3 ms·
It's worse than this. MCAS is designed to only look at one of the two AoA sensors. If this happens to be faulty, it doesn't know, because it's not comparing the
by _archon_ 8y ago
It's worse than this. MCAS is designed to only look at one of the two AoA sensors. If this happens to be faulty, it doesn't know, because it's not comparing the sensor to the other one. Instead of a system which can notice and account for disagreeing sensors and fail gracefully, we have a system which is a designed single point of failure and fails... lethally.
- kevin_thibedeau 8y agoYou can't handle faults with only two sensors since you won't know which one to trust. At least three would be needed for a minimal level of redundancy.
- __turbobrew__ 8y agoYou can handle faults by disabling the MCAS system which is a lot better than the current solution of diving the nose into the ground.