Go Back  PPRuNe Forums > Flight Deck Forums > Rumours & News
Reload this Page >

MAX’s Return Delayed by FAA Reevaluation of 737 Safety Procedures

Rumours & News Reporting Points that may affect our jobs or lives as professional pilots. Also, items that may be of interest to professional pilots.

MAX’s Return Delayed by FAA Reevaluation of 737 Safety Procedures

Old 13th Dec 2019, 01:10
  #4441 (permalink)  
 
Join Date: Mar 2015
Location: Washington state
Posts: 209
Likes: 0
Received 0 Likes on 0 Posts
"More than half responded with the wrong procedure."

So these were presumably head of class pilots expecting to perform some sort of AOA failure response and they fluffed it. Is my reading accurate?
Water pilot is offline  
Old 13th Dec 2019, 01:27
  #4442 (permalink)  
 
Join Date: Oct 2017
Location: Tent
Posts: 916
Received 19 Likes on 12 Posts
Originally Posted by Water pilot
"More than half responded with the wrong procedure."

So these were presumably head of class pilots expecting to perform some sort of AOA failure response and they fluffed it. Is my reading accurate?

Not sure they were head of class pilots, my impression was that they were going to do this testing with an "average" selection of line pilots.

But yes it seems the testing did not go as planned.
Bend alot is offline  
Old 13th Dec 2019, 02:30
  #4443 (permalink)  
 
Join Date: Oct 2019
Location: USA
Posts: 838
Received 192 Likes on 105 Posts
Originally Posted by LowObservable
https://theaircurrent.com/aviation-s...b7JuyicCOXJVhU

Another shell crashes into the Bismarck.
Seems like the cure is to simplify the checklist:
Are the following happening:
1) autopilot kicked out unexpectedly
2) pitch trim moving unexpectedly
3) pitch control force increasing unexpectedly

Return pitch control force to zero with control wheel switches and then immediately disable trim motors.
Set the pilot not flying the job of operating the trim wheel as directed by the PF.
If that does not work, pilot not flying will re-enable the switches as directed by the PF only long enough to use the trim switches to zero pitch control forces and immediately disable them when completed.

As the pilot is able, immediately declare emergency and land ASAP.

These are indicators the pilots can memorize.
MechEngr is online now  
Old 13th Dec 2019, 02:47
  #4444 (permalink)  
 
Join Date: Mar 2019
Location: On the Ground
Posts: 155
Likes: 0
Received 0 Likes on 0 Posts
Would you buy a car where the:
1) cruise control kicked out unexpectedly
2) Steering moves unexpectedly
3) Steering control force increased unexpectedly ?

Really, all you have to do is recycle the cruise control switch and get your passenger to hang onto the steering wheel. Anyone can remember that.

Personally, I'd prefer a little more predictability out of my vehicles. Especially the flying ones.
Takwis is offline  
Old 13th Dec 2019, 02:53
  #4445 (permalink)  
 
Join Date: Jul 2014
Location: Harbour Master Place
Posts: 662
Likes: 0
Received 0 Likes on 0 Posts
MechEngr, how about the stick shaker noise, IAS disagree warnings going off at the same time? Which are you going to attend to first? The stall warning, a runaway stabilizer or airspeed unreliable? ALL of these are memory items and needed to be attended to ASAP, and all are potential symptoms of an AoA failure. Not so simple is it.

Run this while trying to figure it out.

CurtainTwitcher is offline  
Old 13th Dec 2019, 02:53
  #4446 (permalink)  
 
Join Date: Sep 2018
Location: Laredo, TX
Posts: 133
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by MechEngr
Seems like the cure is to simplify the checklist:
Are the following happening:
1) autopilot kicked out unexpectedly
2) pitch trim moving unexpectedly
3) pitch control force increasing unexpectedly

Return pitch control force to zero with control wheel switches and then immediately disable trim motors.
Set the pilot not flying the job of operating the trim wheel as directed by the PF.
If that does not work, pilot not flying will re-enable the switches as directed by the PF only long enough to use the trim switches to zero pitch control forces and immediately disable them when completed.

