Go Back  PPRuNe Forums > Flight Deck Forums > Rumours & News
Reload this Page >

MAX’s Return Delayed by FAA Reevaluation of 737 Safety Procedures

Wikiposts
Search
Rumours & News Reporting Points that may affect our jobs or lives as professional pilots. Also, items that may be of interest to professional pilots.

MAX’s Return Delayed by FAA Reevaluation of 737 Safety Procedures

Thread Tools
 
Search this Thread
 
Old 9th Nov 2019, 11:53
  #3841 (permalink)  
 
Join Date: Mar 2002
Location: EU
Posts: 644
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by GordonR_Cape
The Boeing 737 Classic (-300 onwards) was introduced in 1984. That is the benchmark for the FCCs, not the -200 model.
Does the max still have the same FCC’s then? That archaic master/slave stuff and failpassive autoland?
golfyankeesierra is offline  
Old 9th Nov 2019, 12:16
  #3842 (permalink)  
 
Join Date: Apr 2019
Location: EDSP
Posts: 334
Likes: 0
Received 0 Likes on 0 Posts
I‘m not sure about the insurance thing as I know too little about this market but that plane is going to be a ticking bomb - at least public relations wise - even when finally cleared to fly some time. Given how many of them were produced and will be delivered in future another one will be going down sooner or later. And whereas all commercial airliners in the last 50 years (maybe except the DC10) had the benefit of doubt that the root cause will most likely have a significant portion of pilot error included, the 737Max will not. So if it’s not CFIT in mountainous area and bad weather or a mid air collision, fingers will be pointed against the aircraft and it’s manufacturer.
And even the last backwoods journo from the Podunk Herald does now know that this plane was deprecated before its first flight, like a hotrod made from a chasis of a 60ies Volkswagen beetle, stretched and reengined with a supercharged direct injection engine, but without anti skid sytem.
So it’s gonna bite someone in future. The question is, will it be Boeing who will not provide a successor in medium term, the airline which is flying this 60ies plane in 2030 or the regulators who will be allowing this continue for indefinite time?
People will not care because they are all hoping to be in a different job position or retired when it is going to happen.

Last edited by BDAttitude; 9th Nov 2019 at 12:40.
BDAttitude is offline  
Old 9th Nov 2019, 12:17
  #3843 (permalink)  
 
Join Date: Dec 2011
Location: Ottawa, Canada
Posts: 28
Likes: 0
Received 0 Likes on 0 Posts
Sounds like the MCAS solution might be all but there but they are now struggling with a much harder one to solve. I was wondering why the trip to Cedar Rapids when Boeing wrote the software. Looks like they are back at the FCC oem trying to show how two computers can self check each other and figure out who's wrong. Good luck with that.
ktcanuck is offline  
Old 9th Nov 2019, 12:36
  #3844 (permalink)  
 
Join Date: Apr 2019
Location: EDSP
Posts: 334
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by ktcanuck
Sounds like the MCAS solution might be all but there but they are now struggling with a much harder one to solve. I was wondering why the trip to Cedar Rapids when Boeing wrote the software. Looks like they are back at the FCC oem trying to show how two computers can self check each other and figure out who's wrong. Good luck with that.
Back then I had been speculating that they must have a solution for this in their code baseline which only needs to be configuerd for the project - otherwise it could never been done with the timeline envisioned. Seems they have to do some post documentation .
Still I am more worried by the changes to the task system or function distribution they likely had to do due to the AP disconnect issue. There you have the potential to break anything anywhere and require to do a 100% coverage of functional testing. It’s like rebuilding the supporting walls of a house without moving the furniture. It’s never going to happen without some losses.
BDAttitude is offline  
Old 9th Nov 2019, 13:06
  #3845 (permalink)  
 
Join Date: Jun 2002
Location: Scotland
Posts: 39
Received 0 Likes on 0 Posts
From : "After Lion Air crash, Boeing doubled down on faulty 737 MAX assumptions
Nov. 8, 2019 at 6:42 pm Updated Nov. 8, 2019 at 7:57 pm By Dominic Gates" :

A flawed process
The U.S. House Transportation and Infrastructure Committee, which displayed one slide from Boeing’s presentation during an appearance by CEO Muilenburg at a hearing last week, provided all 43 slides in the document at the request of the Seattle Times. The presentation is titled “MCAS Development and Certification Overview.”

