Slashdot Mirror


The Fourth US Navy Collision of the Year Was Ultimately Caused By UI Confusion (arstechnica.com)

Yesterday, the U.S. Navy issued its report on the collisions of the USS Fitzgerald and USS John S. McCain this summer, which was the fourth U.S. Navy collision this year. "The Navy's investigation found that both collisions were avoidable accidents," reports Ars Technica. "And in the case of the USS McCain, the accident was in part caused by an error made in switching which control console on the ship's bridge had steering control. While the report lays the blame on training, the user interface for the bridge's central navigation control systems certainly played a role." From the report: According to the report, at 5:19am local time, the commanding officer of the McCain, Commander Alfredo J. Sanchez, "noticed the Helmsman (the watchstander steering the ship) having difficulty maintaining course while also adjusting the throttles for speed control." Sanchez ordered the watch team to split the responsibilities for steering and speed control, shifting control of the throttle to another watchstander's station -- the lee helm, immediately to the right (starboard) of the Helmsman's position at the Ship's Control Console. While the Ship's Control Console has a wheel for manual steering, both steering and throttle can be controlled with trackballs, with the adjustments showing up on the screens for each station. However, instead of switching just throttle control to the Lee Helm station, the Helmsman accidentally switched all control to the Lee Helm station. When that happened, the ship's rudder automatically moved to its default position (amidships, or on center line of the ship). The helmsman had been steering slightly to the right to keep the ship on course in the currents of the Singapore Strait, but the adjustment meant the ship started drifting off course.

At this point, everyone on the bridge thought there had been a loss of steering. In the commotion that ensued, the commanding officer and bridge crew lost track of what was going on around them. Sanchez ordered the engines slowed, but the lee helmsman only slowed the port (left) throttle, because the throttle controls on-screen were not "ganged" (linked) at the time as the result of the switch-over of control. The ship continued to turn uncontrolled to port -- putting the ship on a collision course with the Liberian-flagged chemical carrier Alnic MC.

31 of 220 comments (clear)

  1. Damn developers... by Frosty+Piss · · Score: 4, Insightful

    See? This is what happens when the project team is made up of "full-stack" developers - no one knows how to code a decent UI... That, and the whole thing was written in Angular...

    --
    If you want news from today, you have to come back tomorrow.
    1. Re:Damn developers... by magarity · · Score: 4, Interesting

      This is what happens when people get too caught up in method A that they forget about method B. The ship has a steering wheel. If the trackball method seems out of whack for even a second, someone should grab the physical wheel while the video game steering is diagnosed.

    2. Re:Damn developers... by Inviska · · Score: 5, Interesting

      I'd much rather have a programmer design the user interface than a UX designer. With a programmer you usually get a logical, well constructed interface that follows standards and offers easy access the software's functionality. Meanwhile, most UX designers turn up and say, "let's recreate the interface with flat design, remove all the colours, hide all the options, remove all customisation, spread the buttons all over the place, and after we've finished let's redesign the whole thing again next year."

      I've used Windows and commercial applications all my life, but in recent years I've found myself using free open source software far more, and Windows 10 has me moving to Linux. This isn't for idealogical reasons, but with free software the developer generally creates the user interface, so you get something that's usable. Commercial software tends to bring in UX designers who have a nasty habit of taking good software and rendering it totally worthless.

    3. Re:Damn developers... by ShanghaiBill · · Score: 5, Insightful

      With a programmer you usually get a logical, well constructed interface

      Gimp is an obvious counterexample.

    4. Re:Damn developers... by bobbied · · Score: 5, Insightful

      Actually...

      As I understood the article, the issue was that the physical wheel that controlled the rudder can be moved electronically between multiple locations. The same is true with the throttles. The problem here was the physical control location got switched accidently and they lost track of where it went.

      A good UI would have two key features. First, it would have a visual indicator at ALL possible control locations where the one primary physical control was currently configured. Second, it would provide some kind of warning both when the primary control location was changed and when any physical control which was not primary was being moved.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    5. Re:Damn developers... by LesFerg · · Score: 3, Interesting

      Yes but if you had more than one control, and one stopped working, wouldn't your first thought be to try the other one?
      I can't accept everybody just ran about waving their hands in the air shouting "we've lost steering control".

