides to switch the transponder off" which to me meant "decides to intentionally switch the transponder off" and I thought you were saying that wasn't a possibility. Even in a transport category aircraft, I'm sure the pilot can pull the right breakers if he wants to go invisible.

      I'm not sure that ADS-B was really designed with anti-hacking in mind. It seems to be designed to work as long as everybody is playing nicely. I'm wondering how long it will take people to realize they can create phantom aircraft to confuse and perplex both aircrew and ATC, and other such exploits.

    23. Re:So the plane tells ATC where it is... by brambus · · Score: 1

      Also were you away on Mars or something when MH370 disappeared taking 200 people with it.

      I guess you didn't know either that the disabling of MH370s transponder wasn't the real problem. It was still on military tracking radars for a while. The problem was that they *left* radar coverage and went out over the ocean. Or are you one of those conspiracy nuts who thinks they landed somewhere in Kazakhstan or were abducted by aliens?

    24. Re:So the plane tells ATC where it is... by Anonymous Coward · · Score: 0

      Until some pilot decides to switch the transponder off and the plane effectively becomes invisible. But that would never happen. Oh , wait...

      The planes are generally invisible anyway in many places because there weren't any radar towers there historically. The places that are busy (major metropolitan areas) have decent sized airports and have towers so the transponders going away isn't that big of a deal.

      What ADS-B gives ATC is coverage in places where the expense of a radar tower is hard to justify, but setting up a receiver and a dial up connection is trivial. There are online services that run on volunteers (flightstats, flightaware).

      As an example of coverage in no-radar areas, NavCanada and Iridium teamed up to form Aireon, which will listen to planes' transponders from satellites (NavCanada oversees Gander Oceanic control).

      So yes, turning off a Mode ES/ADS-B transponder can make a plane disappear, but that's no worse than what happened in the past. It's why on enroute charts there are/used to be compulsory reporting points: they're from the days before radar.

    25. Re:So the plane tells ATC where it is... by brambus · · Score: 1
      You are not a pilot. That much is plainly obvious from your comment, although you seem to know just enough about aviation and ATC that you managed to confuse yourself.

      How do you propose that "precautions" are taken in instrument flight conditions?

      All flights performed in IMC must be according to IFR and are hence controlled flights.

      Aircraft only have weather radar and can't see other aircraft on it so they rely on ATC.

      Which is exactly why uncontrolled flights are not allowed in IMC.

      Apart from across the oceans aircraft do not fly in areas without radar coverage

      I guess you've never heard about procedural control. Most small-to-mid sized airports around the world do not have radar. The bigger problem is you seem to have no idea about the hierarchy of ATS. Pilots don't just "talk to the tower". And even IFR flights are not required to receive radar services.

    26. Re:So the plane tells ATC where it is... by brambus · · Score: 1

      Ok, fair enough.

      My bad sir. I should have been more clear.

      Even in a transport category aircraft, I'm sure the pilot can pull the right breakers if he wants to go invisible.

      At present they can. We'll see about the evolution of the ATS. Maybe in the future as SSR is further reduced and self-reporting becomes more well tested, things such ADS-B might become mandatory always-on features and we'll see battery-powered kits installed into aircraft that cannot be switched off.

      I'm not sure that ADS-B was really designed with anti-hacking in mind. It seems to be designed to work as long as everybody is playing nicely.

      All of ATS is traditionally very much a gentlemen's club. There's nothing stopping you from hopping into your nearest non-transpondered non-radioed Supercub and generally behaving like an ass in the air. Same as on the roads, this kind of fun ends only when the guys with the big guns arrive.

