AF447
Join Date: Sep 2002
Location: La Belle Province
Posts: 2,179
Likes: 0
Received 0 Likes
on
0 Posts
As I understand it, the plane was fitted with three identical pitot tubes. Presumably, the reason 3 are fitted is in case one or more fails.
Who, in their right mind therefore, decided it was a good idea to fit three identical tubes, all from the same manufacturer, all of the same type and presumably the same date of manufacture??
If one tube had a stock fault, all three would have it.
Surely it'd be far more sensible to use three different tubes from three different manufacturers?
That way, if one failed, chances are the remaining two would be unaffected.
Who, in their right mind therefore, decided it was a good idea to fit three identical tubes, all from the same manufacturer, all of the same type and presumably the same date of manufacture??
If one tube had a stock fault, all three would have it.

Surely it'd be far more sensible to use three different tubes from three different manufacturers?
That way, if one failed, chances are the remaining two would be unaffected.
You also need to spec the dissimilar designs, and the performance specs would presumably be identical. Since the state of the art for pitot probe design is mature, chances are you'd get very similar designs even from dissimilar vendors.
You'd also end up with the same environmental spec, so the same conditions which would overwhelm one probe's heater capability (if that happens) might very well overwhelm all the dissimilar probes.
And, finally, they didn't put all their eggs in one basket. The ISIS/standby is using a different means in that the standard probes have ADMs at/near the probe, while the ISIS is (I understand) plumbed traditionally with the sensing as part of the ISIS unit. So if you were to have some kind of catastrophic design flaw that took out every ADM the ISIS should still be running.
I don't think the air data system designers are as clueless as you seem to think.

Join Date: Feb 2003
Location: Morten Harkett, Dorset
Age: 100
Posts: 61
Likes: 0
Received 0 Likes
on
0 Posts
If all Pitot tubes are essentially identical, why have airbus stated they need replacement?
There's either a slight difference in design or a problem with manufacture, which means that these new probes are (apparently) less likely to fail.
NASA take this approach of ensuring backup systems are all different, why not airbus?
There's either a slight difference in design or a problem with manufacture, which means that these new probes are (apparently) less likely to fail.
NASA take this approach of ensuring backup systems are all different, why not airbus?

Join Date: Jun 2009
Location: I am where I am and that's all where I am.
Posts: 660
Likes: 0
Received 0 Likes
on
0 Posts
wheelie my boeing
In otherwords turbulence is incapable of moving the joystick despite it's significant moment arm and weight out on that moment arm?
I find that hard to believe.
{^_^}
In otherwords turbulence is incapable of moving the joystick despite it's significant moment arm and weight out on that moment arm?
I find that hard to believe.
{^_^}

Join Date: Jan 2008
Location: Earth (currently)
Posts: 22
Likes: 0
Received 0 Likes
on
0 Posts
The aircraft needs two identical-ish engines for stable flight. The pitot tubes, however are somewhat different.

Join Date: Feb 2003
Location: Morten Harkett, Dorset
Age: 100
Posts: 61
Likes: 0
Received 0 Likes
on
0 Posts
And, finally, they didn't put all their eggs in one basket. The ISIS/standby is using a different means in that the standard probes have ADMs at/near the probe, while the ISIS is (I understand) plumbed traditionally with the sensing as part of the ISIS unit. So if you were to have some kind of catastrophic design flaw that took out every ADM the ISIS should still be running.

Join Date: Feb 2003
Location: Morten Harkett, Dorset
Age: 100
Posts: 61
Likes: 0
Received 0 Likes
on
0 Posts
meekmok, you know what I mean!
Using your parachute analogy, you wouldn't jump out of a plane with a main chute and reserve which were both packed by the same guy, would you..?
Using your parachute analogy, you wouldn't jump out of a plane with a main chute and reserve which were both packed by the same guy, would you..?

