Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Transportation Government

Prosecutors Were Already Investigating Whether Boeing Provided 'Incomplete or Misleading' 737 Information (yahoo.com) 95

Fox Business News reports:

- "Federal prosecutors are investigating whether Boeing provided incomplete or misleading information about its best-selling 737 Max aircraft to U.S. air safety regulators and customers, according to a report from The Wall Street Journal."

- That investigation began five months ago -- after the first crash that killed 189 people, but before the second one.

Nine days after that November 7 crash, America's Federal Aviation Administration had issued an international emergency order "warning that Boeing had discovered an 'unsafe condition' that is 'likely to exist or develop' in other planes," reports the Washington Post: The FAA directive said if erroneous data is received by the 737 Max jet's flight control system, the plane's nose could be pushed down repeatedly. Failing to address that "could cause the flight crew to have difficulty controlling the airplane," push the nose down and lead to "significant altitude loss, and possible impact with terrain," according to the notice. The notice told pilots that, if bad data causes problems to appear, they should "disengage autopilot" and use other controls and adjust other switches to fly the plane....

Investigators scouring black box data believe an automatic anti-stalling feature was engaged before a Boeing 737 Max jet crashed and killed 157 people in EthiÂoÂpia, an administration official said Friday. The feature, known as MCAS, also was a factor in the October crash in Indonesia, according to investigators. The investigators said inaccurate information from an outside sensor led MCAS to force the nose of the plane down over and over again.

That explanation is also supported by the positioning of equipment on the aircraft's tail "in a way that would push the plane's nose downward, consistent with the black box finding," reports the Washington Post.

Fox Business also reports that Boeing currently has over 4,600 "unfilled" orders for its 737 Max jets.
This discussion has been archived. No new comments can be posted.

Prosecutors Were Already Investigating Whether Boeing Provided 'Incomplete or Misleading' 737 Information

Comments Filter:
  • by Anonymous Coward on Sunday March 31, 2019 @03:42PM (#58362604)

    You don't let them inspect and self-authenticate their designs as safe, you don't have an automatic safety system ever rely on a single sensor under any circumstances, and you don't send people out untrained on the new system.

    In this case all three major fails contributed. The FAA failed oversight, Boeing failed systems design and oversight, and Boeing and airliners and the FAA failed to ensure training was adequate for a new system.

    • Re: (Score:2, Insightful)

      by Anonymous Coward

      I'll avoid flying on US made aircraft from now on if I can help it. Regulators there have zero powers.

    • Re: (Score:1, Informative)

      by Anonymous Coward

      You don't put out flawed airplane designs. A software system is not enough to make up for the engines being in the wrong place.

    • by Richard_at_work ( 517087 ) on Sunday March 31, 2019 @05:16PM (#58362990)

      The problem with self-certification being "bad" is that its an extremely intensive process, involving a significant investment in time and personnel to achieve, and it happens relatively *rarely*.

      So for the FAA to independently certificate an aircraft manufacturers changes, they would have to maintain a significant number of employees or contractors through relatively short periods of intensive work (certification of a new aircraft or a new model) and relatively long periods of little work (small upgrades to existing aircraft parts, no new aircraft or models in progress).

      The real problem is not self certification.

      No, the real problem is grandfathering.

      Grandfathering is the ability for an aircraft manufacturer to take an existing design, one which on its own would not meet *current* safety requirements, and significantly refresh it. So long as the changes to the aircraft stay within a certain set of parameters, the aircraft manufacturer doesn't have to certify the entire aircraft, meaning they can incorporate some changes extremely cheaply while working around issues such as those on the MAX where changes introduced handling issues.

      Take, for example, the Boeing 747 - under safety requirements dating back decades, the Boeing 747 would not be certified to carry passengers forward of its front passenger doors, as it violates current evacuation requirements. And yet it is still sold as a passenger model in the 747-800i. Because its grandfathered in and not required to meet current safety requirements as a result.

      The handling issues on the MAX are a similar issue - Boeing attempted to manage handling differences by introducing a system to attempt to bring the handling characteristics back in line with those of the 737NG, so they could get away with certifying the aircraft under the grandfathering rules. They could have not introduced that system and instead detailed the changes, but that would have meant they could no longer have grandfathered in the handling characteristics of the MAX, meaning pilots would have been required to undergo specific conversion training to the MAX from the 737NG.

      So yeah, get rid of grandfathering - it will drastically hurt aircraft manufacturers, but at the same time it will stop those same manufacturers from being allowed to introduce new models of aircraft that do not meet current standards.