    27. Re:So the plane tells ATC where it is... by I4ko · · Score: 1

      So? 200 people, 9000 people?.. Out of .. 7Billion... 0.0001314% Unspeakable personal tragedy, but on the grand scheme of things, it isn't like the 40 million in WWII. I can personally attest myself when growing up it was much more likely to get mugged on the street and come home barefoot (if lucky). Also you are largely forgetting the 4th plane and other recent incidents where people don't just sit like sheeple calculating how much they will get out of the settlement, but activate take responsibility of their own fate and take the crazy guys down. Bad people exists, and will always exist. Why do you need to stress out about it all the time? Oh, I know why, so your blood pressure stays high permanently, your anxiety level is high permanently, you line money in the pockets of the big pharma and the scare racquet (insurance), and you are so scared of living your life that you lock yourself in your home and the government takes the rest of what little freedom you have left. Don't stress it. Live in the present, act in the present, enjoy the present when you can, run as hell when you have to. Other than that, stop spreading the scare!

    28. Re:So the plane tells ATC where it is... by Viol8 · · Score: 1

      So if ATC see him heading for another plane when his transponder is on they won't warn the other plane? Right you are...

      Idiot.

    29. Re:So the plane tells ATC where it is... by Anonymous Coward · · Score: 0

      The problem that ADS-B is putting precise altimetry in the hands of controllers, to allow for narrow vertical separations on busy routes.

      None of the gear you list is allowable for RVSM operations.

      WRT the article, you're not going to be on NATS with anything that is trivial to disable physically, and when you fall off the ADS-B surveillance system on NATS, literal alarm bells go off in Gander, Swanwick and Shannon, and you start getting urgent radio contacts. NATS and PACOT also have several other surveillance systems (including other air crew on these busy tracks, who will also start getting urgent contacts). If an aircraft falls off surveillance and doesn't immediately adopt the SLOP given it, it can expect a visit from fast, well-armed inteceptors who will be much less polite than civilian ATC.

      This sort of behaviour on polar tracks and some parts of the PACOT tracks is liable to get you forced or even shot down.

      You're likely to run into twitchiness in RVSM operations in busy national airspaces too, although those are mostly strongly covered by a variety of other altitude surveillance mechanisms that are good at spotting very small *shifts* in altitude rather than exact altitudes. A large altitude shift that is not reported by ADS-B is likely to produce some intensive querying and a scramble (SAR possibly, less friendly perhaps).

      In sparser routes you won't have RVSM ops going on anyway, so ADS-B is handy but inessential. The affected 787s can operate just fine in those, however they tend to be some combination of longer routes with less favourable winds, less favourable altitudes, and less favourable times. These often sum up to missing scheduled airport slot times. So this is likely to be pretty expensive for some operators -- Air Canada in particular -- who presumably will want Boeing to indemnify them -- and some of them will probably be successful in that.

  4. Not a safety hazard? My ass! by LordKronos · · Score: 4, Insightful

    Nav Canada first detected a problem on 1 July 2014 when controllers noticed a 787 appearing to deviate up to 38nm (70km) from its planned track. The controllers alerted the crew by radio, but the pilots insisted their instruments showed they were still on course. Suddenly, however, the 787 “was observed jumping back to the flight plan route” on the controller’s screens, according to ICAO documents.

    I'm sorry, but if a plane is reporting that it is 70km from where it actually is, that's no small deviation. That deviation is more than 10 times the required flight separation. It may not pose a safety hazard once controllers already know they have to fall back to the older system. But before this was discovered? That's a HUGE safety hazard. The only reason they can get away with claiming it wasn't a safety hazard was because they lucked out and the system only screwed up when there were no other planes around

    1. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      "1 July 2014"

      Around a year and a half ago and it still isn't fixed? Boeing should have had a fix in less than a month and dedicated personnel available to fix it on aircraft free of charge ready to fly out upon request from airlines. There also appears to be a deficiency in the ADS-B standard as well that needs fixing, I can understand the software wanting to keep the aircraft on the screens by guessing its location based in the information provided, but when it does so it should immediately notify controllers that it is doing so. Even my phones GPS warns me when my location is inaccurate.