As the pilot is able, immediately declare emergency and land ASAP.

These are indicators the pilots can memorize.
So what should the pilots be afraid of once the electric trim is dissabled and MCAS is no longer there to protect them. Shouldn’t that be in your procedure? Hint: I’m one of the guys that think MCAS is not needed. But I don’t think anyone could walk back what has happened to saying we are just going to turn it off. I wouldn’t mind trying though unless there is a greater surprise.
jimtx is offline  
Old 13th Dec 2019, 03:23
  #4447 (permalink)  
 
Join Date: Oct 2017
Location: Tent
Posts: 916
Received 19 Likes on 12 Posts
Originally Posted by MechEngr
If that does not work, pilot not flying will re-enable the switches as directed by the PF only long enough to use the trim switches to zero pitch control forces and immediately disable them when completed.
For some reason the Emergency AD said DO NOT re-enable the switches (no reason given just don't do it).

Also turning them back on did not work for the Ethiopian crew - Question. Why did they turn them back on, if they did not intend to use them to trim?
Bend alot is offline  
Old 13th Dec 2019, 04:40
  #4448 (permalink)  
 
Join Date: Mar 2015
Location: Washington state
Posts: 209
Likes: 0
Received 0 Likes on 0 Posts
So when a Boeing representative said that the problem was a simple paperwork formatting issue that could be addressed in "a matter of days" that wasn't entirely accurate, then? Nothing about "oh, by the way half of the pilots failed to implement the correct procedure in our revised plan". That part wasn't important, I guess.

I'm frustrated here because they are an engineering company but they sound more like a bloody hedge fund that has been caught cooking the books. Engineering firms are supposed to have a culture of accuracy, not deception.
Water pilot is offline  
Old 13th Dec 2019, 05:09
  #4449 (permalink)  
 
Join Date: Sep 2019
Location: leftcoast
Posts: 2
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Water pilot
So when a Boeing representative said that the problem was a simple paperwork formatting issue that could be addressed in "a matter of days" that wasn't entirely accurate, then? Nothing about "oh, by the way half of the pilots failed to implement the correct procedure in our revised plan". That part wasn't important, I guess.

I'm frustrated here because they are an engineering company but they sound more like a bloody hedge fund that has been caught cooking the books. Engineering firms are supposed to have a culture of accuracy, not deception.

Sorry- Boeing used to be an engineering company- that changed starting around the mid 90's when MDC bought Boeing and installed way to many Jack welch interns. With over 30 years at Boeing, I can say they were doing pretty good when I left in the mid 90's- along with about 9000 others.

Name a successful program since the 777 ...

Grebe is offline  
Old 13th Dec 2019, 07:57
  #4450 (permalink)  
 
Join Date: Oct 2019
Location: USA
Posts: 838
Received 192 Likes on 105 Posts
Originally Posted by Bend alot
For some reason the Emergency AD said DO NOT re-enable the switches (no reason given just don't do it).

Also turning them back on did not work for the Ethiopian crew - Question. Why did they turn them back on, if they did not intend to use them to trim?
There was both a trim increment from the control wheel switch from one of the pilots and an autopilot fail warning that would only be issued if they tried to re-engage the autopilot. Both re-enabling the motors and re-enabling the autopilot are cautioned against in this situation. It's not clear why they did not continue to trim with the trim switch.
MechEngr is online now  
Old 13th Dec 2019, 08:51
  #4451 (permalink)  
 
Join Date: Oct 2019
Location: USA
Posts: 838
Received 192 Likes on 105 Posts
Originally Posted by CurtainTwitcher
MechEngr, how about the stick shaker noise, IAS disagree warnings going off at the same time? Which are you going to attend to first? The stall warning, a runaway stabilizer or airspeed unreliable? ALL of these are memory items and needed to be attended to ASAP, and all are potential symptoms of an AoA failure. Not so simple is it.

