News for hackers. Stuff that matters.
Re:Boeing Believed a 737 Max Warning Light Was Standard by AnssiH on Sunday May 05, 2019 @07:45PM (#19835802)
The "light" is just a warning text that appears on the flight display, so the "no light installed" and "light installed but off" states are not distinguishable (as far as I have understood it).

http://www.boeing.com/resources/boeingdotcom/commercial/737m...

Re:Boeing Believed a 737 Max Warning Light Was Standard by inferiorhuman on Sunday May 05, 2019 @07:48PM (#19835810)
The "light" is just a warning text that appears on the flight display, so the "no light installed" and "light installed but off" states are not distinguishable (as far as I have understood it).

They're absolutely different. If you're a pilot and you expect to see an error message when the two alpha vanes disagree, you'll be lulled into a false sense of security when that text never appears even in the case of a failure.

A pilot needs to be able to trust all of the instruments in the plane.

Re:Boeing Believed a 737 Max Warning Light Was Standard by spectre256 on Monday May 06, 2019 @07:54AM (#19838543)
I'm a pilot, and absolutely this is a crucial difference.

It also reminds me of a time years ago when a team I was on had to extend a Memcache client library, as it couldn't differentiate between the following two conditions:

- "I tried to retrieve a key from cache but was unsuccessful (due to connection error, etc)"

- "I tried to retrieve a key from cache but determined conclusively that key does not exist in the cache"

If it was important for a caching layer on our silly social game, the same thing is clearly important in aviation.

Re:Boeing Believed a 737 Max Warning Light Was Standard by segmondy on Monday May 06, 2019 @09:36AM (#19839249)
Most people experience the same when using DB, NULL in a database is hard to distinguish from, data never stored or data don't exist.
Re:Boeing Believed a 737 Max Warning Light Was Standard by kbenson on Monday May 06, 2019 @11:06AM (#19840087)
Do you mind explaining what you mean? To my knowledge, inspecting the number of rows returned eliminates this problem.
Re:Boeing Believed a 737 Max Warning Light Was Standard by RHSeeger on Monday May 06, 2019 @12:20PM (#19840851)
I think he's referring to something like a row with First, Middle, and Last name fields. If the Middle name field is null, does it mean "we don't known this value" or "this value is <nothing> (the person doesn't have a middle name)". For most database schemas, there is no way to tell the difference between the two states.
Re:Boeing Believed a 737 Max Warning Light Was Standard by nradov on Tuesday May 07, 2019 @10:01AM (#19849379)
While this is overkill for most applications, the HL7 V3 data types used in healthcare even have multiple different "flavors" of null. So you can distinguish between "no information", "unknown", "not asked", etc.

https://www.hl7.org/implement/standards/product_brief.cfm?pr...

Re:Boeing Believed a 737 Max Warning Light Was Standard by fegu on Tuesday May 07, 2019 @09:11AM (#19849003)
The latter case, no middle name, should be stored as an empty string. In practice, not enough care is devoted to the difference between Null and empty string for text fields.
Re:Boeing Believed a 737 Max Warning Light Was Standard by no-s on Tuesday May 07, 2019 @07:39PM (#19854498)
"First not null, Middle null, Last not null" represents an a priori assumption that everyone has a First, Middle, and Last - but sometimes we don't know what the Middle is. Allowing a zero length string in any of those attributes implies that some rows in a table have First, Middle, or Last represented by a zero length string. What a zero-length string actually means is subject to interpretation and thus beyond the data model.

in the real world it turns out not to be useful to require that people have names just in order to keep data about them...nor does a name particularly distinguish one person from another.