    2. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      I concur with you. This is a HUGE fault. Northern Eastern Canadian airspace relies or ADS-B for separation (I think the same is true for Australia). The US is trying to move to ADS-B only in low density airspace. I am shocked that Boeing would suggest it is not a safety fault. Combine this with the 787 battery fiasco, I would suggest the MBAs are firmly in charge of Boeing.

    3. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 1

      I don't know, 38 nano-meters is a pretty accurate reading.

    4. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      nautical miles.

    5. Re:Not a safety hazard? My ass! by PRMan · · Score: 0

      38 nanometers = 70 kilometers?!?

      I thought you Euros said this metric thing was easy!

      --
      Peter predicted that you would "deliberately forget" creation 2000 years ago...
    6. Re: Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      No. A knot, or kt, is nautical miles per hour.

      NM or nmi, are the correct abbreviations for nautical mile.

    7. Re:Not a safety hazard? My ass! by rwa2 · · Score: 1

      close... kt is speed. nmi is distance.

    8. Re:Not a safety hazard? My ass! by fnj · · Score: 1

      The abbreviation for nautical miles is knot or kt, not nm.

      How about you stop talking out of your ass? Dimentional failure. A knot is a nautical mile PER HOUR. There are several abbreviations in use for nautical mile, but the most common one is NM (note uppercase).

    9. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      Boeing should have had a fix in less than a month and dedicated personnel available to fix it on aircraft free of charge ready to fly out upon request from airlines.

      If the software change process for commercial avionics is anything like it is for implantable medical devices, there's no way that "less than a month" can be anywhere close to reality. 18 months is typical. Progressive companies trying to streamline that process are shooting for 3-6 months in the future. Sure, the software change and test change probably take less than a day, but the rest of the time is for testing and documentation used to satisfy the FDA or FAA or FCC. That time for testing and documentation ends up being pretty important to keep people safe.

      It's not quite as simple as you rolling out a background color change via CSS for your dog's website.

    10. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      When its just some random update I have little doubt that it takes a year or more, but this is (or at least should be) a major safety related issue. There are recorded cases of aircraft misreporting their location by over 40 miles. If there isn't some streamlined process for pushing through these kinds of updates some government bureaucrat(s) needs to be fired and permanently banned from holding government possessions in safety/transportation related jobs for life.

    11. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      Position extrapolation is a normal part of ADS-B. In normal operation the GPS system deliver a 1 Hz update on position. The position is extrapolated based on the aircraft trajectory at the time of transmit of the position update (short version, its actually more complicated). The extrapolation is normal and annuciation would be a nuisance to the crew.

    12. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      It should not take 18-months. The other AC was pulling that number out of their ass. That said, 1 month turn around for even a trivial fix would be tight. A non-trivial but not complicated fix would probably be closer to 3 months. Remember, you don't want a safety fix to introduce a new, and more dangerously unknown, safety fault.

    13. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      This error apparently doesn't involve the crew, it is only seen by air traffic control. And even for them it shouldn't be overly intrusive, I'm thinking something like what happens with a phone GPS map, you're shown a circle around the location point giving you a rough idea of the accuracy. Or if you want something more simplistic the location icon could change color/shape if it is working with limited information.

    14. Re: Not a safety hazard? My ass! by Anonymous Coward · · Score: 1

      They should go for agile - no docs or silly testing....

    15. Re:Not a safety hazard? My ass! by sjames · · Score: 1

      That and when it reported the wrong position, it was implausibly far from the true position. It's much worse when the error is plausible.

    16. Re:Not a safety hazard? My ass! by Obfuscant · · Score: 1

      But before this was discovered? That's a HUGE safety hazard.

      An aircraft being 70km from where it is supposed to be with nobody knowing it is a huge safety hazard, both to that aircraft and others.

      But an aircraft being exactly where it is supposed to be, with the pilots knowing where it is and that it is where it is supposed to be, and ATC being told by the pilots it is where it is supposed to be, is not a huge safety hazard to anyone. ATC issues clearances based on the assumption that aircraft will be where they are told to be, so an aircraft that is where it was told to be is hardly a problem.