Run this while trying to figure it out.

https://youtu.be/TrjTUvhpBlE
There is no "runaway stabilizer." That term I specifically avoided because it's subjective. Sometimes the trim runs. And then stops. If it reaches the mechanical stop was it running away anymore? Nope, it has stopped running. But I bet the control forces are too high. So deal with what the real problem is and not make the pilot make some guess. If STS trims too much or too little, pilots input manual corrections. Was that runaway? What if the trim runs for more than a few seconds but the control forces are acceptable? Is that runaway?

It should take less than 10 seconds to determine what to do about the stall warnings and that is independent of control forces. In both crashes there was only one-side with the error and the performance of the plane was unchanged, indicating the warning was false. Am I mistaken or is that not part of all 737 training for 20+ years? How old is the NG series? The ET302 disaster unfolded over nearly 36 times that time span.

Tweak away, but the AD instructions were terrible with only vague actions to take and weak symptoms to determine it was the correct procedure.
MechEngr is online now  
Old 13th Dec 2019, 09:08
  #4452 (permalink)  
 
Join Date: Oct 2017
Location: Tent
Posts: 916
Received 19 Likes on 12 Posts
Originally Posted by MechEngr
There is no "runaway stabilizer." That term I specifically avoided because it's subjective. Sometimes the trim runs. And then stops. If it reaches the mechanical stop was it running away anymore? Nope, it has stopped running. But I bet the control forces are too high. So deal with what the real problem is and not make the pilot make some guess. If STS trims too much or too little, pilots input manual corrections. Was that runaway? What if the trim runs for more than a few seconds but the control forces are acceptable? Is that runaway?

It should take less than 10 seconds to determine what to do about the stall warnings and that is independent of control forces. In both crashes there was only one-side with the error and the performance of the plane was unchanged, indicating the warning was false. Am I mistaken or is that not part of all 737 training for 20+ years? How old is the NG series? The ET302 disaster unfolded over nearly 36 times that time span.

Tweak away, but the AD instructions were terrible with only vague actions to take and weak symptoms to determine it was the correct procedure.
Take Captain Sully's testimony and now we find greater than 50% of the pilots tested (knowing they would get) an AoA failure messed up the correct response and the fact that ALL 3 MCAS real life events took longer than (much) 10 seconds.

I feel at this stage you need some evidence to support your words.

It seems very clear the 737 MAX is a different beast to the 737 NG - simple fact if both crash aircraft were NG we would not be here.

Reading between the lines and other HF information 30 seconds would be a minimum but up to 2 minutes for a "average" pilot to start to correctly identify and carry out required memory items. They expect the memory items will not be carried out correctly in most cases.
Bend alot is offline  
Old 13th Dec 2019, 09:11
  #4453 (permalink)  
 
Join Date: Oct 2019
Location: USA
Posts: 838
Received 192 Likes on 105 Posts
Originally Posted by jimtx


So what should the pilots be afraid of once the electric trim is dissabled and MCAS is no longer there to protect them. Shouldn’t that be in your procedure? Hint: I’m one of the guys that think MCAS is not needed. But I don’t think anyone could walk back what has happened to saying we are just going to turn it off. I wouldn’t mind trying though unless there is a greater surprise.
My gut feeling (which isn't worth much and needs some data from Boeing to actually decide) is that the whole reason for this situation is that the contribution of MCAS in normal operations is slight and that it was entirely there for the control linearity requirement.Based on my gut, there isn't much to protect from as it does not do stall recovery only feel, and this is the main reason that no one thought of what MCAS would do if the AoA system was lying. If it was intended to do very little how could anyone imagine it would do very much?