Re:Boeing Believed a 737 Max Warning Light Was Standard by cryptonector on Monday May 06, 2019 @01:26AM (#19837067)
Reminds me of that Red Dwarf episode where Rimmer wants to go to red alert and Kryten asks "are you SURE sir? it does mean changing the bulb!".
Re:Boeing Believed a 737 Max Warning Light Was Standard by MaxBarraclough on Monday May 06, 2019 @04:00PM (#19843186)
Reminds me of a different Red Dwarf moment. Any damage? I don't know, the damage-report machine's been damaged. Apparently they played the same gag twice:

https://youtu.be/1KEHSOPSvhc

https://youtu.be/R49IKBWznOM?t=19

Re:Boeing Believed a 737 Max Warning Light Was Standard by cryptonector on Monday May 06, 2019 @05:34PM (#19844127)
Good one!
Re:Boeing Believed a 737 Max Warning Light Was Standard by lostlogin on Monday May 06, 2019 @04:03AM (#19837595)
I think you’re misinterpreting. The parent means that by design the plane makes the states indistinguishable.
Re:Boeing Believed a 737 Max Warning Light Was Standard by blackflame7000 on Sunday May 05, 2019 @08:12PM (#19835898)
If you see two AoA sensors that aren't in agreement then you can safely assume either one sensor has failed or physics itself has.
Re:Boeing Believed a 737 Max Warning Light Was Standard by phire on Sunday May 05, 2019 @10:43PM (#19836431)
The 737 has AoA sensors by default, the autopilot uses them and the flight computer corrects the flight speed based on the AoA and issues stalling warnings based on the values.

But the display which displays raw AoA readings to the pilots is an optional extra, only 20% of 737 maxes ship with it enabled. Normally pilots (or at least commercial pilots) are trained to fly without referencing the AoA by staying well within the safety margins.

So, if the AoA isn't shown anywhere in the default configuration, there is no way for the pilots to crosscheck them and see the fault. Which is why you need the AoA disagree warning message.

Unfortunately, Boeing messed up and the AoA disagree warning was only enabled on the planes with the AoA display option enabled.

Re:Boeing Believed a 737 Max Warning Light Was Standard by acqq on Monday May 06, 2019 @01:29AM (#19837077)
> if the AoA isn't shown anywhere in the default configuration, there is no way for the pilots to crosscheck them and see the fault. Which is why you need the AoA disagree warning message.

But the article buried the lede!

There is much bigger problem reported now in this article:

The warning wouldn't have helped even when flying with those companies that paid extra for it!

Note:

"“We were told that if the A.O.A. vane, like on Lion Air, was in a massive difference, we would receive an alert on the ground and therefore not even take off,” said Dennis Tajer, a spokesman for the union representing American Airlines pilots. “That gave us additional confidence in continuing to fly that aircraft.”

But in the last several weeks, Boeing has been saying something different. Mr. Tajer said the company recently told American pilots that the system would not alert pilots about any sensor disagreement until the aircraft is 400 feet above the ground."

Note what happens then: at the moment you are above the ground, and the MCAS activates, we already know that if you "just follow the procedure" the forces against pilot corrections could be too big to do anything. That's what can be concluded from the analysis of the Ethiopian crash.

That means the plane from the "20%" with "paid option" would still eventually crash as soon as AoA vanes fail, just there would be one more of many alerts in the cockpit for some short time before everybody dies.

The sense of "security" Boeing gave the American pilots flying for the companies who paid for that additional feature was completely false. They would have been doomed too as soon as a single AoA vane that the MCAS depended on failed: The warning worked only at the moment it was completely useless.

The U.S. MAX planes were grounded the last, yet they were in the same danger as the other planes.

Re:Boeing Believed a 737 Max Warning Light Was Standard by dmix on Monday May 06, 2019 @01:53AM (#19837155)
That's certainly not how the information is presented. But if you read closely you can see how they set it up carefully in the first half.

This is about adding to the narrative of Boeing's "general mismanagement" of the aircraft. Not about adding to the particular 737-800 crash investigation story (directly).

Re:Boeing Believed a 737 Max Warning Light Was Standard by phire on Monday May 06, 2019 @02:06AM (#19837193)
On both the Lion Air and Ethiopian Air crashes, the AoA sensor had failed before takeoff.

