jientho 12th Jul 2013, 13:49:
Quote:
This seems to be a classic case of lack of real-world awareness in software design. What POSSIBLE real-world condition would justify allowing a flight-level-change target of FL000?
There is no such condition. Nobody does that.
Let me clarify -- I am not saying that FL000 setting happened in the Asiana approach (as you say, we shall see). I was referring to the
capability for a pilot to set such a thing (and the system to then "use" it). Maybe I'm wrong, but I understand from comments here that that
capability does exist on the 777? And as anyone from the systems world knows, anything that
can be input by "users" must be assumed
will be input by someone somewhere sometime,
especially in life-critical systems such as those used in transport aircraft. Now, you seem to agree that there is NO condition where it makes any sense, so WHY IS IT ALLOWED BY THE SYSTEM to be entered if there is risk (even the tiniest bit)? That is my point.