      I agree it is reasonable to expect an indicator of which device is active, and preferably each inactive device should have an indicator to show which one was in use, couldn't take more than a few Arduino's and some LEDs. heh.

      --
      If I had a DeLorean... I would probably only drive it from time to time.
    6. Re:Damn developers... by presidenteloco · · Score: 2

      The UI on control station B (let's call it) clearly didn't PROMINENTLY indicate to that operator that they had both the steering control and throttle control.

      It also didn't PROMINENTLY show that only one throttle and propellor (of the left and right one) was being adjusted rather than both.

      These facts should be visually direct and hit-you-over-the-head prominent on that ui. Bright big colored things in the corresponding shape of the real thing.

      Also, the fact that the other console A (that formerly had control) no longer had steering control and had transferred it (to station B) should also have been visually prominent in console A's UI.

      And of course a little simulator training for the crew wouldn't have hurt either, but this was also a serious BAD UX problem.

      Also, the control logic for transferring steering from console A to console B on the bridge is different from how that transfer works to console C (Aft steering station, at back of boat.)

      A => B : station B rudder control always starts at midships rudder regardless of station A rudder setting prior to transfer.
      In this case, station A had a starboard roughly 4 degrees rudder setting to compensate for drifting in ocean current. That changed to midships rudder on the transfer without anyone realizing it had been different.

      A => C : station C rudder control resumes at whatever setting station C already had the last time it was used, regardless of the rudder setting on whatever console transferred to it.
      In this case, station C was at 30 degrees port rudder when it got control. It's operator didn't realize that for a while.

      These differences in the control logic are also probably very bad human-factors design, and would have required large amounts of repeated training to have people get the different transfer procedures straight. UX fail again.

      --

      Where are we going and why are we in a handbasket?
    7. Re:Damn developers... by Tablizer · · Score: 2

      A UX designer should focus on utility and functionality, but if the PHB's decided they "need" a dedicated UX designer, it usually means they want eye-candy, and that's what they hire for.

      As far as commercial versus open-source, I usually find the commercial UI's more friendly, I have to say. Windows OS UI's indeed do suck, but because we have to use them at work, we just learn and memorize our way around the swamp.

    8. Re:Damn developers... by aaarrrgggh · · Score: 2

      You also need the frigging Christmas Tree at each station, a pendant of lights that shows everyone on the bridge who has what controls. Say Red for throttle and Blue for steering or whatever, and white for offline.

    9. Re:Damn developers... by John.Banister · · Score: 4, Informative

      Most of the civilian boats on board which I've worked have a button at each station: "give control to this station right here." You don't have to find the station that has control to release it. You just take it where you stand. I can understand that the Navy might want to temporarily disable that sort of capability (perhaps using a physical key at the station from which control cannot be taken) if they had immediate concerns about hostile actors on the bridge, but not to have the capability at all seems destined to cause just this sort of problem.

      On boats with this system, the "take command" button is lit on the station that currently has command. Also, they generally require the controls at the incoming station to be in "neutral" before command can be taken - the response to the change to neutral is delayed enough on changing stations that you can switch the steering back to autopilot and move the throttles quickly back to the position from the former station without hassling the course or propulsion engines.

    10. Re:Damn developers... by Puls4r · · Score: 2

      Which is exactly why the stack lights should have WORDS on them..... so that there isn't any confusion.

    11. Re:Damn developers... by tehcyder · · Score: 2

      No it's a scam investigation, they don't want to admit the US Navy is forcing right of passage always demanding all other ships move and even trying it with light house. They are trying to slime out of it buy relying on gullibility and the typical mug punter association with driving a car, how soon they see the car and how much time they have for evasive action. Shh, but this a two bloody large ships and you have minutes for evasive action and with radar basically a whole lot longer than that to establish a safe course. Basically right up until the end, with the US navy waving it's dicks about trying to force the other ship to alter course regardless of international maritime law and then and only then, when they visibly new the other ship would not be able to take sufficient evasive action, did they in a panic attempt to alter course and failed, through incompetence upon a course set by swollen testicles and an erection.

