3 ms·

Yes, but not as high-stakes as an autopilot in a commercial aircraft!

• argiopetech 2y ago
  Perhaps, but there are a pilot and first officer to take over if the autopilot goes out. You better be in the OR if your titanium heart tries to kill you...
• iancmceachern 2y ago
  Exactly. And systems for commercial aircraft are actually designed (by law) to be dual fault tolerant. This means that all safety critical systems on an airliner need to have 3 filly redundant, independent systems and each needs to be able to function without the other two. In even class III (implantable and safety critical meaning the patient is harmed or killed if they fail) medical devices are only required to be single fault tolerant.
  • shiroiushi 2y ago
    >And systems for commercial aircraft are actually designed (by law) to be dual fault tolerant. Not true. Proof: Boeing 737MAX MCAS system, which relies on only one sensor, and when that sensor ices up, causes the aircraft to fly into the ground, killing many hundreds of people in two separate incidents. This design was fully approved by the FAA.
    • iancmceachern 2y ago
      Yeah, that's a famous example of a failure in the process. The deal there was the MCAS system was originally designed such that it was thought to be not safety critical. It relied on another sensor that was also non safety critical in its other uses. But then over time Boeing made changes that made it safety critical, and rather than upgrade the hardware they put some footnotes in the manual and expected pilots to do things to avert disaster, but then they didnt properly train pilots to those changes to their duties. It was a comedy of errors on many levels. None of it changes my parent comment.