Slashdot Mirror


The Fourth US Navy Collision of the Year Was Ultimately Caused By UI Confusion (arstechnica.com)

Yesterday, the U.S. Navy issued its report on the collisions of the USS Fitzgerald and USS John S. McCain this summer, which was the fourth U.S. Navy collision this year. "The Navy's investigation found that both collisions were avoidable accidents," reports Ars Technica. "And in the case of the USS McCain, the accident was in part caused by an error made in switching which control console on the ship's bridge had steering control. While the report lays the blame on training, the user interface for the bridge's central navigation control systems certainly played a role." From the report: According to the report, at 5:19am local time, the commanding officer of the McCain, Commander Alfredo J. Sanchez, "noticed the Helmsman (the watchstander steering the ship) having difficulty maintaining course while also adjusting the throttles for speed control." Sanchez ordered the watch team to split the responsibilities for steering and speed control, shifting control of the throttle to another watchstander's station -- the lee helm, immediately to the right (starboard) of the Helmsman's position at the Ship's Control Console. While the Ship's Control Console has a wheel for manual steering, both steering and throttle can be controlled with trackballs, with the adjustments showing up on the screens for each station. However, instead of switching just throttle control to the Lee Helm station, the Helmsman accidentally switched all control to the Lee Helm station. When that happened, the ship's rudder automatically moved to its default position (amidships, or on center line of the ship). The helmsman had been steering slightly to the right to keep the ship on course in the currents of the Singapore Strait, but the adjustment meant the ship started drifting off course.

At this point, everyone on the bridge thought there had been a loss of steering. In the commotion that ensued, the commanding officer and bridge crew lost track of what was going on around them. Sanchez ordered the engines slowed, but the lee helmsman only slowed the port (left) throttle, because the throttle controls on-screen were not "ganged" (linked) at the time as the result of the switch-over of control. The ship continued to turn uncontrolled to port -- putting the ship on a collision course with the Liberian-flagged chemical carrier Alnic MC.

18 of 220 comments (clear)

  1. Damn developers... by Frosty+Piss · · Score: 4, Insightful

    See? This is what happens when the project team is made up of "full-stack" developers - no one knows how to code a decent UI... That, and the whole thing was written in Angular...

    --
    If you want news from today, you have to come back tomorrow.
    1. Re:Damn developers... by magarity · · Score: 4, Interesting

      This is what happens when people get too caught up in method A that they forget about method B. The ship has a steering wheel. If the trackball method seems out of whack for even a second, someone should grab the physical wheel while the video game steering is diagnosed.

    2. Re:Damn developers... by Inviska · · Score: 5, Interesting

      I'd much rather have a programmer design the user interface than a UX designer. With a programmer you usually get a logical, well constructed interface that follows standards and offers easy access the software's functionality. Meanwhile, most UX designers turn up and say, "let's recreate the interface with flat design, remove all the colours, hide all the options, remove all customisation, spread the buttons all over the place, and after we've finished let's redesign the whole thing again next year."

      I've used Windows and commercial applications all my life, but in recent years I've found myself using free open source software far more, and Windows 10 has me moving to Linux. This isn't for idealogical reasons, but with free software the developer generally creates the user interface, so you get something that's usable. Commercial software tends to bring in UX designers who have a nasty habit of taking good software and rendering it totally worthless.

    3. Re:Damn developers... by ShanghaiBill · · Score: 5, Insightful

      With a programmer you usually get a logical, well constructed interface

      Gimp is an obvious counterexample.

    4. Re:Damn developers... by bobbied · · Score: 5, Insightful

      Actually...

      As I understood the article, the issue was that the physical wheel that controlled the rudder can be moved electronically between multiple locations. The same is true with the throttles. The problem here was the physical control location got switched accidently and they lost track of where it went.

      A good UI would have two key features. First, it would have a visual indicator at ALL possible control locations where the one primary physical control was currently configured. Second, it would provide some kind of warning both when the primary control location was changed and when any physical control which was not primary was being moved.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    5. Re:Damn developers... by LesFerg · · Score: 3, Interesting

      Yes but if you had more than one control, and one stopped working, wouldn't your first thought be to try the other one?
      I can't accept everybody just ran about waving their hands in the air shouting "we've lost steering control".

      I agree it is reasonable to expect an indicator of which device is active, and preferably each inactive device should have an indicator to show which one was in use, couldn't take more than a few Arduino's and some LEDs. heh.

