![]() |
Originally Posted by LarryJ
(Post 31108423)
Unscheduled MCAS activation was not categorized as severe enough to require a fail-passive backup which is why it was certified to work based on a single input. This categorization was based on the expectation that the existing stabilizer runaway procedure would be used to stop runaway and prevent a loss of control. After the first accident, Boeing began work on a software update to upgrade the system so that it would meet the higher standard by using dual AoA inputs and inhibiting activation when a disagreement was detected. The second accident occurred before that update was completed.
1. Do you now feel that this was the correct categorization (of course hindsight is 20/20...)? 2. Who made this categorization? My understanding (from media reports) is that it was Boeing. 3. Would you agree that the FAA should be making these decisions rather than Boeing? It seems like the whole point of having the FAA is to take the decision about what is "safe enough" away from the people who have an economic interest in the outcome, to avoid any conflict of interest. |
Originally Posted by LarryJ
(Post 31108423)
The procedure is the same on the NG and MAX. There never has been any difference. The procedure has not changed.
Originally Posted by LarryJ
(Post 31108423)
It is not. Trimming electronically is not mentioned in the procedure. It's something you do like keeping the wings level, pitch attitude set, maintaining airspeed, etc. Unless the failure prevents the primary electric trim from working, you would be expected to keep the airplane (close to) in-trim with primary trim as the stabilizer runaway procedure is accomplished.
Originally Posted by LarryJ
(Post 31108423)
That isn't unusual and not limited to Boeing.
During most operations (except autoland), the autopilot that is flying the airplane is doing so based on a single set of inputs. One pitot/static system, one AoA, one inertial reference system, one flight control computer, etc. The flight instruments that I look at are also driven by single sources. The other pilot's instruments are driven by a different set of single sources. The redundancy comes from having the separate systems so discrepancies can be identified and the faulty inputs isolated. ... During the certification process a failure analysis is conducted and each failure mode is categorized based on the severity of the failure. Failure modes categorized with higher severity categories require more comprehensive backups ... Unscheduled MCAS activation was not categorized as severe enough to require a fail-passive backup which is why it was certified to work based on a single input. This categorization was based on the expectation that the existing stabilizer runaway procedure would be used to stop runaway and prevent a loss of control. After the first accident, Boeing began work on a software update to upgrade the system so that it would meet the higher standard by using dual AoA inputs and inhibiting activation when a disagreement was detected. The second accident occurred before that update was completed.
Originally Posted by LarryJ
(Post 31108423)
The pitch attitude shouldn't change. When the airplane goes out-of-trim the pilot (or autopilot) holds pressure on the control column to maintain the desired pitch attitude while retrimming the stabilizer. The pilot will recognize the stabilizer runaway condition when the airplane repeatedly trims itself out of trim despite multiple pilot corrections. If flown properly, the pitch attitude will not change during this process.
That said, in context, I believe what I wrote makes sense, but is incomplete. Perhaps I should say, if you find yourself in a situation where your nose is down, you want to correct that before disabling the electric stabilizer. Again, I'm basing this upon reports of the ET crew cutting off the stabilizer while badly out of trim, resulting in needing to turn the manual trim wheel with excessive force to attempt to control the pitch..
Originally Posted by LarryJ
(Post 31108423)
At the top of our Quick Reference Checklist, the first place we go for a non-normal or emergency checklists, are the words, "FLY THE AIRCRAFT -- SILENCE THE WARNING -- CONFIRM THE EMERGENCY". That is to remind us of our priorities for working through the situation and making sure that we are accomplishing the correct procedures all while always keeping our first priority; flying the airplane.
Thank you again for taking the time to provide your insight.
Originally Posted by VegasGambler
(Post 31108499)
2. Who made this categorization? My understanding (from media reports) is that it was Boeing.
3. Would you agree that the FAA should be making these decisions rather than Boeing? |
Originally Posted by jsloan
(Post 31107899)
Consider driving a car. If the car stalls, do you immediately wonder if there's a problem with the air intake, fuel injection system, or maybe you got some low-quality gas? Or do you attempt to clear the car from the road and get to safety before you start trying to diagnose the problem?
The same thing is true for a pilot. With 20/20 hindsight, it's easy to say that Boeing should have included specific training on this system. But what would the training have consisted of? "If the aircraft keeps nosing down, disengage the automatic stabilizer." But that's exactly what you're supposed to do if you can't control the pitch of the aircraft in the first place. There is no time, in an emergency situation, to diagnose the cause of a failure. There's plenty of time to do that after the plane has landed. The entire focus should be upon resolving the situation. Now, to be clear -- if there were some special MCAS failure mode that needed to be differentiated from other runaway stabilizer situations, then, of course it should have bene included. "If you notice the plane nose down, and, after 15 seconds, it noses down again, do X, Y, Z, but if it only happens once, do A, B, C." As far as we know, there is no such thing. Boeing decided to add a layer of "Airbus" technology without telling anyone, without telling the FAA, buyers, or the pilots. That is a problem. The fleet is grounded. Boeing will lose money. As a Boeing fan I want to see this aircraft back in the air as quickly as possible, but I want it done properly, without hidden features. |
Originally Posted by cmd320
(Post 31106946)
Not similar at all. This was a case of pilot error (ET409). Vastly different from the 737 MAX which flies itself into the ground.