It notes that MCAS was not evaluated as an individual system that was “new/novel on the MAX.” The significance of this term is that the FAA is required to be closely involved in the testing and certification of any new and novel features on an aircraft.

Though MCAS was new on the MAX version of the 737, Boeing argued that it wasn’t new and novel because a similar system “had been previously implemented on the 767” tanker for the Air Force.


Yet MCAS on the MAX was triggered by just one of the jet’s two angle-of-attack sensors, whereas MCAS on the 767 tanker compared signals from both sensors on the plane. When asked after the second crash to explain why the airliner version lacked this same redundancy, Boeing’s response was that the architecture, implementation, and pilot interface of the KC-46 tanker MCAS were so different that the two systems shared little but the acronym."

How can Boeing seriously square these contradictory statements? MCAS is similar and dissimilar at the same time?

This is 'Alice in Wonderland' time :

“When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means just what I choose it to mean—neither more nor less.” “The question is,” said Alice, “whether you can make words mean so many different things.”
dufc is offline  
Old 9th Nov 2019, 13:28
  #3846 (permalink)  
 
Join Date: Jul 2007
Location: Switzerland
Age: 78
Posts: 110
Received 7 Likes on 2 Posts
Originally Posted by dufc

How can Boeing seriously square these contradictory statements? MCAS is similar and dissimilar at the same time?

This is 'Alice in Wonderland' time :

“When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means just what I choose it to mean—neither more nor less.” “The question is,” said Alice, “whether you can make words mean so many different things.”
Easy enough. Alice fell into a land where Humpty Trumpty resides.
clearedtocross is offline  
Old 9th Nov 2019, 14:11
  #3847 (permalink)  
 
Join Date: Jan 2008
Location: uk
Posts: 857
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by clearedtocross
Easy enough. Alice fell into a land where Humpty Trumpty resides.
Good, except most of Alice's problems and the bulk of Alices certification was done before Trumpty actually moved in...
infrequentflyer789 is offline  
Old 9th Nov 2019, 14:50
  #3848 (permalink)  
 
Join Date: Dec 2018
Location: Florida
Posts: 245
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by FrequentSLF
Sorry but i disagree, first of all we need to classify if MCAS is a stall warning or a stall identification system, once we define that we can define what are the actions required. According to certification a pilot should be able to disable a stall id system and such system should not be prone to a single failure. That is not the case of MCAS. To off it pilots loose all electrical controls on the stab, and MCAS is prone to single AoA failure, that is the reason why it was classified as a augmentation system...when in my opinion is a stall ID system... cutting corners to solve major issue
How can MCAS possibly be considered a stall ID system or even a stall warning system? Any system code which autonomously (and secretly) moves a barn door sized HS is a stall prevention system .

So I am sure this has already come up many times, but can the MAX be certified without MCAS even if that required a new type rating G-d forbid? My Lake Amphibian would pitch down with power increases and vice versa. That idiosyncrasy was covered in transition lesson #1.
Lake1952 is offline  
Old 9th Nov 2019, 14:52
  #3849 (permalink)  
 
Join Date: Mar 2008
Location: Stirling
Posts: 14
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Water pilot
However, aside from that, what they are talking about is not only really hard, but now you have to test scenarios of erronious computer shutdown at any frigging time during the duration of the flight. This is really the same rancid logic behind MCAS; a solution for an extremely rare event now creates its own problem in much more common situations. How many benign problems are in the processing code that are now going to trigger this 'kill' subroutine? What happens if the two computers get into a war with each other? How robust is the communication line between the computers, which was probably never designed to deal with the amount of data that now has to be transferred?