I expect that the new version of software will have a big chunk of changes to validate AoA inputs and that this particular situation will happen as often as "trim runaway" does on the NG, which seems to be - has never happened.
MechEngr is online now  
Old 13th Dec 2019, 09:39
  #4454 (permalink)  
 
Join Date: Oct 2019
Location: USA
Posts: 838
Received 192 Likes on 105 Posts
Originally Posted by Bend alot
Take Captain Sully's testimony and now we find greater than 50% of the pilots tested (knowing they would get) an AoA failure messed up the correct response and the fact that ALL 3 MCAS real life events took longer than (much) 10 seconds.

I feel at this stage you need some evidence to support your words.

It seems very clear the 737 MAX is a different beast to the 737 NG - simple fact if both crash aircraft were NG we would not be here.

Reading between the lines and other HF information 30 seconds would be a minimum but up to 2 minutes for a "average" pilot to start to correctly identify and carry out required memory items. They expect the memory items will not be carried out correctly in most cases.
The 10 seconds is for the independent determination of which set of instruments is reliable in a one-side stick shaker. I don't know how to tell if pilots are unable to feel control forces, but the ET302 flight indicates the PIC countered the MCAS input starting at 12 seconds after the MCAS input began. I think it was even less time for the Lion Air captain on the accident flight, sometimes as little as 5 seconds, cutting off MCAS mid-operation. What neither was primed to do was neutralize the forces and immediately shut off the trim system. They did not take 2 minutes to realize a need to retrim, though the ET302 PIC never neutralized the trim.

In the event of a depressurization event at altitude, 2 minutes to react can mean everyone is dead, so I am not buying 2 minutes of dithering when things go badly. I would like to see if they changed that list, because if they are looking at the stab indicator and saying "I don't think it's running away" because MCAS or an intermittent short let off for a few seconds, while hauling with 80 pounds on the control wheel to keep the nose up, then just maybe that is not a good way to write a procedure.

It's also the case that none of those in the test planted the plane, which is more evidence that something is wrong with the procedure as written. More detail about what deviations they made would be interesting. One thing that isn't necessary is to diagnose the reason for the trim problem. It's as likely to be caused by a wiring fault as something predictable and in neither case can the crew effect repairs mid-flight. So the emphasis should be on symptom relief.
MechEngr is online now  
Old 13th Dec 2019, 10:08
  #4455 (permalink)  
 
Join Date: Jun 2008
Location: Cambridge UK
Posts: 192
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by MechEngr
... because if they are looking at the stab indicator and saying "I don't think it's running away" because MCAS or an intermittent short let off for a few seconds, while hauling with 80 pounds on the control wheel to keep the nose up, then just maybe that is not a good way to write a procedure.
80 pounds of pull represents a strongly expressed opinion by the pilot, and it seems unhelpful that a "feel-augmentation" system can override it.

Adding another column switch that (temporarily) disables MACS when the column pull reaches these levels might be helpful.

PS It might be best implemented in the wiring, rather than keeping the computers in this time-critical loop.
Peter H is offline  
Old 13th Dec 2019, 10:21
  #4456 (permalink)  
 
Join Date: Sep 2019
Location: Here
Age: 73
Posts: 238
Likes: 0
Received 0 Likes on 0 Posts
[QUOTE=CurtainTwitcher;10638642]MechEngr, how about the stick shaker noise, IAS disagree warnings going off at the same time? Which are you going to attend to first? The stall warning, a runaway stabilizer or airspeed unreliable? ALL of these are memory items and needed to be attended to ASAP, and all are potential symptoms of an AoA failure. Not so simple is it.

Run this while trying to figure it out.

