Norwegian 787 blows a donk in FCO
Join Date: Jan 2013
Location: Seattle Area
Posts: 263
Likes: 0
Received 0 Likes
on
0 Posts
Well, yes, but I was referring to how the folks making the ETOPS AD decisions were viewing that event at the time in the context of everthing else going on with the 787 Trent at the time. That event was not what drove the ETOPS restrictions.
Hans has already crossed that line...
TCMA uses multiple air/ground sources to determine 'on-ground'. Default is air. It's resident in the FADEC software and DAL A s/w (which MCAS wasn't).
I'm not familiar with the specifics of the 787 TCMA, but on the 747-8 TCMA uses three radio altimeter and two WOW signals. At least three signals must indicate ground, with at least one each from the Radio Altimiter and WOW.
I'm not familiar with the specifics of the 787 TCMA, but on the 747-8 TCMA uses three radio altimeter and two WOW signals. At least three signals must indicate ground, with at least one each from the Radio Altimiter and WOW.
So, was definitely not trying to get personal, your input on these forums is very much appreciated by me.
It definitely sounds like B took the right approach with the amount of inputs to prevent problems here.
I was just pointing out that there have been a few times were B could have done better, specifically on the 737. The THY crash in AMS happened because the pilots were asleep AND because the AT only looked at one RA input. B could have taken the hint, and not have changed from the original MCAS on the KC-46 that used both AOAs to use only one AOA on the 737. Getting a stick-shaker on one side because that side has a failed AOA??? Maybe I should not have commented on this specific issue, but B has had a thrust reverser deploy in the air, with a subsequent design change, and it looks like it might have to do some work on MCAS for the 737. I am on the A320, and there is a LOT of things I wish were done the Boeing way*), but having a vote between 3 systems for most things is a plus.
*):
-side-sticks not interconnected
-throttles not moving
-VNAV not arming
-can't update descend profile after TOD
-will disregard restrictions on the arrival because it "thinks" it's on the approach
-ASO
Last edited by hans brinker; 21st Aug 2019 at 14:37.
Join Date: Dec 2006
Location: Germany
Posts: 80
Likes: 0
Received 0 Likes
on
0 Posts
Well, at least EASA AD 2018-0086 mentions that incident and was issued April 2018 (incident was on March 23rd). It requires depairing certain Trent 1000 versions. At the same time the FAA released AD 2018-08-03 imposing ETOPS limitations.
TCMA uses multiple air/ground sources to determine 'on-ground'. Default is air. It's resident in the FADEC software and DAL A s/w (which MCAS wasn't).
I'm not familiar with the specifics of the 787 TCMA, but on the 747-8 TCMA uses three radio altimeter and two WOW signals. At least three signals must indicate ground, with at least one each from the Radio Altimiter and WOW.
I'm not familiar with the specifics of the 787 TCMA, but on the 747-8 TCMA uses three radio altimeter and two WOW signals. At least three signals must indicate ground, with at least one each from the Radio Altimiter and WOW.
So while it would be interesting to understand the details of the 787 runway shutdown, we can at least be pretty confident that it does not translate to an in flight probability.
Why can't I update my descent speed without re-cruising??
Thread Starter
Join Date: Aug 2000
Posts: 1,501
Likes: 0
Received 0 Likes
on
0 Posts
Murphy is a friend most senior pilots are very familiar with.
Agree that anything may happen, but in fairness, the safeguards Tdracer enumerates for TCMA seem adequate to push the failure probability below that of both engines falling off.
But you need to keep in mind that the redundancy is always connected to the perceived system criticality. The autothrottle was always intended as an aid - not a flight critical system - and there are a number of single failures that can adversely affect the Autothrottle functionality. That's why pilots need to be trained that they need to monitor the system and not just assume it'll do the right thing (and shame on any training program that does not emphasize that fact). Just a few examples, pre-FADEC, is was not particularly uncommon for high downstream cable loads to overwhelm the clutch and cause one throttle to not move (or not move as much) - and even with FADEC, if someone drops something like a pencil down in the throttle quadrant, it can restrict a throttle. On the 747, 757, and 767, the autothrottle drive is a single worm gear - if that gear fails the autothrottle can't move the throttles. As a propulsion guy, we never assumed the autothrottle would always work properly - it made our job harder but we designed for it. The pilots needed to be trained for it as well (I was told that the 787 A/T was designed as a flight critical DAL A system - a first for Boeing Commercial, but I don't know details).