So the warning message could have potentially prevented both crashes and anything like it (assuming it activated during the takeoff roll, before V1 and the pilots were trained to abort take off when it happened)

Though you are right, if the AoA sensor had failed halfway though a flight, they still would have had problems.

Re:Boeing Believed a 737 Max Warning Light Was Standard by FabHK on Monday May 06, 2019 @02:33AM (#19837279)
> On both the Lion Air and Ethiopian Air crashes, the AoA sensor had failed before takeoff.

Are you sure? The AvHerald narrative for the Ethiopian Airlines flight:

"The takeoff run was entirely normal, both AoA sensors were in agreement. Shortly after becoming airborne the left AoA sensor however began to deviate and reached a position of about 85 degrees nose up, which obviously triggered the left hand stick shaker motor (and provides a very noisy and distracting cockpit environment), which in turn, different to the 737 NG behaviour (where the AoA does NOT correct the pitot data), also caused the IAS and ALT data to differ from the right hand system, in particular the left IAS became 12 knots higher than the right hand IAS (the preliminary report does not mention that the IAS DISAGREE warning activated however, which would invoke the unreliable airspeed procedures). The captain was pilot flying and focussed to keep the aircraft on track (via the flight director) due to terrain around while at the same time trying to understand why the stick shaker activated. Several required callouts by the first officer did not occur (e.g. speed, ...), as result the crew lost speed as well as thrust control completely out of sight."

As I said somewhere below, I don't think the AoA disagree indication would have made much of a difference here.

http://avherald.com/h?article=4c534c4a/0052&opt=0

Re:Boeing Believed a 737 Max Warning Light Was Standard by acqq on Monday May 06, 2019 @02:29AM (#19837267)
The new information in the article (buried in the last part of it!) is that apparently the warning message just didn't work on the ground at all, even with the already non-functioning sensors, and even if that option was paid for; read it again:

"We were told that if the A.O.A. vane, like on Lion Air, was in a massive difference, we would receive an alert on the ground" ...

"But in the last several weeks, Boeing has been saying something different. Mr. Tajer said the company recently told American pilots that the system would not alert pilots about any sensor disagreement until the aircraft is 400 feet above the ground."

Re:Boeing Believed a 737 Max Warning Light Was Standard by cs02rm0 on Monday May 06, 2019 @02:59AM (#19837366)
Knowing nothing about these things, are the AoA sensors accurate on the ground? I assume they depend on predictable airflow, of which there's initially none and Boeing have to draw the line somewhere as to when they become reliable?
Re:Boeing Believed a 737 Max Warning Light Was Standard by lagadu on Monday May 06, 2019 @05:37AM (#19837961)
Even if they're accurate, due to the ground effect[0] when an airplane is close to the ground it can have significantly higher AoAs without stalling because the stalling speed is so low at those heights.

[0] https://en.wikipedia.org/wiki/Ground_effect_(aerodynamics)

Re:Boeing Believed a 737 Max Warning Light Was Standard by sokoloff on Monday May 06, 2019 @07:34AM (#19838426)
> when an airplane is close to the ground it can have significantly higher AoAs without stalling

No. A wing will stall at a consistent critical angle of attack. Ground effect works by increasing the lift available for a given angle of attack, not by allowing a larger angle of attack to develop.

Parent comment was asking about the need for minimum airspeed to set the AoA sensors into a reliable state such that they could be checked at the gate, though, which is unrelated to ground effect.

Re:Boeing Believed a 737 Max Warning Light Was Standard by FabHK on Monday May 06, 2019 @09:32AM (#19839214)
Not necessarily at the gate, but possibly during taxi and definitely during the takeoff roll (ideally before V_1).

Granted, btw, that AoA readings on the ground may be unreliable - the question remains whether AoA disagree could be detected reliably before takeoff.

Re:Boeing Believed a 737 Max Warning Light Was Standard by sokoloff on Monday May 06, 2019 @10:00AM (#19839444)
If the issue you're worried about is only MCAS related, it seems like the takeoff roll might be a poor place to want to detect it.