Originally Posted by jsloan
(Post 31107899)
Now, to be clear -- if there were some special MCAS failure mode that needed to be differentiated from other runaway stabilizer situations, then, of course it should have bene included. "If you notice the plane nose down, and, after 15 seconds, it noses down again, do X, Y, Z, but if it only happens once, do A, B, C." As far as we know, there is no such thing.
Originally Posted by LarryJ
(Post 31108003)
This characterisation of the system is not accurate. The technical accuracy of the news reporting on the 737 MAX has been dismal. Even the better reports have errors such as repeatedly calling MCAS a stall prevention system. Conclusions based on flawed reports are similarly flawed.
The DFDR data from the incident, and two accident, flights shows that the airplane can be kept in-trim indefinitely through the use of primary electric trim. The "computer" (Speed Trim System) can not override that. This matches with the expected performance of the system. |
Originally Posted by COSPILOT
(Post 31108591)
The difference is I don't face a life or death situation in a car if it stalls, I have the luxury of pulling over to the side of the road. If my engine on the airplane fails, I have the luxury of looking for some sort of landing location. I might damage the airplane, but my goal is to survive. Boeing did something very different, it added something that at best gives you seconds to respond.
Boeing decided to add a layer of "Airbus" technology without telling anyone, without telling the FAA, buyers, or the pilots. That is a problem. The fleet is grounded. Boeing will lose money. As a Boeing fan I want to see this aircraft back in the air as quickly as possible, but I want it done properly, without hidden features. We’re may have to agree to disagree |
Originally Posted by jsloan
(Post 31107698)
When the final reports come out -- which won't be for at least a year on the ET crash -- some of the blame will almost certainly be ascribed to the pilots for failing to recognize and correct the emergency situation. I have no wish to speak ill of the dead, and I don't mean to exonerate the aircraft entirely, but framing it as though the pilots had no control at all is inaccurate.
|
Originally Posted by VegasGambler
(Post 31108499)
1. Do you now feel that this was the correct categorization (of course hindsight is 20/20...)?
I have not seen any data to indicate that this initial categorization was inconsistent with the certification requirements. In other words, I have not seen anything that indicates that the original design did not meet the applicable certification requirements. As far as I can tell, it did. After the first accident, Boeing made the decision to treat MCAS as a higher-level failure and began work on the necessary software modifications. If that determination had found that the original system failed to meet certification requirements then the fleet would have been grounded at that time. Certification standards are minimum standards that manufacturers, and operators, routinely exceed. 2. Who made this categorization? My understanding (from media reports) is that it was Boeing. 3. Would you agree that the FAA should be making these decisions rather than Boeing? The FAA sets the certification standards. Manufacturers are tasked with meeting those standards. The FAA oversees the process, reviews the data, and often makes additional requests or requirements of the manufacturer before certification is granted. This is similar to how a building inspector interacts with a building contractor. I believe it is very common throughout government agencies that have a safety oversight role. The FAA would have reviewed Boeing's classification of MCAS and had the option to accept it, reject it, or make additional requirements to be met before granting acceptance. |
Originally Posted by jsloan
(Post 31107828)
The title card alone was enough to convince me that it was sensationalism and not a serious attempt at journalism.
|
Originally Posted by DenverBrian
(Post 31108689)
Don't judge a book by its cover. TV is designed to grab eyeballs, so there is naturally going to be some attempt to grab those eyeballs. After that title card is some important information, including from Dennis Tajer at AA. Given his experience and position at AA representing the APA, I would think other pilots would give his words at least a minimum of deference.
The information provided by multiple very experienced flight crews and engineers in the 60 Minutes report is quite alarming. When you have the head of the AA pilot’s union stating that he doesn’t have confidence in the aircraft in its current state, that’s pretty clear. |
USA Today reports that the software fix is complete, and now it's in the hands of the FAA.
|
Originally Posted by TWA884
(Post 31108682)
I am not confident that the Ethiopian Civil Aviation Authority will produce an unbiased report. I am troubled by the preliminary report findings, which were released on April 2 by the Ethiopian Minister of Transport, that crew followed the recommended emergency recovery procedures.
|
Originally Posted by VegasGambler
(Post 31108499)
A few questions here:
1. Do you now feel that this was the correct categorization (of course hindsight is 20/20...)? 2. Who made this categorization? My understanding (from media reports) is that it was Boeing. 3. Would you agree that the FAA should be making these decisions rather than Boeing? It seems like the whole point of having the FAA is to take the decision about what is "safe enough" away from the people who have an economic interest in the outcome, to avoid any conflict of interest. 2. The manufacturer, as always. 3. lol nope. The FAA wrote the regs and acceptable means of compliance, and verifies you followed them, that's their safety role. Same as EASA, the other tier 1 regulator IMO. |
Originally Posted by mduell
(Post 31109357)
1. Yes, I think DAL C is the correct categorization of MCAS. DAL C has an expected failure rate of 1 per 100,000 flight hours or better. The failure is significant, but has a lesser impact than a Hazardous failure (for example, leads to passenger discomfort rather than injuries) or significantly increases crew workload (safety related).
|
Originally Posted by VegasGambler
(Post 31109386)
What about the likelihood that the failure kills everyone on board?
|
Originally Posted by worldclubber
(Post 31097629)
Some facts are on the table: 300+ people died when two new planes of the same type ended up in a fireball. Exactly! Boeing had responsibility for those 350 people who being killed. That's big problem! |
| All times are GMT -6. The time now is 7:59 am. |
This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.