Flaps out: a/p and F/D off, 80% N1 10° up, 75% N1 4° up clean aircraft will not fall out of the sky.
Flapsupbedsdown is offline  
Old 13th Dec 2019, 14:02
  #4457 (permalink)  
 
Join Date: Mar 2019
Location: On the Ground
Posts: 155
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by MechEngr
My gut feeling (which isn't worth much and needs some data from Boeing to actually decide) is that the whole reason for this situation is that the contribution of MCAS in normal operations is slight and that it was entirely there for the control linearity requirement.Based on my gut, there isn't much to protect from as it does not do stall recovery only feel,
David P. Davies' solution to a slight pitch up into a stall in the 707 used only the elevator, not the much larger horizontal stab, and the solution was safe, effective, and benign. The MAX uses the stab, and trims forward for up to 10 seconds at a shot. That's at least an order of magnitude, maybe two, larger trim input than Davies'. I refuse to believe that a correction that large is "only feel."
Takwis is offline  
Old 13th Dec 2019, 14:18
  #4458 (permalink)  
 
Join Date: Oct 2017
Location: Palmas
Posts: 171
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Takwis
David P. Davies' solution to a slight pitch up into a stall in the 707 used only the elevator, not the much larger horizontal stab, and the solution was safe, effective, and benign. The MAX uses the stab, and trims forward for up to 10 seconds at a shot. That's at least an order of magnitude, maybe two, larger trim input than Davies'. I refuse to believe that a correction that large is "only feel."
I would absolutely love to hear what that man would have to say about the current state of Boeing and the MAX. He was a big fan of the Americans engineering and very well regarded by Boeing if I'm remembering his interview correctly.
Hawker400 is offline  
Old 13th Dec 2019, 14:39
  #4459 (permalink)  
Thread Starter
 
Join Date: Apr 2015
Location: Under the radar, over the rainbow
Posts: 788
Likes: 0
Received 0 Likes on 0 Posts
I really think it's past time to drop the pilot-blaming, which is exactly what this "should have done" conversation amounts to.

"I recently experienced all these warnings in a 737 MAX flight simulator during recreations of the accident flights. Even knowing what was going to happen, I could see how crews could have run out of time before they could have solved the problems."

~Sully
OldnGrounded is offline  
Old 13th Dec 2019, 16:32
  #4460 (permalink)  
 
Join Date: Mar 2015
Location: Washington state
Posts: 209
Likes: 0
Received 0 Likes on 0 Posts
I had an incident in my brand new Audi Q5 yesterday that illustrates the differences between Boeing's "you don't need to know" approach to engineering and what I consider the correct approach.

My new car represents a huge jump in tech compared to my early 2000's vehicle. One of its features is "lane keeping assist" which keeps the car centered on the road based on a camera that looks at the fog line As I was trying out this feature on the freeway, the car suddenly pulled hard to the right. At that moment I realized that the LKA system was trying to follow an offramp, and rather firmly informed it that I preferred to stay on the freeway, thank you. I then resolved not to re-enable the system, which I do not consider ready for production,

There are similarities between this system and MCAS; both are automatic systems that attempt to provide artificial "feel" (LKA will also simulate road turtles if it thinks that you are going off the road) and both can be confused by bad external input. Both can have catastrophic effects on the "flight" (taking an offramp at high speed can lead to a crash.) However, there are crucial differences that make the LKA system annoying rather than deadly:
  • The system is off by default and has to be enabled by the driver.
  • The heads-up display and dashboard indicate that LKA is active
  • The salesman (actually the salesman for a different vehicle) demonstrated the problem on a test drive
  • The system can be overridden by steering wheel inputs (not some secondary switch.)
  • Once overridden, it doesn't keep trying to follow the lane markers
Now imagine the same scenario where LKA is on by default and drivers are not informed of it. Imagine turning in a 2000 Audi Q5 for a 2019 Audi Q5, driving home, and having it suddenly dart towards the exit ramp at high speed, without you knowing that the car even has the possibility of trying to drive itself. You might assume that you have just lost a wheel or had a flat, and take extreme actions in response rather than just firmly holding the wheel and swearing. Knowing that LKA exists and a bit about how it works meant that I could instantly diagnose the problem; intuiting that it might have an automatic system that I have to fight would take a level of intelligence that I do not posses.
Water pilot is offline  

Thread Tools
Search this Thread

Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.