An abort just prior to V1 is a no-joke exercise from a safety standpoint. MCAS operation is suppressed with any flaps deployed, so taking an airplane with a failed AoA sensor into the air and troubleshooting/returning to the departure airport if needed or simply flying with an INOP MCAS may very well be safer than a high-speed abort.

Re:Boeing Believed a 737 Max Warning Light Was Standard by FabHK on Monday May 06, 2019 @12:38PM (#19841066)
Good point. Instead of aborting take-off, either do a circuit back WITHOUT retracting flaps, or set Stab Trim switch to CUTOUT and fly to destination trimming manually with the trim wheel? Wonder what pilots are briefed to do currently (well, if MAXes were flying).
Re:Boeing Believed a 737 Max Warning Light Was Standard by FabHK on Sunday May 05, 2019 @08:23PM (#19835953)
Sure. Problem is, if you can see the two disagreeing AoA indications, then you will get the "AoA disagreement" warning light/message, even though you don't need it.

Conversely, if your airline has not ordered the optional AoA indicators, and you'd really want the "AoA disagreement" warning light/message, you don't get it.

Re:Boeing Believed a 737 Max Warning Light Was Standard by bitexploder on Sunday May 05, 2019 @08:18PM (#19835931)
Serious tangent, but the idea of physics failing amuses me. One night we had an Earthquake in an area that basically almost never has them. Gentle shaking. It woke me and my wife up. I remember looking out my window for some sign of nuclear weapons going off or something. Nothing. I blurted out “Earthquake” all in about 10 seconds of processing. Rolled over. Went back to sleep. My wife was anxious the rest of the night and could not sleep from “what if” scenarios. One of her concerns was “what if physics was broken”?!
Re:Boeing Believed a 737 Max Warning Light Was Standard by bobsil1 on Sunday May 05, 2019 @10:18PM (#19836361)
What if the moon’s too bright? https://en.wikipedia.org/wiki/Inconstant_Moon
Re:Boeing Believed a 737 Max Warning Light Was Standard by selimthegrim on Sunday May 05, 2019 @10:45PM (#19836440)
What if it’s only there when someone looks?

https://www.quora.com/Is-the-moon-there-when-nobody-looks-If...

Re:Boeing Believed a 737 Max Warning Light Was Standard by vidanay on Sunday May 05, 2019 @10:40PM (#19836423)
Damn...I read that link as "Incontinent Moon"
Re:Boeing Believed a 737 Max Warning Light Was Standard by mikorym on Monday May 06, 2019 @05:46AM (#19838000)
> One of her concerns was “what if physics was broken”?!

I think this is the wish of very a many physicist as they drink their morning tea and contemplate the day.

Re:Boeing Believed a 737 Max Warning Light Was Standard by magduf on Tuesday May 07, 2019 @06:19PM (#19853977)
No place on the planet is immune to earthquakes, it's just that they're much more common in some places than others (i.e., near fault lines). The continental plates are always under stress and can move at any time.
Re:Boeing Believed a 737 Max Warning Light Was Standard by touisteur on Monday May 06, 2019 @01:02AM (#19836995)
That's kind of the plot of 'Ravages' (https://en.m.wikipedia.org/wiki/Ashes,_Ashes) a French SF novel by Barjavel.

Electricity suddenly stops working.

Re:Boeing Believed a 737 Max Warning Light Was Standard by sgt101 on Monday May 06, 2019 @04:03AM (#19837600)
Re:Boeing Believed a 737 Max Warning Light Was Standard by Haga on Monday May 06, 2019 @02:55AM (#19837348)
So neurons stop working?
Re:Boeing Believed a 737 Max Warning Light Was Standard by jerf on Monday May 06, 2019 @09:04AM (#19839007)
I've seen stories that address that by positing that it turns out that our intuitive understanding of ourselves as fundamentally "simple" entities is in fact correct, and the electricity our neurons used was just an epiphenomenon based on our local conditions. If you physically move your body into another location, suddenly those rules will work on you, and lo, you really will be running on the 4 humors, or whatever other theory is in play.
Re:Boeing Believed a 737 Max Warning Light Was Standard by sowbug on Sunday May 05, 2019 @08:25PM (#19835963)
If they're on either side of the fuselage and you're slipping, it seems like they'd give different readings. Pitots can give misleading readings if you slip away from the side they're on. I've never flown a plane with an angle of attack indicator.
Re:Boeing Believed a 737 Max Warning Light Was Standard by inferiorhuman on Sunday May 05, 2019 @09:18PM (#19836155)
If they're on either side of the fuselage and you're slipping, it seems like they'd give different readings.