      --
      If I had a DeLorean... I would probably only drive it from time to time.
    6. Re:Damn developers... by John.Banister · · Score: 4, Informative

      Most of the civilian boats on board which I've worked have a button at each station: "give control to this station right here." You don't have to find the station that has control to release it. You just take it where you stand. I can understand that the Navy might want to temporarily disable that sort of capability (perhaps using a physical key at the station from which control cannot be taken) if they had immediate concerns about hostile actors on the bridge, but not to have the capability at all seems destined to cause just this sort of problem.

      On boats with this system, the "take command" button is lit on the station that currently has command. Also, they generally require the controls at the incoming station to be in "neutral" before command can be taken - the response to the change to neutral is delayed enough on changing stations that you can switch the steering back to autopilot and move the throttles quickly back to the position from the former station without hassling the course or propulsion engines.

    7. Re:Damn developers... by rwise2112 · · Score: 3, Insightful

      Yes but if you had more than one control, and one stopped working, wouldn't your first thought be to try the other one? I can't accept everybody just ran about waving their hands in the air shouting "we've lost steering control".

      I agree it is reasonable to expect an indicator of which device is active, and preferably each inactive device should have an indicator to show which one was in use, couldn't take more than a few Arduino's and some LEDs. heh.

      Good points. Even better would be a button 'take control here'.

      Either way the system is too complex. They are confused while just sailing along. Can you imagine if there was a war on, and they were getting shot at or something!

      --

      "For every expert, there is an equal and opposite expert"
  2. Many problems caused this by jfdavis668 · · Score: 4, Interesting

    Yes, the displays could be improved, but there were many issues involved. The proper crew members were not on the bridge. The captain had let them sleep an extra hour, so the most experienced crew were still at breakfast. The crew involved were not experienced enough to make quick changes to the ship configuration in a critical situation. Lesson learned, don't get in a critical situation you know will happen with the back up crew. Another good point - don't have just one set of high quality bridge crew-members.

    1. Re:Many problems caused this by Calydor · · Score: 5, Insightful

      A better point might be to not have an elite team and a standard team, but to mix and match between the different shifts so there's always a couple of highly experienced guys around.

      --
      -=This sig has nothing to do with my comment. Move along now=-
    2. Re:Many problems caused this by Shinobi · · Score: 5, Insightful

      One of the issues that has been highlighted is how little bridge watchkeeping experience US Navy officers(including CO's) can rack up in their careers, hour counts that wouldn't even qualify them as a 3rd mate on a commercial coast freighter, much less anything really big:

      https://www.usni.org/magazines...

      And from another article, published more recently:

      "Mitch McGuffie, a former U.S. surface warfare officer who served in an exchange with the U.K. Royal Navy for two years as a bridge officer, said that other navies place a higher value on navigation and ship handling than Americans.

      âoeI was the go-to office of the deck on my first tour, and I thought I knew a lot of stuff. And then I went to the Royal Navy and I went through their navigator school, and it was the hardest class that I have ever gone through, with a 50-percent attrition rate,â he said.

      British sailors specialize in a specific discipline at sea, unlike the U.S. surface warfare officers that are generalists. As a result, narrow specialties like navigation or bridge watches maybe given short shrift.

      âoePeople squeak through the system. They may be great officers and they may great engineers, but they might not have had a lot of time handling ships in busy waterways,â McGuffie told USNI News in an interview.
      âoeWe have guys that are commanding ships right now that have 400, 500 hours of bridge watchkeeping time in their career.â

      In contrast, as the bridge officer on a Royal Navy frigate for a six-month deployment, McGuffie stood watch for more than 2,000 hours â" all of them logged."

    3. Re:Many problems caused this by Shinobi · · Score: 4, Interesting

      In the Royal Navy, officers are specialized for their roles, so as a bridge officer, yes, he'd spend most of his duty time on the bridge.

      And if they ran the Traditional 2 Section RN dogged watch, he'd have spent on average 36h on watch every 72 hour period. Which would give you 2160h watch hours logged.

  3. Some things never change by Tablizer · · Score: 4, Funny

    https://www.youtube.com/watch?...

    Who's controlling it?

    What's "it"?

    The ship!

    You are, right?

    Only the rudder.

    Whose controlling the propellers then?

    I thought you were.

    No, I thought you were!

    Let's ask Mikey. Mikey, are you controlling the propellers?

