PPRuNe Forums

PPRuNe Forums (https://www.pprune.org/)
-   Tech Log (https://www.pprune.org/tech-log-15/)
-   -   AF 447 Thread No. 6 (https://www.pprune.org/tech-log/460625-af-447-thread-no-6-a.html)

auraflyer 6th October 2011 00:45


Xerox invented it, Apple nicked it, Microsoft copied it
Not quite. People at Xerox PARC invented the idea - but their windows were not able to overlap. They couldn't figure out how to do overlapping windows. (The issue has to do with the arbitrary shapes that can be formed when one window is overlaid by multiple others, which you need to do clipping of content when drawing, and when refreshing.)

Apple toured the facility (with permission) and their engineers saw the interface. Unaware that PARC engineers hadn't been able to do overlapping windows, Bill Atkinson actually worked it out. In assembler. (Anyone who has programmed 68k Mac should be aware of 'regions', which is how it's done.) That was one of the most important parts of getting the interface into sellable form.

It also helped that some of the Xerox people (e.g. Larry Tesler) were so impressed with the Apple people that they joined the Apple team working on the Lisa.

There's a lot of cool material about this on the web, but Hertzfeld's book "Revolution in the valley" is a really great read on this subject.

Edit: mixed up Bill and Andy as the inventor. See the original patent.

Lyman 6th October 2011 00:50

Hi wozzo. Here we see a drastic hole in the popular myths. "I've lost my VSI". Erm, "How's yours?" This narrow, myopic tilting at published data driven conclusions is getting bizarre.

We are left to flutter in the winds of our need to know, and the thin soup served us by BEA.

It didn't happen this way....

Four minutes is still four minutes, and each fragile crystal of "conclusion" is less than useless when weighed against the totality as recorded.

There is no conclusion that the Thales were the cause, there is no conclusion that the a/c climbed to STALL with Pilot input only, etc. etc.

In a free and open society, isn't it clear that there are stones in the soup?

Yet every (nearly so) uttering is the whine of Pilot error.

It's in there (PE), oh yeah. So is a great deal more, and EASA is holding back.

BEA are not the problem, they are the messenger. And Mercury is muzzled. One has some trust of the science in BEA, and none in the wags who call their orders.

infrequentflyer789. I isolate the A330; it is in the family, but it is the only TWIN which does what it does.

Haven't the 330's been removed from Rio-Paris? See?

wozzo 6th October 2011 01:27


Originally Posted by Lyman (Post 6735742)
"I've lost my VSI". Erm, "How's yours?"

Same. And therefore subject to the same misinterpretation.

Also, the info does not come from BEA.

Turbine D 6th October 2011 02:41

Dozy

I've sat on the sidelines watching and reading lately. Your posts were at one time informative and interesting to read, but have turned into total protection of Airbus recently. Airbus doesn't need protection, they are experts at "protections".

I have got to go with gums on this. The computer system, e.g., Alternate Law 1, Alternate Law 2 and subsets of Alternate laws are very confusing. Normal Law and Direct Law are very clear: Normal Law - the computers fly the plane and the pilots watch, Direct Law - the pilots fly the plane and the computers watch. That is simple. The in-betweeners are a mish mash of: You have this but not that except when this is this or that is that....

Think about it, in the case of AF447, they had at most three minutes to determine what was wrong, what was going on and what to do, with the balance of time being on the express elevator to the sea. From a technical and engineering point of view, here is what I see wrong on Airbus' part in this saga:

1. Airbus failed to handle the pitot tube problems in a manner that they should have.

2. Airbus failed in their risk assessment/risk abatement to adequately cover the total waterfront, e.g., total flight envelope. They were nearly mute on flight problems at high altitudes and speeds. Guess they assumed problems couldn't happen there.

3. Airbus failed to provide complete key memorization items in their flight instructions for the A-330, leaving out for the most part, high altitude and high Mach cruise situations.

Now you can say this is Monday morning quarterbacking, but it isn't. It is good common sense, business best practices - risk and risk abatement processes that should have been in place but were not.