Which is why there's a threshold that much be crossed (IIRC ten degrees) before the disagree warning appears.

Re:Boeing Believed a 737 Max Warning Light Was Standard by dreamcompiler on Monday May 06, 2019 @12:02AM (#19836766)
Most of the time when you're slipping close to the ground you're going to also have flaps deployed, in which case the MCAS is inoperative. Your AOA sensors will definitely disagree, but at least the MCAS won't act on them because it doesn't act when flaps are deployed.

If you're slipping without flaps I guess it could still be a problem if the disagreement is outside the epsilon spec. I'm not sure if [normal] slip could ever cause that much disagreement.

Re:Boeing Believed a 737 Max Warning Light Was Standard by bigiain on Sunday May 05, 2019 @08:53PM (#19836069)
I'm now imagining a 737MAX8 in a flat spin...

(I've had the controls of a 172 and a Tiger Moth briefly, but have never _really_ flown a "real plane". I have flat spinned many many rc planes, mostly recovered fine, but also to their occasional doom...)

Re:Boeing Believed a 737 Max Warning Light Was Standard by pdonis on Sunday May 05, 2019 @08:57PM (#19836085)
Or the sensors are on different sides of the plane and the plane is slipping or banking. Which happens routinely during normal flight.
Re:Boeing Believed a 737 Max Warning Light Was Standard by rosser on Sunday May 05, 2019 @08:36PM (#19835997)
While that's (partly) true, it's also pretty irrelevant to whether one can reasonably infer "AoA sensors agree" from the lack of an error notification indicating they don't, when the system that should be providing that notification is, in fact, disabled, because the airline one works for opted not to purchase some premium feature.
Re:Boeing Believed a 737 Max Warning Light Was Standard by SomeHacker44 on Monday May 06, 2019 @08:35AM (#19838804)
Looking at the mechanism of a vaned AoA sensor, I am guessing a fast enough roll would induce disagreement. Probably insufficient in degree to be material, though.
Re:Boeing Believed a 737 Max Warning Light Was Standard by sgustard on Monday May 06, 2019 @12:58AM (#19836976)
Thank you for sharing that image. Now the UX question is: would that small bit of yellow text in a cockpit with hundreds of visible UI elements make any difference?
Re:Boeing Believed a 737 Max Warning Light Was Standard by radiorental on Monday May 06, 2019 @07:39AM (#19838440)
It would imho. If the plane is in a failure mode, the user would search the UI specifically for error messages.

As a UXer I would _assume_ error messages would be in a consistent section of UI real estate. However, even if this is not the case I would expect both experience and training to mitigate the "can't find the error message among all das blinkenlights"

Re:Boeing Believed a 737 Max Warning Light Was Standard by t0mas88 on Tuesday May 07, 2019 @07:57AM (#19848588)
Yes absolutely, all failures are announced in that same place on the PFD.

The pilot flying has eyes on the PFD continuously, only looking away for a few seconds at a time if handling other systems. Essentially when flying instruments you "scan" the 4 primary pieces of information in the middle of that screen every few seconds.

On top of that there is an audible reminder when a new failure annunciator appears, so even if they were on autopilot and not paying attention (rare so early after takeoff) they would hear it and look.