I was just pointing out that there have been a few times were B could have done better, specifically on the 737. The THY crash in AMS happened because the pilots were asleep AND because the AT only looked at one RA input. B could have taken the hint, and not have changed from the original MCAS on the KC-46 that used both AOAs to use only one AOA on the 737.
Join Date: Dec 2005
Location: EDDM
Posts: 109
Likes: 0
Received 0 Likes
on
0 Posts
Well, Lauda 4 operated by a 763 also had a thrust reverser deploy in 1991 and Boeing claimed it was possible to recover from it.
Only Niki Lauda offering to test such a situation himself bought about an admission.
https://en.m.wikipedia.org/wiki/Lauda_Air_Flight_004
Only Niki Lauda offering to test such a situation himself bought about an admission.
https://en.m.wikipedia.org/wiki/Lauda_Air_Flight_004
Well, Lauda 4 operated by a 763 also had a thrust reverser deploy in 1991 and Boeing claimed it was possible to recover from it.
Only Niki Lauda offering to test such a situation himself bought about an admission.
https://en.m.wikipedia.org/wiki/Lauda_Air_Flight_004
Only Niki Lauda offering to test such a situation himself bought about an admission.
https://en.m.wikipedia.org/wiki/Lauda_Air_Flight_004
It took months of investigation and wind tunnel testing to understand why it wasn't controllable - after which Boeing added the third lock. I was part of the wind tunnel testing of what a hi-bypass wing mounted engine could do if it deployed in-flight with the engine at high power. I'll always remember the aero S&C guy during the testing - he was rather arrogant and before we'd started he was positive that it was controllable - even volunteered to go on a flight test to test the exact Lauda scenario. But after we started testing and he examined the data, he started getting real quiet, and by the time we finished up he wouldn't talk to most of us. Last test we did was a flow visualization using hundreds of yarn tufts. It was frightening to witness - with the engine at power, the reverser efflux basically blanked out most of the upper surface of the wing on that side. The wing would have dropped like a rock.
What's not commonly known is that when the FAA/JAA went to Airbus and wanted them to add a third lock, Airbus refused, claiming that it could never happen with their system. Until it did. They very nearly had their own Lauda - they were fortunate that the reverser re-stowed and the pilot was barely able to regain control and save it.
What's not commonly known is that when the FAA/JAA went to Airbus and wanted them to add a third lock, Airbus refused, claiming that it could never happen with their system. Until it did. They very nearly had their own Lauda - they were fortunate that the reverser re-stowed and the pilot was barely able to regain control and save it.
Join Date: Sep 2011
Location: FL390
Posts: 238
Likes: 0
Received 0 Likes
on
0 Posts
I was told that the 787 A/T was designed as a flight critical DAL A system
(ie, in an RTO the speed brake level is commanded to full up, which demands full speed brake. If that lever or motor fails, the speed brakes don’t deploy. In this case, why not drive the surface directly and have the lever reflect the surface deployment? Likewise the engine start switches, which leave one in a very entertaining scenario if the release solenoid fails after engine start and the switch jams on. This is an aircraft designed in the 21st century, FFS. Don’t get me started on the FLCH trap).
IMHO having flown both Airbus and Boeing types, pilots are very much an “afterthought” in the Boeing design. The controls might not be back-driven in an Airbus, but the aircraft tells you far more about what it’s thinking than any Boeing.
Join Date: Jun 2008
Location: Doonfoot, Ayr
Age: 70
Posts: 42
Likes: 0
Received 0 Likes
on
0 Posts