      I don't know how idiots run a Navy but logic would demand a constant state of training, I would expect naval vessel to see and not be seen. Run courses to target and identify every ship they come across as training and to strive to not been seen ie shadowing patterns, this again as training. I would expect that the crew at all times keep full control of their vessel and that it would be impossible for any merchant vessel to ram them no matter how hard that merchant vessel tried.

      The final failure was steering but what led to that point was not, that was a purposeful exercise by the US Navy to force big dick authority upon all merchant vessels. Maybe the captain was too busy in his cabin having some getting off time during the stupid manoeuvre.

      Look, stop prevaricating and say what your real opinion of the US Navy is!

      --
      To have a right to do a thing is not at all the same as to be right in doing it
    12. Re:Damn developers... by rwise2112 · · Score: 3, Insightful

      Yes but if you had more than one control, and one stopped working, wouldn't your first thought be to try the other one? I can't accept everybody just ran about waving their hands in the air shouting "we've lost steering control".

      I agree it is reasonable to expect an indicator of which device is active, and preferably each inactive device should have an indicator to show which one was in use, couldn't take more than a few Arduino's and some LEDs. heh.

      Good points. Even better would be a button 'take control here'.

      Either way the system is too complex. They are confused while just sailing along. Can you imagine if there was a war on, and they were getting shot at or something!

      --

      "For every expert, there is an equal and opposite expert"
  2. Many problems caused this by jfdavis668 · · Score: 4, Interesting

    Yes, the displays could be improved, but there were many issues involved. The proper crew members were not on the bridge. The captain had let them sleep an extra hour, so the most experienced crew were still at breakfast. The crew involved were not experienced enough to make quick changes to the ship configuration in a critical situation. Lesson learned, don't get in a critical situation you know will happen with the back up crew. Another good point - don't have just one set of high quality bridge crew-members.

    1. Re:Many problems caused this by Calydor · · Score: 5, Insightful

      A better point might be to not have an elite team and a standard team, but to mix and match between the different shifts so there's always a couple of highly experienced guys around.

      --
      -=This sig has nothing to do with my comment. Move along now=-
    2. Re:Many problems caused this by jfdavis668 · · Score: 2

      Because ships sail around all the time, you get overconfident in your abilities. Suddenly it is critical that you do something you rarely do, and you realize you're not as experienced as you think you are. Due to the long range of modern weapons, even ships sailing in tactical formations are far apart. It gives you plenty of time to think before you have to make a move. The leadership of the ship needs to train on things like this during the course of normal operations, so the crew gets experience with it. Have them change the helm configuration at unexpected times, and see if they do it to standard. Don't wait for a situation where you would normally perform that operation, they happen to infrequently.

    3. Re:Many problems caused this by Shinobi · · Score: 5, Insightful

      One of the issues that has been highlighted is how little bridge watchkeeping experience US Navy officers(including CO's) can rack up in their careers, hour counts that wouldn't even qualify them as a 3rd mate on a commercial coast freighter, much less anything really big:

      https://www.usni.org/magazines...

      And from another article, published more recently:

      "Mitch McGuffie, a former U.S. surface warfare officer who served in an exchange with the U.K. Royal Navy for two years as a bridge officer, said that other navies place a higher value on navigation and ship handling than Americans.

      âoeI was the go-to office of the deck on my first tour, and I thought I knew a lot of stuff. And then I went to the Royal Navy and I went through their navigator school, and it was the hardest class that I have ever gone through, with a 50-percent attrition rate,â he said.

      British sailors specialize in a specific discipline at sea, unlike the U.S. surface warfare officers that are generalists. As a result, narrow specialties like navigation or bridge watches maybe given short shrift.