You can also say and you have on many occasions, the plane did exactly what it was supposed to do, but in reality, it crashed. That was not Airbus' intent I am sure, nor was it the pilots flying or Air France's intent either.

Like it or not, Airbus has the leading role, it is their airplane (a good one at that), their design, their computer control flight system. Airbus therefore has or should have the leading role in establishing all of the criteria, instructions, do's and don'ts to pass along to individual airlines who buy their planes and then the pilots who will fly them and even train them. Additionally they have the lead role in determining what should be done when critical monitoring/detection devises develop a history of not performing to expected standards or expectations.

Prior to AF447, there was a substantial case history established on the pitot tubes (selected and installed by Airbus) which indicated there was an icing sensitivity problem. A good risk assessment/risk abatement analysis (an industry best practice) would indicate this to be a significant safety item needing rapid attention. Things that happened in flight on other airplanes would be an indicator that sooner or later a flight crew could/would respond incorrectly. As in the role of leader, Airbus must not have/didn't push the issue hard enough with EADS, or so it seems or didn't view correctly the critical nature of pitot icing at high altitude and high Mach.

AF447, three minutes to go (not knowing that at the time), A/P come off, A/T come off, the stall warning sounds, the nose is slightly down and one wing is lower than the other. We are in Alternate, is it 1 or 2? Going too fast? Going too slow? What is the speed? What are the protections? What do we have and what don't we have? What does the memorized list developed by Airbus say? Do we have a memorized list for high altitude/high Mach? That was the situation. Now Airbus did do a good risk analysis/risk abatement for low speed, low altitude situations, landings, T/O's, thus developed the memory lists. But they stopped short. In fact, if you apply the low altitude low speed do's to high altitude/high Mach, it probably makes the problem worse. What happens to THS flight protection in Alternate law? What's the AOA? Confusion? Help? Panic? 3 minutes to sort things out. Cavalry charges, single chimes after single chimes, single chimes every 5 seconds, lots of crickets? Get the gist?

Airbus had the lead on pitot tubes, they selected and installed them, they had the wealth of data regarding icing and what other airline/Airbus aircraft did at cruise when pitots iced. They knew there was a difference between manufacturers and performance/non-performance. What did they do about it? Did they do a risk assessment/risk analysis? Was it deemed to be a hoe-humer or a critical problem when flying at high altitudes and high Mach? What did they advise EADS to do? Airbus has the lead here, not EASA. Did EASA respond appropriately based on Airbus' strong recommendations? Did Airbus have a strong recommendation?

So at cruise in the middle of a moonless night in the middle of the Atlantic Ocean in the active ITCZ at some level of turbulence the A/P quits, and computers go off line, partially but not fully and the plane doesn't even remain in level flight. Now Airbus knew the AOA was a critical key component to assure safe flight, but where was the indicator to know what it was and where it was going? Is there a key memory list, e.g., level wings fly pitch and power? What should be the correct pitch setting when you have no speed indications?

And I could go on in more detail and ask more questions, but I won't. I think there is enough to illustrate that Airbus shares much responsibility as do the flight crew, the airline and even EASA if they relaxed on an Airbus' "Strong" recommendation, if there was one. But Dozy, to continue to protect Airbus is fruitless, it is like pi**ing into the wind, sooner than later you are going to get wet and I think you are getting wet.

Gretchenfrage 6th October 2011 03:18


“I’ve lost VSI,” the junior co-pilot said of the Airbus’s vertical-speed indicator, according to a recording detailed in the report from court-appointed experts. In fact, the instrument was functioning normally, its analog needle immobilized at the lower limit because the plane was hurtling toward the ocean at 15,000 feet a minute, the document seen by Bloomberg News shows.
What about the digital readout? Should still have been there.
This shows quite clearly that all the advocates about "it's on the screens, just read it; who needs feedback?" are naive:
In stress, humans read badly. We need either tactile feedback or a more clear display than many of the digital displays.
Simply telling the pilots to read the five-color s#!thouse on reflecting and worn-out screens with a multitude of same color digital indicators and FMAs with five windows on three rows with zillions of different abbreviations is, to cite the Borg, futile.....

