A couple of questions...
1> I know that prior to AF447 the pitot-icing had already been identified and there were steps in place to change the sensors, but was any action taken to introduce this scenario into sim. flights so that we could assess what proportion of pilots would get it right?
2> Has anyone looked at (ACARS?) data to see whether
a> Icing is rare but when it happens all sensors will ice ; or
b> Icing is fairly common but the sensor offer effective redundancy and it is rare to lose two.
I think someone mentioned before that HAL can clearly ‘see this coming’, and it would not seem impossible to add some logic along the lines of;
“Hey guys, I have just had to arbitrate a whole series of mismatched speed indications, it is becoming increasingly difficult to pick the right one with any degree of certainty so any time soon I might be handing you the plane”.