Join Date: Sep 2002
Location: La Belle Province
Posts: 2,179
Likes: 0
Received 0 Likes
on
0 Posts
Yes. "something" managed to apparently disable dissimilar systems.
Which implies that no dissimilar design philosophy can be foolproof.
All pitots stick out into the airflow. All are subject to icing, or to hail, or to birdstrike, etc. There is nothing you can do about that, except try to protect where you can. But you can't spec for icing massively outside the expected range, you can't build a pitot to be invulnerable to hail, and so on.
And AB aren't the only ones - indeed I'd say that it's normal for the primary air data systems to be of common design, with only (at most) a dissimilar standby system. That's what this a/c has.
Which implies that no dissimilar design philosophy can be foolproof.
All pitots stick out into the airflow. All are subject to icing, or to hail, or to birdstrike, etc. There is nothing you can do about that, except try to protect where you can. But you can't spec for icing massively outside the expected range, you can't build a pitot to be invulnerable to hail, and so on.
And AB aren't the only ones - indeed I'd say that it's normal for the primary air data systems to be of common design, with only (at most) a dissimilar standby system. That's what this a/c has.

Join Date: Sep 2002
Location: La Belle Province
Posts: 2,179
Likes: 0
Received 0 Likes
on
0 Posts
NASA take this approach of ensuring backup systems are all different, why not airbus?
The multiply redundant systems are similar.
I think you'll find that's a common design approach. Including NASA-specced systems. (Who aren't exactly 'golden' when it comes to safety of design, so I wouldn't put them on a pedestal myself)

Join Date: Jun 2009
Location: I am where I am and that's all where I am.
Posts: 660
Likes: 0
Received 0 Likes
on
0 Posts
Not having read the SB or AD I don't know.
{o.o}

Join Date: Aug 2008
Location: Thessaloniki, GRECE
Age: 40
Posts: 67
Likes: 0
Received 0 Likes
on
0 Posts
photos of the wreckage

Join Date: Mar 2002
Location: Florida
Posts: 4,569
Likes: 0
Received 0 Likes
on
0 Posts
There is way too much blame being assigned here to a single entity be it a manufacturer or a single system.
The investigation is on-going and damn few facts are available to establish a causal chain. This thread is begining to look amateurish in its over simplification of what went wrong and who is to blame.
The idea that anybody involved with the investigation would not like to find the critical evidence (FDR/CVR etc.) is outlandish and demeans a supposedly professional internet site.
This is not about blame, lawyers or insurrance carriers, it's about finding enough information to prevent a similar accident.
Root cause is hogwash. Nobody can effectively eliminate any system malfunction whether it be pitot tube interactions with computers or a weather radar outage.
Our efforts need to be focused on minimization (of an occurrence) and mitigation (of the resulting hazard) To do this you need data on all the interactions that were at play in this accident including the pilots.
In today's machine you can not take the pilot out of the accident causal chain, yet nobody is even considering the what-ifs in this discussion. Remember for every system failure including the pilots there is a cause effect and that is ultimately how the corrective action will be accomodated.
The investigation is on-going and damn few facts are available to establish a causal chain. This thread is begining to look amateurish in its over simplification of what went wrong and who is to blame.
The idea that anybody involved with the investigation would not like to find the critical evidence (FDR/CVR etc.) is outlandish and demeans a supposedly professional internet site.
This is not about blame, lawyers or insurrance carriers, it's about finding enough information to prevent a similar accident.
Root cause is hogwash. Nobody can effectively eliminate any system malfunction whether it be pitot tube interactions with computers or a weather radar outage.
Our efforts need to be focused on minimization (of an occurrence) and mitigation (of the resulting hazard) To do this you need data on all the interactions that were at play in this accident including the pilots.
In today's machine you can not take the pilot out of the accident causal chain, yet nobody is even considering the what-ifs in this discussion. Remember for every system failure including the pilots there is a cause effect and that is ultimately how the corrective action will be accomodated.