      • Using your simple example of no passengers forward of the exit door on the 747, does the safety record of the 747, over its millions of flight hours, suggest that this is unsafe? If not, why should it not be allowed to be certified?

        “Grandfathering” just avoids certification to current standards of elements that have not changed and the regulator does not feel would have an adverse impact on safety.

        There are real things on the 737 that should have been upgraded to current standards, like the exi

        • No FBW needed -- a stick pusher (as implemented in many non-FBW aircraft) would have worked fine. It would have to have been documented and would have required pilot re-certification for the MAX vs the 737-800. Barring that, redesign the wing and/or tail to prevent a deep stall with the new engine configuration.
    • by rtb61 ( 674572 )

      They did not just fail, they did not try to do it properly and failed at it, they conspired to cheat the system because of greed and lots of people died or more accurately to US law, were murdered because Boeing and US government officials conspired to maximise Boeing profits killing people and then tried to cover up that conspiracy killing more people and then they got busted. An American corporation murdered people out of pure greed, corrupted the system to facilitate it and then conspired to cover it up

    • by Luckyo ( 1726890 )

      The training part was intentional. Certification for piloting a new aircraft type ("type rating" in lingvo of this field) is prohibitively expensive. Therefore Boeing made a great effort to make 737 MAX to only require "same aircraft, different model" kind of training for adapting it for other 737 certified pilots. The new anti-stall system is in fact one of the key parts of this effort, it's there to make aircraft behave more like other 737 models in spite of the fact that it had very different aerodynamic

      • by mvdwege ( 243851 )

        But it gets worse. If the MCAS is there to make the MAX behave like an NG, so that pilots can fly it with just variant retraining, what is the implication if the plane reaches a flight regime where the MCAS is a hindrance or a danger and has to be turned off?

        I'll tell you: you now have two pilots with only variant training flying an aircraft that they actually need a type rating for, that they don't have because the MCAS was there to obviate it.

        Who ever thought this was a good idea in safety terms?

        • Re: (Score:2, Interesting)

          by Obfuscant ( 592200 )

          what is the implication if the plane reaches a flight regime where the MCAS is a hindrance or a danger and has to be turned off?

          If you ever manage to reach a "flight regime" where the MCAS is a danger, then you follow the emergency checklist for the demonstrated problem. You are only hypothesizing that there is some "flight regime" where a properly functioning MCAS is a danger, however. The problem at hand is when a faulty sensor gave MCAS faulty data and the pilots failed to follow the emergency procedures to stop MCAS from being a problem.

          As TFS and TFA point out, the FAA issued an emergency AD last November covering the MCAS sys

          • by mvdwege ( 243851 )

            You are only hypothesizing that there is some "flight regime" where a properly functioning MCAS is a danger, however.

            I actually have empirical data: two crashed planes and Boeing doing massive damage control.

            You really live up to your nick. I'm not going to discuss an idiot like you. Goodbye.

            • I actually have empirical data: two crashed planes and Boeing doing massive damage control.

              You lie. You have two instances of where a failed sensor led to incorrect MCAS operation and pilots who could not diagnose a problem that they face on every simulator checkride. That's not proving what you claim.

              I'm not going to discuss an idiot like you. Goodbye.

              When the facts elude you, ad hominem to the rescue.

              • by mvdwege ( 243851 )

                I'm not going to discuss an idiot like you. Goodbye.

                When the facts elude you, ad hominem[sic] to the rescue.

                You know, when you get called an idiot, it is usually not a good idea to prove the point [laurencetennant.com]. Of course, you being an idiot wouldn't recognise a good idea when it hit you on the head.

      • I think the bigger sticky question for the 737 MAX is whether, in the end, it genuinely needs to be a separate type. The MCAS, as originally designed, was supposed to be a minor adjustment at the edge of the flight envelope. But it really appears that, in testing, it had to be made much stronger than originally designed. The issue that caused the crashes is that it should have then required multiple sensors. Boeing is fixing that. However, it brings up the larger question: are the flight characteristic
    • You don't let them inspect and self-authenticate their designs as safe

      I see a lot of people harping on this. Irrespective of how true the other points may be, the truth is this happens in all sorts of industries, even where safety is involved. Even UL allows it, if you are a big enough company. You are essentially just submitting your results and analysis to them. They give it the okay, and there you go, UL approved.

      We can argue if it's the right way to do things, but acting like it's a unique insta
  • by bogaboga ( 793279 ) on Sunday March 31, 2019 @03:47PM (#58362624)

    The notice told pilots that, if bad data causes problems to appear, they should "disengage autopilot" and use other controls and adjust other switches to fly the plane....