      It WOULD be a problem were ATC to see a mis-reported location and decide "hey, I can slip a couple of other airplanes into that space where that guy was supposed to be..." without verifying with "that guy" that he really isn't where he's supposed to be. That's why ATC wouldn't do that.

      and the system only screwed up when there were no other planes around

      I don't know where you got that idea from either the summary or TFA. There was nothing I saw that said that the airspace was otherwise empty, and if you're talking about a 787 on a major airway, it is highly unlikely there were "no other planes around".

    17. Re: Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      Next month's Slashdot headline: Yahoo! announced Yahoo! Air!

    18. Re:Not a safety hazard? My ass! by Anonymous Coward · · Score: 0

      Actually, if my understanding is correct, it actually was plausibly inaccurate for a while. It appears the system didn't track the plane after it turned, so it appeared to continue on straight. Thus the error started at zero and gradually accumulated until someone eventually noticed it was that far off. Presumably there was a period of time there that it was indeed plausibly wrong.

    19. Re:Not a safety hazard? My ass! by lordlod · · Score: 1
      Most of Australia's controlled airspace uses ADS-B for separation. Only the densely populated areas have secondary radar.

      The risk of a collision is relatively low as they most commonly separate by altitude and a 70km horizontal deviation probably wouldn't reach another flight path.

      It does screw up separation monitoring and safety management programs fairly badly though. Some plans also have ADS-B based collision alert systems too, which would cause lots of panic if they went off.

      I am blown away that the 787s cockpit network is so bad that it routinely drops position data packets. Often enough that it frequently loses multiple sequential packets and the firmware developers implemented a dead reckoning system to plaster over the issue. How do you screw up a network that badly?

    20. Re:Not a safety hazard? My ass! by sjames · · Score: 1

      That would certainly be plausible and dangerous.

    21. Re: Not a safety hazard? My ass! by PPH · · Score: 1

      Yahoo! Air!

      Navigation provided by Marissa Mayer? No thanks.

      --
      Have gnu, will travel.
  5. Bullshit detector test by Anonymous Coward · · Score: 0

    We just had a nice post of folks ability to detect BS, so here's a test.

    In rare cases, after passing a planned turn upon crossing a waypoint, the data packets that arrived at the transponder would contain either the aircraft’s latitude or longitude, but not both. In those cases, the ADS-B transponder’s software would extrapolate the 787’s position based on the previous flight track before it made a planned turn at a waypoint. It would continue reporting the aircraft erroneously on the incorrect track until it received a data packet containing both the latitude and the longitude of the aircraft.

    “It is important to understand that this is not a safety concern,” Boeing says. “Existing systems such as radar provide the necessary positional data to [air traffic control] that allow the continued safe operation of the fleet.”

    1. Re:Bullshit detector test by Anonymous Coward · · Score: 0

      Ha! A trick question! There is no mention of the time interval between the package with only one data point and the package with two data points, so it is impossible to tell whether this is safe or not.

    2. Re:Bullshit detector test by PPH · · Score: 1

      There is no mention of the time interval

      Enough time to travel 70 nautical miles.

      --
      Have gnu, will travel.
  6. The underlying problem ... by PPH · · Score: 4, Interesting

    ... is that the problem was traced back to the 787 avionics network. Information sent from the GPS (where the data originates) to the transponders (where it is sent out to air traffic control). This is the same network which attracted attention when Boeing asked for a special condition exempting the 787 from a requirement to isolate critical functions from things like the passenger entertainment system. Now, nobody has tracked down exactly what caused this communications glitch. And they may never do so. But their innovations may be coming back to bite them in the ass.

    --
    Have gnu, will travel.
    1. Re:The underlying problem ... by 140Mandak262Jamuna · · Score: 1
      Looks like you are saying "FAA requires airplanes to isolate flight critical info network from other less critical networks like the entertainment system. Boeing wanted a waiver to mix the traffic."