I do realize that there is no feedback on VSI, but there is a more intelligent display mode than the donkey's dick that just disappears on the lower end.
It's the tape-style color coded indicator on a MD11. It stays filled white and is way more legible, even under stress.

AlphaZuluRomeo 6th October 2011 09:45


Originally Posted by wozzo (Post 6735693)
I think there is some new information in that report:

“I’ve lost VSI,” the junior co-pilot said(...)


Originally Posted by wozzo (Post 6735772)
Also, the info does not come from BEA.

Didn't it?

BEA's interim report #3, CVR transcript

2 h 11 min 58

FR :
F/O (PF) : J’ai un problème c’est que j’ai plus de vario là
CPT : D’accord
F/O (PF) : J’ai plus aucune indication

EN translation :
F/O (PF) : I have a problem it’s that I don’t have vertical speed indication
CPT : Okay
F/O (PF) : I have no more displays

“I’ve lost VSI” is just another translation for “j’ai plus de vario là”.





Originally Posted by Lyman (Post 6735742)
Haven't the 330's been removed from Rio-Paris? See?

AF443 : B777-300ER
AF445 : A330-200 (this was AF447 before)

Hardly conclusive, IMO...:confused:

DozyWannabe 6th October 2011 11:40


Originally Posted by Turbine D (Post 6735837)
Dozy

Your posts were at one time informative and interesting to read, but have turned into total protection of Airbus recently. Airbus doesn't need protection, they are experts at "protections".

If that is the case then I suggest you read what I've been posting in isolation from what others (including yourself, it would appear) chose to read into what I was saying.


I have got to go with gums on this. The computer system, e.g., Alternate Law 1, Alternate Law 2 and subsets of Alternate laws are very confusing. Normal Law and Direct Law are very clear: Normal Law - the computers fly the plane and the pilots watch, Direct Law - the pilots fly the plane and the computers watch. That is simple. The in-betweeners are a mish mash of: You have this but not that except when this is this or that is that....
Then you didn't read what I was saying - which is that at the most basic level, all a pilot has to understand about the control laws is that you have hard protections in Normal Law, but do not have them in any of the other laws. What that means in the case of this accident is that as such, pulling up and continuing to pull up in the face of a Stall Warning is just as dangerous as it would be in any other airliner once Normal Law is lost.

The sub-modes are there purely for engineering and systems management purposes - as I said, think of them as the different systems configurations that would have been handled by the Flight Engineer on aircraft of earlier generations in the case of damage or failure. Gums knows his stuff, there's no doubting that - but he has got it into his head that the Normal Law protections are akin to autopilot limitations, when in fact they give the pilot considerably more leeway than that (I sent him along some of the Flight articles that covered the A320's development as evidence).


Think about it, in the case of AF447, they had at most three minutes to determine what was wrong, what was going on and what to do, with the balance of time being on the express elevator to the sea.
They'd have had a lot longer if the PF had not started pulling back on the sidestick and continued to do so for the majority of those three minutes. If this was any other aircraft this would have been an open-and-shut case, but because there are those on here that will continue to insist that the computers must be to blame in any Airbus accident, we're still going over the same stuff months later.



From a technical and engineering point of view, here is what I see wrong on Airbus' part in this saga:

1. Airbus failed to handle the pitot tube problems in a manner that they should have.
They told the operators to fix it and sent out bulletins to pilots explaining workarounds until such time as the fixes were completed - what more could they have done without grounding the entire fleet (which prior to this accident would have looked like overkill)?


2. Airbus failed in their risk assessment/risk abatement to adequately cover the total waterfront, e.g., total flight envelope. They were nearly mute on flight problems at high altitudes and speeds.
Them and the rest of the industry.


