Re:How the Boeing 737 Max disaster looks to a software Devel...
by cjbprime on Thursday April 18, 2019 @09:43PM
(#19696385)
Boeing put out an emergency airworthiness directive after Lion Air. It doesn't tell pilots to lower flaps. AoA sensor failure causes IAS Unreliable warnings, and the checklist for that item demands that flaps be left alone -- if you don't know how fast you're going, lowering flaps could cause a wing stall.
It's not reasonable to expect pilots to disobey checklists. We would all be less safe if they did. If pilots are following Boeing's instructions and planes are crashing, that's on Boeing.
Re:How the Boeing 737 Max disaster looks to a software Devel...
by metanoia on Friday April 19, 2019 @01:56AM
(#19697389)
One question I've had is why Boeing changed the design of the stab cutout switches from the 737NG from a pair of switches - the right side switch that disabled the autopilot control of trim and the left side that disabled the trim motors entirely [1] - to a design with a similar pair of switches, but each controlling the primary and backup control motors of the elevator trim [2] instead of controlling the source of the input. (If you look closely at the yoke trim switches, there are two independent switches that are grouped together by a frame so that they move simultaneously. One drives the primary motor, and the other the secondary).
Assuming they'd kept MCAS on the switch associated with the automatics, the procedure would have been to throw the AUTO PILOT switch, disabling MCAS, but keeping the MAIN ELEC switch on, allowing them to trim back to neutral for that speed.
[1] https://www.airliners.net/photo/Australia-Air-Force/Boeing-7...
Re:How the Boeing 737 Max disaster looks to a software Devel...
by metanoia on Friday April 19, 2019 @01:32PM
(#19701350)
EDIT: Oops, there's only one trim motor on the NG. Both trim switches must be actuated on the yoke switches though. But the input cutoff switches still work the same way I originally stated.
Not sure about the Max's # of trim motors, but the Max definitely doesn't have input source cutoff switches.
Turning on autopilot also disables MCAS, though this isn’t entirely effective since spurious AoA readings may quickly disable the autopilot again.