    I was earlier, but I thought you guys took control of them. See, the red icon is on.

    That's not a red icon, that's the object we are about to collide with...

  4. No cyber, no other nations? by AHuxley · · Score: 4, Insightful

    Just design, humans, contractors and internal gov/mil policy.
    Who would have expected not having a good design and testing that design with crews would have been an issue?
    How to do a "navy".
    1. Your crews have to have skills. Find the best people to work in your navy. Give them the wages, support and education they need.
    2. Read up on how other winning nations did the "navy" design over the many, many years.
    Saying a ship is new or a different "design" is no excuse.
    The UK built its Dreadnought https://en.wikipedia.org/wiki/... having to consider new designs and new ideas. The new parts got made with skill and people worked very hard to get the new design ready.
    Any unexpected issues got corrected by real engineers and top experts before they became an issue for the navy.

    Find the experts, test things a lot, have good crews and ensure the skill sets are ready.

    --
    Domestic spying is now "Benign Information Gathering"
  5. Ars Technica showing how far they've sunk again by Shinobi · · Score: 5, Informative

    Despite Ars Technica's single-minded view on the incident, there were multiple levels of failure, including but not limited to:

    Insufficient lookouts
    Overcrowded bridge interior
    Insufficient training(What Ars Technica neglects(possibly deliberately) to mention is that parts of the crew on watch on the bridge were on temporary assignment from the cruiser Antietam, which according to the report has a different control system)
    Contrary to protocol, the CO issued orders, without announcing that he was taking direct control, and then didn't keep a firm grasp of the situation.
    Insufficient bridge watchstanding experience in general in the US Navy officer corps, partially due to the generalist nature of US Navy surface officers, rather than the specialization found in the Royal Navy for example. As highlighted by a USN officer: "âoePeople squeak through the system. They may be great officers and they may great engineers, but they might not have had a lot of time handling ships in busy waterways,â McGuffie told USNI News in an interview.
    âoeWe have guys that are commanding ships right now that have 400, 500 hours of bridge watchkeeping time in their career.â

    In contrast, as the bridge officer on a Royal Navy frigate for a six-month deployment, McGuffie stood watch for more than 2,000 hours â" all of them logged"

    The Fitzgerald was both better and worse. The OOD had 0 situational awareness, ignored technical tools such as AIS that'd have given him sufficient situational awareness, ignored warnings by the junior OOD, insufficient lookouts posted(none on starboard side), the OOD had no knowledge of the TSS(despite being based out of Yokohama!!!!), and the TSS was not mentioned in the navigation briefing.

    And, as on all USN surface warfare ships, non-pilots seem to be chronically sleep-deprived.

    So, you have systematic issues at multiple levels, of which the UI was just one small part

    1. Re:Ars Technica showing how far they've sunk again by techno-vampire · · Score: 5, Informative

      Contrary to protocol, the CO issued orders, without announcing that he was taking direct control, and then didn't keep a firm grasp of the situation.

      I've been in the US Navy and I've served Bridge Watches. Any time the Captain gives a direct order to the helm, or directly orders a change in speed, he automatically has the con, and retains it until he says otherwise. This is so that there's no time wasted in an emergency when the time saved may make the difference between a collision and a near miss. Yes, most of the time he goes through the proper protocol for taking over, but he's the only person who doesn't have to, and it's his decision whether or not there's time to jump through the hoops.

      --
      Good, inexpensive web hosting
  6. On-screen throttle controls? by drinkypoo · · Score: 3, Interesting

    WTF is this, star trek?

    They don't need reconfigurable controls, do they? Wouldn't it make more sense to have discrete controls? They can be electronic displays if that's your thing, but probably shouldn't be.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  7. If it's not clear, it's bad by definition by raymorris · · Score: 4, Insightful

    > The helmsman sent all control (not just throttle) the the other station.

    And neither he nor the anyone else looking at the situation didn't realized all control had been sent away, because the UI didn't gray out of the inactive controls or anything. Two people looked at it and couldn't tell it had been inactivated. Guess which controls are disabled here:

    https://upload.wikimedia.org/w...

    > The second helmsman throttled down only one engine.

    When he too couldn't tell that a) he had control of steering or that b) the engined weren't ganged. Again, try to figure out which controls are ganged and which aren't:

    http://3.bp.blogspot.com/_IOWi...

    It's not hard to make it obvious.