Guess they assumed problems couldn't happen there.
That's a little bit of editorialising from you. I think it's fairer to say that - like the rest of the industry - they assumed that pilots would be sufficiently qualified and knowledgable to recover from most high-altitude problems.


3. Airbus failed to provide complete key memorization items in their flight instructions for the A-330, leaving out for the most part, high altitude and high Mach cruise situations.
Could you be more specific?


You can also say and you have on many occasions, the plane did exactly what it was supposed to do, but in reality, it crashed. That was not Airbus' intent I am sure, nor was it the pilots flying or Air France's intent either.
It wasn't Bombardier's or ColganAir/Continental's either, but the sad truth is that if you shave the training budgets to the extent where basic airmanship is deprecated in favour of checking only up to the onset of warnings then you will start to get problems.


As in the role of leader, Airbus must not have/didn't push the issue hard enough with EADS, or so it seems or didn't view correctly the critical nature of pitot icing at high altitude and high Mach.
Not wanting to nitpick, but do you mean EASA (European safety authority) rather than EADS (Airbus's parent company)? I'm sure that Airbus went into consultation with EASA and the airlines and together they determined what the response should be. For better or worse, it seems to have been assumed by the industry in general that problems at high-altitude by their nature should buy the pilots enough time and altitude to remedy the situation. Even the most extreme examples of UAS upset prior to AF447 led to relatively minor level busts rather than significant control difficulties - so even if Airbus came to the discussion with a serious AD in mind, it is likely that the airlines would have pushed back at the prospect of large chunks of their fleets spending weeks in MX.


AF447, three minutes to go (not knowing that at the time), A/P come off, A/T come off, the stall warning sounds, the nose is slightly down and one wing is lower than the other.
OK -so we're not in any danger yet. Let's not touch the controls until we're sure what's happening.

[Actual response : Immediate grip on the PF's sidestick including a significant nose-up command, far in excess of what would be required to bring the nose back up to S&L. ]


We are in Alternate, is it 1 or 2?
Doesn't matter. Anything other than Normal => No hard protections. We need to be more careful with the inputs (though no more careful than in any airliner without protections)


Going too fast? Going too slow? What is the speed?
We don't know, so fly pitch and power until things are stable.


What are the protections?
See above - there aren't any (or to be more precise there aren't any that will counteract pilot demands).


What do we have and what don't we have? What does the memorized list developed by Airbus say? Do we have a memorized list for high altitude/high Mach?
Pitch and power. That's just airmanship - no memory list should be necessary (although admittedly it would likely have helped).


That was the situation. Now Airbus did do a good risk analysis/risk abatement for low speed, low altitude situations, landings, T/O's, thus developed the memory lists. But they stopped short.
As did every other manufacturer.


In fact, if you apply the low altitude low speed do's to high altitude/high Mach, it probably makes the problem worse.
Well yes - the procedure the PF appeared to be closest to following was in fact the low-altitude Wind Shear/Microburst escape - although no procedure was in fact followed to the letter.


What happens to THS flight protection in Alternate law?
Same as the others - it goes away - so we need to be careful.


What's the AOA? Confusion? Help? Panic? 3 minutes to sort things out. Cavalry charges, single chimes after single chimes, single chimes every 5 seconds, lots of crickets? Get the gist?
We're getting Stall Warnings - we've had them for a minute. Why then is our nose at 15 degrees up?

[Answer : Because the PF was holding it there.]


Did Airbus have a strong recommendation?
Yes - replace them as quickly as [the airlines] were able (see above).


Now Airbus knew the AOA was a critical key component to assure safe flight, but where was the indicator to know what it was and where it was going?
Same place it was on every other modern airliner - nowhere.


Is there a key memory list, e.g., level wings fly pitch and power? What should be the correct pitch setting when you have no speed indications?
The assumption was probably that basic airmanship would preclude a 15 degree nose-up pitch at high-altitude - unfortunately relying on that does not appear to have been enough.


