3 ms·

>When designing a critical system such as an aircraft, you must include human authority into it This is where Boeing messed up big time. According to the artic

>When designing a critical system such as an aircraft, you must include human authority into it This is where Boeing messed up big time. According to the article they only had 2 AoA sensor, completely missing the fact that what happens if one sensor fails and which is correct. Airbus has 3, but IMO a critical component like an AoA sensor there should be 5 + additional inputs from the artificial horizon should be considered. >You cannot design an unoverrideable automatic mechanism. Yes, it makes sense. Even a complete automatic mechanism would need functionality to override in case things go completely haywire.

magduf 8y ago
>This is where Boeing messed up big time. According to the article they only had 2 AoA sensor, completely missing the fact that what happens if one sensor fails and which is correct. No, you missed something really critical in all this. There are 2 AoA sensors, however only 1 of them is used as input for the MCAS system. There was no redundancy whatsoever! The proposed software patch will use both AoA sensors, and light an indicator light if they disagree. They don't want to retrofit the planes with 3 sensors like Airbus, because obviously Boeing cares more about profits than safety and good engineering.