This works until two sensors fail in the same direction: >The aircraft's computers received conflicting information from the three angle of attack sensors. The

This works until two sensors fail in the same direction: >The aircraft's computers received conflicting information from the three angle of attack sensors. The aircraft computer system’s programming logic had been designed to reject one sensor value if it deviated significantly from the other two sensor values. In this specific case, this programming logic led to the rejection of the correct value from the one operative angle of attack sensor, and to the acceptance of the two consistent, but wrong, values from the two inoperative angle of attack sensors. This resulted in the system's stall protection functions responding incorrectly to the stall, making the situation worse, instead of better. https://en.m.wikipedia.org/wiki/XL_Airways_Germany_Flight_888T https://en.m.wikipedia.org/wiki/XL_Airways_Germany_Flight_88...