And I could go on in more detail and ask more questions, but I won't. I think there is enough to illustrate that Airbus shares much responsibility as do the flight crew, the airline and even EASA if they relaxed on an Airbus' "Strong" recommendation, if there was one.
Which I've never argued with, if you go back over my posts on the subject - my contention has been with those that have argued that there is something fundamentally wrong with the aircraft design and that as such Airbus must carry the whole can.


But Dozy, to continue to protect Airbus is fruitless, it is like pi**ing into the wind, sooner than later you are going to get wet and I think you are getting wet.
OK - let me make this as clear as I can - I'm not "protecting Airbus". I'm simply taking issue with some posters on here that are not discussing the factors of the case honestly, but instead are coming to the table with their pre-conceived notions about why they dislike the Airbus FBW design and are trying to hammer the facts of the case to fit the mould of their prejudice.

At least one poster continues to come up with ever more lurid theories about how it must have been the aircraft's fault. Indeed, insisted until *very* recently that the VS must have broken off in flight, then made excuse after excuse including how there must have been a software bug that popped the spoilers on one side, that the THS control software suffered a glitch and ordered a runaway trim without the pilot's knowledge...

Others are trying to turn this into an argument about a 23-year-old accident in which the pilot thought he was better than he was, crashed the aircraft and killed three people (two of them children) in the process - and consistently refused to take responsibility for his actions since, making up excuse after excuse as every one was disproven by the investigation.

All of this comes from the patently false idea that Airbus and airline management were in cahoots with each other to develop an aircraft that would de-skill the job of airline pilots and reduce them to "systems operators" akin to any other office monkey. Even gums, who clearly deserves to be taken seriously in most respects, harbours this idea in the background of his thinking - which is a shame because it clouds the rest of what he's saying.

I have never said that Airbus should not shoulder some responsibility - in fact I've always been at pains to point out that because of the pitot tube issues there is no way they can avoid it. However, I do take issue with some posters going on the "same old !!!!!" tour when it comes to incidents involving the FBW Airbus family and bringing up factors that have no bearing on the case (sidestick vs. yoke) or could be applied to the whole industry (lack of preparation for high-speed stalls, recurrent training cut to the bone).

So please - if you're going to level this kind of stuff at me, please have a look at what I'm actually saying - in isolation from what others claim I am saying.

[EDIT : I hope IGh won't mind me borrowing this image from his post on the ANA 737 upset thread in R&N, but it sums up more succinctly than I could what I believe to be the crux of the issue regarding the crew response (mitigated in this case by a poor attitude to training on the part of the industry):

http://i675.photobucket.com/albums/v...rtlefactor.jpg
]

wozzo 6th October 2011 12:03


Originally Posted by AlphaZuluRomeo (Post 6736283)
Didn't it?
BEA's interim report #3, CVR transcript
“I’ve lost VSI” is just another translation for “j’ai plus de vario là”.

Ah, OK. So the new report indicates that investigators (BEA or others) seem to be sure that VSI indeed was functioning properly and the PF was misreading. Small step, I know.

averow 6th October 2011 12:27

Complex machines, etc.
 
Very fine and succinct summary. The problem going forward is to reinforce that there is no substitute for CRM. Rare events can and do happen if one gets lulled into a sense of complacency in ones profession. Trainers, designers and airline companies need to acknowledge this paradox: technology and design may be lulling the next generation into thinking that the machines are foolproof.

lomapaseo 6th October 2011 16:10

These kind of technical discussions will get out of hand if we decide to express legal arguments about fault in this forum.

It's bad enough about expressing opinions about how to redesign a complex system, although soothing to the soul. Expressing desires for this and that seems to be quite adequate.

Clandestino 6th October 2011 17:12

Uncle Clandestino's quiz time!
 

Unfortunately, as the aeroplane drops from under the pilot and its nose dips earthward, the pilot's "instinctive" reaction will be to haul back all the harder on the stick. If his imagination works with the faulty images, if he images that the stick is the airplane's up-and-down control, he can hardly help hauling back on the stick. This instinctive reaction will be especially impulsive and uncontrollable if the pilot has failed to sense the coming of the stall, and the stall takes him by surprise.