      âoePeople squeak through the system. They may be great officers and they may great engineers, but they might not have had a lot of time handling ships in busy waterways,â McGuffie told USNI News in an interview.
      âoeWe have guys that are commanding ships right now that have 400, 500 hours of bridge watchkeeping time in their career.â

      In contrast, as the bridge officer on a Royal Navy frigate for a six-month deployment, McGuffie stood watch for more than 2,000 hours â" all of them logged."

    4. Re:Many problems caused this by tomhath · · Score: 2, Interesting

      In contrast, as the bridge officer on a Royal Navy frigate for a six-month deployment, McGuffie stood watch for more than 2,000 hours â" all of them logged."

      The guy averaged 77 hours per week? I find it hard to believe he was actually on watch while the ship was underway that much.

      In my experience (US Navy for four years) the biggest problem is that the enlisted men who stand duty on the bridge (lookouts, helmsmen, etc.) are not the brightest people you'll ever meet (to put it very politely).

    5. Re:Many problems caused this by Shinobi · · Score: 4, Interesting

      In the Royal Navy, officers are specialized for their roles, so as a bridge officer, yes, he'd spend most of his duty time on the bridge.

      And if they ran the Traditional 2 Section RN dogged watch, he'd have spent on average 36h on watch every 72 hour period. Which would give you 2160h watch hours logged.

  3. In civilspeak by nospam007 · · Score: 2

    It means that the navigation UI was overlaid by the Solitaire UI,

    1. Re: In civilspeak by Type44Q · · Score: 2

      Not "2 Sailors 1 Cup?"

  4. Some things never change by Tablizer · · Score: 4, Funny

    https://www.youtube.com/watch?...

    Who's controlling it?

    What's "it"?

    The ship!

    You are, right?

    Only the rudder.

    Whose controlling the propellers then?

    I thought you were.

    No, I thought you were!

    Let's ask Mikey. Mikey, are you controlling the propellers?

    I was earlier, but I thought you guys took control of them. See, the red icon is on.

    That's not a red icon, that's the object we are about to collide with...

  5. No cyber, no other nations? by AHuxley · · Score: 4, Insightful

    Just design, humans, contractors and internal gov/mil policy.
    Who would have expected not having a good design and testing that design with crews would have been an issue?
    How to do a "navy".
    1. Your crews have to have skills. Find the best people to work in your navy. Give them the wages, support and education they need.
    2. Read up on how other winning nations did the "navy" design over the many, many years.
    Saying a ship is new or a different "design" is no excuse.
    The UK built its Dreadnought https://en.wikipedia.org/wiki/... having to consider new designs and new ideas. The new parts got made with skill and people worked very hard to get the new design ready.
    Any unexpected issues got corrected by real engineers and top experts before they became an issue for the navy.

    Find the experts, test things a lot, have good crews and ensure the skill sets are ready.

    --
    Domestic spying is now "Benign Information Gathering"
  6. Ars Technica showing how far they've sunk again by Shinobi · · Score: 5, Informative

    Despite Ars Technica's single-minded view on the incident, there were multiple levels of failure, including but not limited to:

    Insufficient lookouts
    Overcrowded bridge interior
    Insufficient training(What Ars Technica neglects(possibly deliberately) to mention is that parts of the crew on watch on the bridge were on temporary assignment from the cruiser Antietam, which according to the report has a different control system)
    Contrary to protocol, the CO issued orders, without announcing that he was taking direct control, and then didn't keep a firm grasp of the situation.
    Insufficient bridge watchstanding experience in general in the US Navy officer corps, partially due to the generalist nature of US Navy surface officers, rather than the specialization found in the Royal Navy for example. As highlighted by a USN officer: "âoePeople squeak through the system. They may be great officers and they may great engineers, but they might not have had a lot of time handling ships in busy waterways,â McGuffie told USNI News in an interview.
    âoeWe have guys that are commanding ships right now that have 400, 500 hours of bridge watchkeeping time in their career.â

    In contrast, as the bridge officer on a Royal Navy frigate for a six-month deployment, McGuffie stood watch for more than 2,000 hours â" all of them logged"

    The Fitzgerald was both better and worse. The OOD had 0 situational awareness, ignored technical tools such as AIS that'd have given him sufficient situational awareness, ignored warnings by the junior OOD, insufficient lookouts posted(none on starboard side), the OOD had no knowledge of the TSS(despite being based out of Yokohama!!!!), and the TSS was not mentioned in the navigation briefing.