JD-EE
Back in the days of the first Jets control runs became more complex and at higher speeds their weight became too much for comfortable flying so servos were introduced. The problem with servos was that they did not always feed the control surface pressure back to the pilot so an artificial "feel" was added to control columns. IIRC it was called "Q Feel" and was considered rather revolutionary at the time.
Q Feel was necessary so pilots could judge, ( based on the old direct systems) how much their control surfaces were deflecting or pressing on the air and secondly, as the control pressure became significantly greater, would not deflect a control surface beyond what was safe.
Then true FBW came along. The control inputs are fed into a computer which judges the amount of control surface deflection required for the indicated manoeuver and applies it. The computer also ensures that the control surface is not deflected too much for the conditions so 'Q' is not necessarily required.
Now personally this worries me a bit, but, as someone pointed out on another thread where we were discussing this, the difference is not the risk of electric failure but the difference in risk between electric failure and physical component failure eg. cable or rod bearing etc., in systems which are both complex. There is little evidence so far in statistical terms that FBW is any less safe than the old physical connection controls.
Back in the days of the first Jets control runs became more complex and at higher speeds their weight became too much for comfortable flying so servos were introduced. The problem with servos was that they did not always feed the control surface pressure back to the pilot so an artificial "feel" was added to control columns. IIRC it was called "Q Feel" and was considered rather revolutionary at the time.
Q Feel was necessary so pilots could judge, ( based on the old direct systems) how much their control surfaces were deflecting or pressing on the air and secondly, as the control pressure became significantly greater, would not deflect a control surface beyond what was safe.
Then true FBW came along. The control inputs are fed into a computer which judges the amount of control surface deflection required for the indicated manoeuver and applies it. The computer also ensures that the control surface is not deflected too much for the conditions so 'Q' is not necessarily required.
Now personally this worries me a bit, but, as someone pointed out on another thread where we were discussing this, the difference is not the risk of electric failure but the difference in risk between electric failure and physical component failure eg. cable or rod bearing etc., in systems which are both complex. There is little evidence so far in statistical terms that FBW is any less safe than the old physical connection controls.

I don't own this space under my name. I should have leased it while I still could
wheelie my boeing
In otherwords turbulence is incapable of moving the joystick despite it's significant moment arm and weight out on that moment arm?
I find that hard to believe.
In otherwords turbulence is incapable of moving the joystick despite it's significant moment arm and weight out on that moment arm?
I find that hard to believe.
Even your Microsoft Flight Sim pilot knows that early joysticks had no physical feedback. Only later games joysticks have feedback.
I don't know Airbus but there is no need for physical feedback. You place the joystick (computer mouse or whatever) in the direction you want it to go then you observe the effect. This may be an indication of control surface position, the movement an instrument etc. The feedback is visual and not physical.

Join Date: Jun 2009
Location: I am where I am and that's all where I am.
Posts: 660
Likes: 0
Received 0 Likes
on
0 Posts
Assuming, that no VHF coverage is avail. ACARS is communicating via SATCOM. To contact the satellite, the A/C has to know his position in regard to the satellite to adjsut the dish.
ACARS is linked with most of the computers , so it should be easy to track it by sending LAT/LON datas.
ACARS is linked with most of the computers , so it should be easy to track it by sending LAT/LON datas.

Join Date: Jun 2009
Location: I am where I am and that's all where I am.
Posts: 660
Likes: 0
Received 0 Likes
on
0 Posts
Wheelie
Who is talking about feedback?
In severe turbulence, sufficient to damage a plane, is the pilot's seating secure enough that the transient accelerations of the plane are not going to move the pilots arm out of the pilot's control in response to the accelerations?
Will a stick with no hand on it stay perfectly still poking up there in the air above the mounting point as the plane accelerates with rapid jerks in random directions?
This is independent of whether the stick's output is controlling the plane or not. It's a question about whether under very heavy turbulence the input to the stick from the effects of the turbulence is stable enough to fly the plane. If not and the pilot HAS control isn't it possible that the bouncing around could lead to improper or damaging imputs to the flight control system?
Who is talking about feedback?
In severe turbulence, sufficient to damage a plane, is the pilot's seating secure enough that the transient accelerations of the plane are not going to move the pilots arm out of the pilot's control in response to the accelerations?
Will a stick with no hand on it stay perfectly still poking up there in the air above the mounting point as the plane accelerates with rapid jerks in random directions?
This is independent of whether the stick's output is controlling the plane or not. It's a question about whether under very heavy turbulence the input to the stick from the effects of the turbulence is stable enough to fly the plane. If not and the pilot HAS control isn't it possible that the bouncing around could lead to improper or damaging imputs to the flight control system?

Join Date: Jul 2000
Location: U.S.A.
Posts: 474
Likes: 0
Received 0 Likes
on
0 Posts
Could someone explain how stall warning is triggered in the A-330? There is reference to it being tied into air data information....is there not an AOA probe?
Thanks in advance....
Thanks in advance....