And that is the real danger of stalling: this faulty reaction to the stall, rather than the stall itself. It is quite rare that a pilot is kiled simply because he stalled. But it happens with tragic monotony that a pilot is killed because, stalled when he did not expected it, he either fails to recognize the stall for what it is, or fails to control that impulsive desire to haul back on the stick: he clamps the stick back against his stomach in a terrified cramplike effort to hold the aeroplane up, and thereby makes the stall worse or converts it into spin.
Questions:
1. Who wrote that and when?
2. What was the warning about technology and nature, made by the famous writer, who met his doom while flying an F-5?
3. What is written in Ecc. 1:9?

RetiredF4 6th October 2011 19:34

1. Stick and rudder, 1944, Wolfgang Langewiesche also he didn´t die in an F5, but at the age of 95 in 2002.

I try a potshot at questions two and three:

2. The theory of flight often fails to show the pilot the most important fact in the art of piloting, -the angle of attack- and how it changes in flight.

3. The working speeds of an airplane


Very neat telling from Page 75, i like that one:


Certainly some instrument is needed that would tell the pilot exactly what his angle of attack is, that is, how much buoyanncy he has, how close he is to stall. But the art of flying is still in a primitive state . The most important fact about an airplane´s flight condition is not indicated by an instrument. This is not because such an indicator cannot be built but because designers don´t apreciate the need for one.
Perhaps they are right, -too many pilots don´t know what Angle of Attack is in the first place, and such an instrument´s indications would be meaningless to them.

No big changes happened since 1944, me think!

Clandestino 6th October 2011 22:04

That was pretty quick, RetiredF4. 1 out of 3 is not bad.

You're correct that Wolfgang Langewiesche did not die in aeroplane crash. When we mentioned him, his son, William, is pretty good aviation writer too. However, the fellow I was referring to in the second question definitively went out alone in F-5, never to return. His worldwide fame is mostly based on the single shortish book, that only slightly relates to flying. His warning was very general, simple, true and mightily applicable to both AF447 and FBW Airbi.

Answer no2 is way off mark. No3 is too but with

No big changes happened since 1944, me think!
...you got pretty close and I'd certainly agree with that.

OK465 6th October 2011 22:30

de Saint-Exupéry and there ain't nothin' new under the sun.

Better example: forgive them for they know not what they do...

Back to the Cricetinae Circumvolution

VGCM66 6th October 2011 23:28

The noose is tightening:

Air France 447: the facts and what's behind them - Learmount

From:

AF447 investigation

Good read even if it is still unofficially.

On top:

AF447 victim families hear damning evidence against airline | Plane Talking

CONF iture 7th October 2011 01:31


Originally Posted by DozyWannabe
so even if Airbus came to the discussion with a serious AD in mind, it is likely that the airlines would have pushed back at the prospect of large chunks of their fleets spending weeks in MX.

That’s erroneous and you have been answered on that point already here and here.

DozyWannabe 7th October 2011 06:54

So where would they have fixed them CONF - on the apron? Even if the whole fleet didn't have to be grounded, you'd still have large chunks of it on the ground having repairs and tests done.

Bill G Kerr 7th October 2011 10:37

3 ...nothing new under the sun.

jcjeant 7th October 2011 11:04

Hi,


So where would they have fixed them CONF - on the apron? Even if the whole fleet didn't have to be grounded, you'd still have large chunks of it on the ground having repairs and tests done.
Ask Air Caraibe .. they know how it was before Air France ....

DozyWannabe 7th October 2011 11:17

Sorry jc, I'm too dumb to "get" vague generalisations - knew how *what* was before Air France?

Graybeard 7th October 2011 11:46

Dozy:

So where would they have fixed them CONF - on the apron? Even if the whole fleet didn't have to be grounded, you'd still have large chunks of it on the ground having repairs and tests done.
Your lack of knowledge of airline maintenance ops is glaring.