    And, as on all USN surface warfare ships, non-pilots seem to be chronically sleep-deprived.

    So, you have systematic issues at multiple levels, of which the UI was just one small part

    1. Re:Ars Technica showing how far they've sunk again by techno-vampire · · Score: 5, Informative

      Contrary to protocol, the CO issued orders, without announcing that he was taking direct control, and then didn't keep a firm grasp of the situation.

      I've been in the US Navy and I've served Bridge Watches. Any time the Captain gives a direct order to the helm, or directly orders a change in speed, he automatically has the con, and retains it until he says otherwise. This is so that there's no time wasted in an emergency when the time saved may make the difference between a collision and a near miss. Yes, most of the time he goes through the proper protocol for taking over, but he's the only person who doesn't have to, and it's his decision whether or not there's time to jump through the hoops.

      --
      Good, inexpensive web hosting
  7. On-screen throttle controls? by drinkypoo · · Score: 3, Interesting

    WTF is this, star trek?

    They don't need reconfigurable controls, do they? Wouldn't it make more sense to have discrete controls? They can be electronic displays if that's your thing, but probably shouldn't be.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  8. Re:The Fourth US Navy Collision of the Year... by techno-vampire · · Score: 2

    I don't blame the training either, or the lack of it.

    I do. As I've written elsewhere, I'm ex-Navy. If every shift of bridge crew had been properly trained, and there'd been regular drills, everybody would have known exactly what to do and would have done it automatically, without even needing to think about it. It's just like knowing how to hit the brakes and swerve to avoid a crash when you're driving your car. If you were properly taught in the first place, you don't think about it, you just do it, and this is no different. The big problem here is, people who don't think that the requirements for training and drills applies to them, when it's intended to apply to everybody without exception.

    --
    Good, inexpensive web hosting
  9. Where was the ECDIS by MountainLogic · · Score: 2

    I was part of the team that shipped the first ECDIS' to the the Navy over 20 years ago. Electronic Chart Display and Information System are the marine equivalent to aircraft automated flight navigation controls. ECDIS was in response to the Valdez finding a rock and folks asking why can ships' navigation systems do that planes can do? The charts are "smart" and will not let you plan a route over too shallow of an area. I know our product was on the Enterprise and Constellation 20 years ago. Why are they not on these smaller ships? FYI, back then the navigator on these nuclear aircraft carriers (yes there was a specific officer assigned to this) also had a sextant, watch, paper charts and compass, just in case.

  10. Oy, configurable controls... by Radical+Moderate · · Score: 2

    I guess it sounds good in theory to have controls that can be configured to allow a single person or multiple people, as needed, drive the ship. Until this happens. What's the point? One less body on the bridge, saving a few bucks? On a warship that costs billions of dollars, a few redundant personnel at the controls seems like cheap insurance.

    --
    Never let a lack of data get in the way of a good rant.
  11. Brannigan strikes again! by thygate · · Score: 2

    I'm pretty sure the Officer of the Deck's name was Zapp Brannigan.

  12. If it's not clear, it's bad by definition by raymorris · · Score: 4, Insightful

    > The helmsman sent all control (not just throttle) the the other station.

    And neither he nor the anyone else looking at the situation didn't realized all control had been sent away, because the UI didn't gray out of the inactive controls or anything. Two people looked at it and couldn't tell it had been inactivated. Guess which controls are disabled here:

    https://upload.wikimedia.org/w...

    > The second helmsman throttled down only one engine.

    When he too couldn't tell that a) he had control of steering or that b) the engined weren't ganged. Again, try to figure out which controls are ganged and which aren't:

    http://3.bp.blogspot.com/_IOWi...

    It's not hard to make it obvious.