    Let's understand that time is a factor in the successful disengagement of this MCAS. Pilots had less than a minute to figure out what was going on.

    Imagine a car doing its own thing even as you try to tame its erroneous behavior. You literally run out of time resulting in a catastrophic outcome.

    • ... pilots trained to fly one of these planes with hundreds of passengers are also trained how to handle all kinds of emergency situations. Additionally they have some kind of emergency manual (Quick Reference Handbook = QRH) at hand detailing procedures for all kind of in flight emergencies.

      "Less than a minute" (*) is still sufficient time to switch off a system if you're trained to identify the problem and do that in such a situation, it might even be enough time to find the instructions in the QRH and im

    • I hope they meant "disengage autotrim". MCAS is not active if the autopilot is engaged, so engaging autopilot would probably bring the plane under control. However, if the plane is already upset it is probably impossible to engage the autopilot at all.

      • However, if the plane is already upset it is probably impossible to engage the autopilot at all.

        The emergency procedure for runaway stabilizer is to DISengage the autopilot (if engaged), not engage it. And then you pull the circuit breakers for the electric trim motors, which prevents anything from changing the trim without the pilot's direct action.

        If you have a trim system that is out of control for some reason when the autopilot is not on, then you must assume there is something outside the autopilot that is broken. Turning on the autopilot will not fix that.

    • Pilots had less than a minute to figure out what was going on.

      Really? The pilot of the Indonesia flight had, according to the story, time to try resolving the issue 21 times by pulling back on the yoke, retrimming, and letting go. Twenty one times. And then he had time to hand the problem to the co-pilot who gave it a couple more shots.

      And neither of them correctly identified the basic problem and applied the standard emergency checklist proecdure to resolve it.

      You literally run out of time resulting in a catastrophic outcome.

      Here's how much time it would take to keep from crashing into the ground: pull back on the yoke. MCAS, acc

    • by Shotgun ( 30919 )

      A design factor of any flight intervention system is that it be able to be overpowered by a human with his hands on the controls. I've flown badly trimmed planes more than once. It isn't that difficult to keep them from nosing into the ground.

  • Revolving door (Score:3, Insightful)

    by Anonymous Coward on Sunday March 31, 2019 @03:52PM (#58362650)

    I'm sure they were. And the revolving door if executives running between the FAA and Boeing and probably law firms were in no way impeding the proper scrutiny and oversight of aviation safety.

    What a crock of shit. More cya press from the executive caste. First they blamed the pilots, next the software, next the pressure from airbus. The fucking plane was unstable. Probably Boeing is such an MBA'd clusterfuck the planes are literally only just able to fly anymore.

    In a just world the entire c suite would be made to fly 10000 hours in these death traps before they were allowed a single press release. Evil fucking cunts.

    • Re:Revolving door (Score:5, Interesting)

      by Richard_at_work ( 517087 ) on Sunday March 31, 2019 @05:32PM (#58363062)

      Add to the mix the fact that Boeing has railed against Airbuses flight envelope protection software since it was launched in 1988 with the A320, insisting that Boeing pilots have final say at all times under Boeings ethos. And then they go and add this, without telling pilots....

      Now thats indicative of something endemic in Boeing.

      • Now thats indicative of something endemic in Boeing.

        It certainly is; they're called "MBA's."

      • Add to the mix the fact that Boeing has railed against Airbuses flight envelope protection software since it was launched in 1988 with the A320, insisting that Boeing pilots have final say at all times under Boeings ethos. And then they go and add this, without telling pilots....

        Yes, this to me is the biggest surprise and irony about the whole thing. Having spent years lurking on the PPRuNe pilots' forum, watching smug Boeing lovers loudly proclaiming how they'd never fly an Airbus because Boeing doesn't have all that automated protection stuff (that to be fair, can catch you out in incredibly rare circumstances, much rarer than two fatals in five months though)... well if it weren't for the several hundred dead people the schadenfreude would be glorious.

  • There is something wrong with both the summary and TFA. MCAS only works when the airplane is being hand-flown, it does not operate when the autopilot is on (because the autopilot already controls the angle).

    • by etudiant ( 45264 )

      Not sure that matters.
      The Ethiopian flight never got up high enough to engage the auto pilot, they were in trouble essentially from the time the wheels left the runway.
      Separately, the autopilot is only as good as its inputs. If there is a sensor problem, as was the case with both these accidents, the autopilot is equally misled.

Technology is dominated by those who manage what they do not understand.

Working...