DozyWannabe 7th October 2011 11:52

How so, GB? Surely if they're being worked on they can't fly - the replacement schedule that was agreed was that the work would be done when the aircraft came in for their regular maintenance check. People have been arguing that the response should have been stronger than that - so me asking how that would have worked is a genuine question, which is:

Given an AD that required work before the type was allowed to fly again and the schedule that was actually agreed with the SB as extreme ends of the scale, what is there in terms of middle ground that would have satisfied those who were saying that the latter was not enough?

Lonewolf_50 7th October 2011 12:38

Ecclesiasteses 1:9
 
The thing that hath beene, it is that which shall be: and that which is done, is that which shall be done; and there is no new thing under the sunne.


Nothing new under the Sun, but ever few years, there seems to be something new under the Apple. :E


One of the oldest rules in aviation remains something like this:

"You cannot defy the law of gravity, but you can break it temporarily, with lift and thrust as your accomplices."

CONF iture 7th October 2011 12:59


Originally Posted by DozyWannabe
So where would they have fixed them CONF - on the apron? Even if the whole fleet didn't have to be grounded, you'd still have large chunks of it on the ground having repairs and tests done.

Where have you seen those large chunks of 330/340 on the ground when finally EASA woke up in AUG 2009, after the war, to implement the AD 2009-0195 for pitot probes replacement ?

DozyWannabe 7th October 2011 13:12

That's just the old "Tombstone Imperative" in action. SBs and ADs that would have been considered overkill before all of a sudden look a lot more sensible. Before the crash, you can bet the airlines would have balked.

They may not have been willing to expedite those repairs for the sake of a few level busts - but it becomes a whole different ball game when you lose an airframe and everyone in it.

infrequentflyer789 7th October 2011 13:22


Originally Posted by Turbine D (Post 6735837)
I have got to go with gums on this. The computer system, e.g., Alternate Law 1, Alternate Law 2 and subsets of Alternate laws are very confusing.

I almost agree - from an engineering perspective the gradual degradation makes sense (and Boeing must have htought so too as theirs is practically the same), but if pilots aren't trained in all the modes, they might as well be labelled "crash mode".

Only issue is that in direct (in A or B) I think you're hand-flying all the way home (or to divert). After what we've heard on training, SOPs etc., isn't there a significant risk in asking todays pilots to hand fly for what maybe a few hours, after possibly only a minor or transient issue ? Maye it is better to keep the in-between mode, which allows (in A and B I think) A/P to be re-engaged when things are stable again ?


1. Airbus failed to handle the pitot tube problems in a manner that they should have.

2. Airbus failed in their risk assessment/risk abatement to adequately cover the total waterfront, e.g., total flight envelope. They were nearly mute on flight problems at high altitudes and speeds. Guess they assumed problems couldn't happen there.

3. Airbus failed to provide complete key memorization items in their flight instructions for the A-330, leaving out for the most part, high altitude and high Mach cruise situations.
Someone made these mistakes, not sure it was Airbus in every case - some combination of Airbus, airlines, and EASA, yes. I would note that it was AF (not Airbus) who issuesd a revised UAS procedure awfully quickly after the accident...

And in one sense it is worse than above - someone (AF...) failed to train pilots at all in hand flying at cruise in alt law (and quite possibly in any law). Between SOPs and RVSM rules etc., it appears todays line pilots also get no experience of hand flying in cruise either.

Result is that if A/P drops out for any reason (and on any type) in cruise, pilot is handed an a/c he has quite possibly never actually flown at this speed or altitude. Throw in the event happening at night middle of ocean, middle of bad weather, and the result isn't that suprising. Between mfr, airilines, and regulator, no one thought this lack of training / experience was a bad idea, or at least no one did anyting about it.