      Is my understanding correct? Did FAA give Boeing the waiver it sought? Did Boeing take advantage of this waiver and mixed the traffic?

      78 nautical miles is almost 10 minutes at cruise speed for 787. It can't be simple network delay or latency. It has to be some severe buffer overflow underflow issue with some subsystem rebooting and reacquiring its sane initial states. In the mean time it keeps reporting an guestimate or last known sane value? A critical navigation subsystem can't take 10 minutes to reboot. It could take several attempts to acquire a sane trustable initial value for the inertial navigation computers from GPS, at cruise speed. That could take 10 minutes. There was one crash where the aircraft had to stay still on the ground when the nav system is initialized. And the pilot commenced taxiing too soon, before the initialization was complete and it led to the plane flying into a mountain because it got its location wrong.

      --
      sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    2. Re:The underlying problem ... by PPH · · Score: 1

      Is my understanding correct? Did FAA give Boeing the waiver it sought? Did Boeing take advantage of this waiver and mixed the traffic?

      Yes.

      Did this mixing of traffic result in the dropping of some GPS packets? I don't know. But if Boeing's example of error handling in this case is any example of their competency in managing critical systems in general, I'll be taking a train.

      --
      Have gnu, will travel.
  7. An maximum by Lije+Baley · · Score: 1

    "an maximum altitude" -- typo, or Euro-grammar gone too far?! It's getting so hard to tell anymore.

    --
    Strange things are afoot at the Circle-K.
    1. Re:An maximum by JaredOfEuropa · · Score: 1

      It's metric grammar

      --
      If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
    2. Re:An maximum by Anonymous Coward · · Score: 0

      That's Canadian, you insensitive clod.

  8. Difference between ADB-S v ADS-B? by Anonymous Coward · · Score: 0

    I love summaries that assume people know acronyms.

    Since the summary uses both without explanation, what's the difference between ADB-S v ADS-B?

    Why are they blacklsited from using ADB-S until ADS-B functionality is restored?

    1. Re:Difference between ADB-S v ADS-B? by damn_registrars · · Score: 1

      what's the difference between ADB-S v ADS-B

      I'm pretty sure it's a typo. The link for "ADB-S" actually goes to a page discussing ADB-S, so it appears that - as often happens - the slashdot "editors" didn't edit for shit before posting to the front page. Timothy usually does better than this, but the slashdot "editors" are busy in job-hunting mode right now with slashdot up on for sale.

      --
      Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    2. Re:Difference between ADB-S v ADS-B? by Anonymous Coward · · Score: 0

      Timothy usually does better than this, but the slashdot "editors" are busy in job-hunting mode right now with slashdot up on for sale.

      What? Timothy and co. generally *introduce* errors into the submitted summaries. They are editors about as much as I own the Moon and Jupiter.

      I'm convinced that any summaries that are correct make it to the front page *despite* the intentions of the employees of Slashdot.

    3. Re:Difference between ADB-S v ADS-B? by damn_registrars · · Score: 1

      Timothy usually does better than this, but the slashdot "editors" are busy in job-hunting mode right now with slashdot up on for sale.

      What? Timothy and co. generally *introduce* errors into the submitted summaries.

      Saying Timothy is a better editor than the rest of the gang of idiots here is like saying I'm a better at cross-country running than most squid. Yeah, it's valid, but it doesn't mean much.

      --
      Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    4. Re:Difference between ADB-S v ADS-B? by Anonymous Coward · · Score: 0

      Surely if it were a typo, it would have been fixed by now.

  9. The New ATC RADAR by Anonymous Coward · · Score: 0

    It is the intent of the world's aviation organizations, driven by the U.S. FAA and their NextGen ATC modernization initiative, that conventional RADAR will eventually be replaced by the ADB-S or similar self identifying and locating system.

    What could possibly go wrong, right?