Re:Boeing Believed a 737 Max Warning Light Was Standard by ErikVandeWater on Sunday May 05, 2019 @07:52PM (#19835825)
I see. It is still the same problem where the pilot does not have an indication as to whether the safety feature is telling them that there is not a problem or if the safety feature is not telling them anything about the existence of a problem.
Re:Boeing Believed a 737 Max Warning Light Was Standard by azhenley on Sunday May 05, 2019 @07:51PM (#19835820)
Does a pilot know whether the particular plane has it installed or not?
Re:Boeing Believed a 737 Max Warning Light Was Standard by inferiorhuman on Sunday May 05, 2019 @08:03PM (#19835862)
No, that's the point. All 737 MAX planes were supposed to have an angle of attack disagree annunciator. Boeing thought all 737 MAX planes were sold with a working angle of attack annunciator. Turns out only some of them had working warnings. Boeing discovered that the annunciator would only work under certain configurations but decided that this wasn't serious enough to notify airlines or the FAA. And then Lion Air crashed one of these managerial marvels.
Re:Boeing Believed a 737 Max Warning Light Was Standard by sundvor on Monday May 06, 2019 @06:20AM (#19838129)
The more that comes out of this, the more my opinion solidifies that they just have no effing clue about what the heck they are doing.

I'd expect building safe, efficient, high quality planes to be the answer. Whereas in their minds it's probably generate record profits by maximising ROI on past investments, protecting profit margin at all times having priority over things that might improve quality. Oh and with a complete spaghetti monster of responsibility layers.

I just keep getting more and more disgusted they are getting away with manslaughter.

Re:Boeing Believed a 737 Max Warning Light Was Standard by PedroBatista on Monday May 06, 2019 @05:53AM (#19838028)
Indeed, the 737 MAX is a dangerous bastardized old design but a managerial marvel.
Re:Boeing Believed a 737 Max Warning Light Was Standard by FabHK on Monday May 06, 2019 @09:41AM (#19839281)
- "We thought the 'AoA disagree' warning was functional in all jets we delivered, but turns out it works only if this other paid upgrade has been installed."

- "We planned for, and certified, an MCAS operating within certain boundaries, but then delivered a plane that exceeds these limitations multiple times."

- "To save money, we built a plane whose handling characteristics are so crappy that we could not certify it, unless we put in an extra system interfering with primary flight controls, but let's not tell anyone about it."

- "We've added this powerful system interfering with primary flight controls, and it depends crucially on AoA data, which we receive from two sensors. Well, let's just pick one of them and ignore the other one. It'll be fine."

Managerial marvel? I assume you're not sarcastic, so what do you mean?

Re:Boeing Believed a 737 Max Warning Light Was Standard by PedroBatista on Monday May 06, 2019 @10:48AM (#19839901)
You assumed wrong, or at least half-wrong.

It's a managerial "marvel" because they managed to certify and deliver that mutant flying turd adding billions to their bottom-line, earning their bonus while spending Boeing's good name and capitalize their decades-long "investment" on FAA.

That's top-notch management right there...

Re:Boeing Believed a 737 Max Warning Light Was Standard by magduf on Tuesday May 07, 2019 @06:25PM (#19854007)
That's just typical management for American corporations these days. If you want a company you can really trust with human lives, you buy from a company that isn't run by Americans. Of course, that's no guarantee (see: VW Dieselgate), but American management these days is all about next-quarter profits over all else. Japanese-run companies are probably the most trustworthy ones; people there care more about the long term and personal honor. Too bad they don't make planes, but that's changing, as Mitsubishi is now getting back into the airplane business.
Re:Boeing Believed a 737 Max Warning Light Was Standard by FabHK on Monday May 06, 2019 @11:47AM (#19840465)
> You assumed wrong

Glad to hear :-)

Re:Boeing Believed a 737 Max Warning Light Was Standard by OJFord on Monday May 06, 2019 @09:03AM (#19839002)
It is the point, because if the pilot doesn't know whether or not it's installed, then absence of warning does not imply absence of problem.

If a pilot knows or believes it's installed, then they might discount a theory because the instrument appears to disagree.