No wonder they did not want to completely document what they did.
Retrofitting logic like this sounds to me like an even bigger disaster-in-the-making than MCAS.

Triple modular redundancy has three systems and a majority voting system for a reason: if you can't trust a single module to be sufficiently reliable at performing its own operation, how can you possibly trust it to monitor the dual redundant module sufficiently reliably to trust it to shut it down!? And trying to add this on to a system that was never designed, in a rush to get ungrounded... sounds terrifying.
dtaylor1984 is offline  
Old 9th Nov 2019, 15:06
  #3850 (permalink)  
 
Join Date: Feb 2015
Location: usa
Age: 37
Posts: 41
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by FrequentSLF
Sorry but i disagree, first of all we need to classify if MCAS is a stall warning or a stall identification system, once we define that we can define what are the actions required. According to certification a pilot should be able to disable a stall id system and such system should not be prone to a single failure. That is not the case of MCAS. To off it pilots loose all electrical controls on the stab, and MCAS is prone to single AoA failure, that is the reason why it was classified as a augmentation system...when in my opinion is a stall ID system... cutting corners to solve major issue
Stall warning OR identification? You may want to add avoidance or augmentation device since it applied control input. Now let me help you with the warning or identification part......MCAS neither warned nor identified pilots of a pending stall situation. Hope that clears it up.
The MAX needs to be re certified from scratch !

Last edited by jdawg; 9th Nov 2019 at 15:32.
jdawg is offline  
Old 9th Nov 2019, 15:24
  #3851 (permalink)  
 
Join Date: Mar 2019
Location: On the Ground
Posts: 155
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by golfyankeesierra
Does the max still have the same FCC’s then? That archaic master/slave stuff and failpassive autoland?
Yes. 80286s in the MAX, same master/slave for the flight directors. The master f/d also determines which FCC is being used.
Takwis is offline  
Old 9th Nov 2019, 15:33
  #3852 (permalink)  
 
Join Date: Feb 2014
Location: Crawley
Age: 66
Posts: 190
Received 27 Likes on 13 Posts
It always strikes me that these arbitrary risk factors, which have to be complied with, would be completely different if the majority of people were born with twelve fingers, rather than ten.
nevillestyke is offline  
Old 9th Nov 2019, 15:57
  #3853 (permalink)  
 
Join Date: Jul 2007
Location: Switzerland
Age: 78
Posts: 110
Received 7 Likes on 2 Posts
Stall identification is a misleading term. It’s task is NOT to identify a stall situation to the pilots - like a stall horn or stick shaker - but to identify an approaching stall condition with its sensors and actively reduce the AoA (like a stick pusher, alpha protect, etc.)
clearedtocross is offline  
Old 9th Nov 2019, 16:14
  #3854 (permalink)  
 
Join Date: Mar 2019
Location: French Alps
Posts: 326
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Takwis
Yes. 80286s in the MAX, same master/slave for the flight directors. The master f/d also determines which FCC is being used.
Can we consider the presence of those 286 processors as confirmed ?
Fly Aiprt is offline  
Old 9th Nov 2019, 16:33
  #3855 (permalink)  
Thread Starter
 
Join Date: Apr 2015
Location: Under the radar, over the rainbow
Posts: 788
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Fly Aiprt
Can we consider the presence of those 286 processors as confirmed ?
It has been "common knowledge" for a long time and I've never seen or heard otherwise from an authoritative source.

FWIW, the mere reliance on the 80286 doesn't really alarm me, but the magnitude of the task of fully reconfiguring the operation of the FCCs is . . . well, it's a very big deal.
OldnGrounded is offline  
Old 9th Nov 2019, 17:01
  #3856 (permalink)  
 
Join Date: Jun 2009
Location: florida
Age: 81
Posts: 1,610
Received 55 Likes on 16 Posts
Salute!

How come we can not talk ancient processors over on Tech Log? Keep the management and political stuff here?

Good grief! The sfwe and object code for the MCAS function could be implemented on a 8088 or a Motorola cpu from the original Apple.