  10. It doesn't appear to be affecting BA's stock price by Anonymous Coward · · Score: 0

    ...which is all I care about.

  11. bugfix? by HideyoshiJP · · Score: 3, Funny

    "A bugfix is coming to restore ADS-B functionality."

    $adsb.model = "777-200ER";

  12. @nd bug by Anonymous Coward · · Score: 0

    In May Boeing revealed a software bug that could completely lose electrical power generation in 787 aircraft. Apparently a 32bit millisecond counter overflowed after about about 2 month incrementing. This is an elementary mistake and should have been caught in software design reviews. I have no idea what the problem is with the ADS-B system but perhaps there is an issue with Boing's software development process.

  13. New DHS safety feature? by ramriot · · Score: 1

    Perhaps the bug is really a hidden feature, only revealed by accident. ( This is a shoe in for a Bruce Schneier's Movie Plot Scenario )

    Deeply buried in the ADS-B firmware is an emergency setting which, should the Department of Homeland Security get a credible security theatre warning that criminals with smartphones and GPS guided drones are planning to bring down airliners. All airliners with updated ADS-B firmware will report their position as exactly 70nm away from their real position on a pseudo-randomly generated bearing keyed on the date. Thus all participating aircraft are equally displaced in the same direction by the same amount.

    As to them darn foreigners, well we shoot them down first to clear the skies lest our majestic fleet become damaged.

  14. We don't need head lights by Anonymous Coward · · Score: 0

    You guys have them on the runway anyways.

  15. I've seen this happen by shocking · · Score: 1

    I log ADS-B traffic to a PostGIS DB, and as part of the deduplication and data cleaning process, I look at the position reports, time & distance between them and the logged speed to see if they make sense. I sometimes have to add a fudge factor of up to 50km. ADS-B packets can get corrupted in ways that dump1090 can't fix up or detect, and I thought that the errors were due to that. Dump1090 has its own quirks when you're pulling position reports down from its JSON interface, but it's easier than pulling the ADS-B messages directly from its other interfaces and attempting to reconstruct the plane's track from that.

  16. ADS-B has zero security by jcims · · Score: 1

    ADS-B has zero security controls. Someone with a simple transmitter could draw a murder of giant dicks swarming in three dimensional space using A-380s as pixels. It's hilariously bad.

    1. Re:ADS-B has zero security by deadweight · · Score: 1

      Even better, I can make my plane NEVER violate any restricted area, speed restriction, crossing restriction, or anything else I don't want it to do. I can make it always be 500 feet left of where I really am. I can make it take off for LAX at 1500 knots if people complain about what I am doing. I can make myself the leader of a 500 plane formation that spells BITE ME.

    2. Re:ADS-B has zero security by Anonymous Coward · · Score: 0

      You'd provoke several calls from ATC to nearby aircraft asking them for visual confirmation; you'd also provoke a call from them to people who fly with anti-radiation missiles; you'd also provoke a call to the FBI and FCC or their foreign equilvalents. You'd probably also make the news in a big way, although you might not get to enjoy the coverage long, or at all...

    3. Re:ADS-B has zero security by deadweight · · Score: 1

      Eventually maybe. BTW, a HARM is utterly useless to shoot into a mix of civilian airplanes ALL transmitting on various frequencies, even assuming such a missile had a hope in hell of locking onto an intermittent burst signal like that.

  17. Tsk tsk by GoRK · · Score: 1

    FOR SHAME! It's ADS-B not ADB-S.

  18. ADS-B, Mode-S and TCAS by PPH · · Score: 1

    All share equipment and data streams. So what are the odds that a 787 broadcasting a bad position is also fooling surrounding aircraft into a collision avoidance maneuver (false positive) or tricking them into thinking the affected aircraft is not in conflict (false negative)?

    In busy airspace, pilots cannot rely solely on ATC to maintain separation. So that's why these collision avoidance technologies were developed. Shame if they don't work correctly.

    --
    Have gnu, will travel.