The thing is 1829 didn't crash, the pilots got an alert, figured out the problem, took manual control, and flew the plane. Defense in layers. It would be idea

The thing is 1829 didn't crash, the pilots got an alert, figured out the problem, took manual control, and flew the plane. Defense in layers. It would be ideal to use different technologies for the AoA sensors to help minimize common-mode failures. Integration and crosschecking against other systems (IMU, radar altimiter, DGPS, an open-loop model of the plane based on engine settings and control surface positions, etc) could give the pilots and flight envelope protection systems a better understanding of their situation. Also, the signature of a failed/frozen vane-type AoA sensor is pretty obvious and I'm surprised the software doesn't take that into account. Good writeup on LH-1829: http://avherald.com/h?article=47d74074 http://avherald.com/h?article=47d74074