We flew the SLUF and the early Vipers with such, and less than a megabyte of RAM. Our non-volatile memory was maybe a few megs, and the same boxes were used in the lunar landing module. Sheesh.

The problem is not the CPU, nor the dedicated MCAS code. The problem is integrating a new function via the autopilot sfwe boxes, STS function, and who knows what else? No excuse for a complete re-write and still using grandfather cert, huh?

Basic aero still a big problem for this old pilot, so I am with folks that want to see raw MAX flight tests that have MCAS erased and look at the plots. Unless you go "full authority" FBW, the basic aero problems with the new motors and such cannot be mitigated with crude algorithms inserted in autopilot and STS functions such as we are led to see for MCAS.

Gums sends....

gums is offline  
Old 9th Nov 2019, 19:29
  #3857 (permalink)  
 
Join Date: Mar 2019
Location: French Alps
Posts: 326
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by OldnGrounded
And it's really difficult to understand how the regulator could approve deleting a conductive membrane from the wings of a mostly-composite aircraft.
It is understandable that Boeing considers changing the rudder cables routing "unpracticable".
But what is this copper foil shielding in a specific part of the wing issue ? Isn't it standard practice everywhere in the plane, and what is so special and so costly about the leading edge ?

Fly Aiprt is offline  
Old 9th Nov 2019, 19:35
  #3858 (permalink)  
 
Join Date: Feb 2016
Location: S.E.Asia
Posts: 1,954
Received 10 Likes on 4 Posts
Originally Posted by gums
Salute!

How come we can not talk ancient processors over on Tech Log? Keep the management and political stuff here?

Good grief! The sfwe and object code for the MCAS function could be implemented on a 8088 or a Motorola cpu from the original Apple.

We flew the SLUF and the early Vipers with such, and less than a megabyte of RAM. Our non-volatile memory was maybe a few megs, and the same boxes were used in the lunar landing module. Sheesh.

The problem is not the CPU, nor the dedicated MCAS code. The problem is integrating a new function via the autopilot sfwe boxes, STS function, and who knows what else? No excuse for a complete re-write and still using grandfather cert, huh?

Basic aero still a big problem for this old pilot, so I am with folks that want to see raw MAX flight tests that have MCAS erased and look at the plots. Unless you go "full authority" FBW, the basic aero problems with the new motors and such cannot be mitigated with crude algorithms inserted in autopilot and STS functions such as we are led to see for MCAS.

Gums sends....

The problem is keeping up with technology Gums.

The UK navy fleet are still running on Windows XP.
Mike Flynn is offline  
Old 9th Nov 2019, 20:05
  #3859 (permalink)  
Thread Starter
 
Join Date: Apr 2015
Location: Under the radar, over the rainbow
Posts: 788
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Fly Aiprt
It is understandable that Boeing considers changing the rudder cables routing "unpracticable".
But what is this copper foil shielding in a specific part of the wing issue ? Isn't it standard practice everywhere in the plane, and what is so special and so costly about the leading edge ?
I think placement of conductive membranes and similar elements varies by location. Some parts of the aircraft, wingtips, radome, empennage, etc. are much more likely to receive lightning strikes than other parts, e.g., the fuselage. So more protection is applied to the more likely target areas. Not sure where, on that "scale," the wing leading edges fall.

Edit: I found this article in B's Aero Magazine: https://www.boeing.com/commercial/ae...les/2012_q4/4/
OldnGrounded is offline  
Old 9th Nov 2019, 21:03
  #3860 (permalink)  
 
Join Date: Jun 2009
Location: in the barrel
Posts: 147
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by silverstrata


The original 737 hardware was the 286 processor, and they were still using it in the NG.
If the same is true for the Max, the number of Silicon Valley techies who understand this antiquated system (both hardware and software) is limited.

Silver

Really? You think the nine bucks an hour guys in India understand the 286 and the special programming techniques it takes to efficiently program those systems better than a US engineer?
The real reason is obvious: the Silicon valley techie won‘t do the job for $9 an hour.
AviatorDave is offline  


Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.