As in the role of leader, Airbus must not have/didn't push the issue hard enough with EADS, or so it seems or didn't view correctly the critical nature of pitot icing at high altitude and high Mach.
[...]
What did they advise EADS to do? Airbus has the lead here, not EASA. Did EASA respond appropriately based on Airbus' strong recommendations? Did Airbus have a strong recommendation?
We'll find out on that - maybe. Currently the director of EASA is refusing to appear before the judge to answer questions on EASAs role in this event.... [ and yes I am entirely sure that this is for the best of principled reasons and not because there is something to hide :E ]


Now Airbus knew the AOA was a critical key component to assure safe flight, but where was the indicator to know what it was and where it was going?
Agreed [for what my opinion is worth, which is zero] - stall warning / stick shaker is way too crude, no difference between "you are nearly stalled" and "you are stalled by 30+ degrees".

Just to be clear on the Airbus role though - the indicator exists, the space on the panel exists, the airline deleted it as an option when ordering.

The final report on this accident may well say that the AOA indicator should/must be there - the sad thing is that it won't (by a long way) be the first accident report to say that, and it will probably be ignored, again.
The operational side of the industry have decided airline pilots don't need AOA, and/or they don't want the expense of training on it.

jcjeant 7th October 2011 13:25

Hi,


but it becomes a whole different ball game when you lose an airframe and everyone in it.
And once again the saying is true:
It is too late to squeeze the buttocks when, !!!! in the sheets
The sheets of Air Caraibe are clean ...

infrequentflyer789 7th October 2011 13:55


Originally Posted by CONF iture (Post 6738244)
Where have you seen those large chunks of 330/340 on the ground when finally EASA woke up in AUG 2009, after the war, to implement the AD 2009-0195 for pitot probes replacement ?

Yep, have to say I'm with you on that one. The biggest problem with replaceing them turned out to be actually getting enough (decent) pitots out of the supply chain.

Since that takes "too difficult" out of the usual suspects for procrastination, it was most likely "too expensive"... as ever. :(

DozyWannabe 7th October 2011 15:45


Originally Posted by infrequentflyer789 (Post 6738283)
I almost agree - from an engineering perspective the gradual degradation makes sense (and Boeing must have htought so too as theirs is practically the same), but if pilots aren't trained in all the modes, they might as well be labelled "crash mode".

I still don't see what's so complex about Normal Law = protected versus other laws = not protected though, which is in reality the only factor that matters at a fundamental level to the pilot.

All you really need to remember is that if you're not in Normal Law you have to be as careful with your bank and pitch angles as you would be in a conventional (unprotected) aircraft. The protections are what allow FBW Airbii to perform some pretty wild maneouvres at airshows, but even if you hand-fly the line in Normal Law it's unlikely you'll ever see the protections kicking in, because the trigger parameters for those protections are considerably beyond anything you'd normally do with paying SLF down the back.


And in one sense it is worse than above - someone (AF...) failed to train pilots at all in hand flying at cruise in alt law (and quite possibly in any law). Between SOPs and RVSM rules etc., it appears todays line pilots also get no experience of hand flying in cruise either.

Result is that if A/P drops out for any reason (and on any type) in cruise, pilot is handed an a/c he has quite possibly never actually flown at this speed or altitude. Throw in the event happening at night middle of ocean, middle of bad weather, and the result isn't that suprising. Between mfr, airilines, and regulator, no one thought this lack of training / experience was a bad idea, or at least no one did anyting about it
This is my primary bone of contention - without this factor the rest of the theorising is somewhat moot.

Saying that this was the eventual result of an insidious industry-wide pattern of laxity and procrastination is not "protecting Airbus".


Agreed [for what my opinion is worth, which is zero] - stall warning / stick shaker is way too crude, no difference between "you are nearly stalled" and "you are stalled by 30+ degrees".
Maybe so, but was it not reasonable to assume that by having a warning several degrees of AoA before the stall that a properly trained crewwould do something about it at that stage?



Originally Posted by infrequentflyer789 (Post 6738342)
The biggest problem with replaceing them turned out to be actually getting enough (decent) pitots out of the supply chain.

Now I didn't know that - have you got a source for that just so I've got it on file?


Since that takes "too difficult" out of the usual suspects for procrastination, it was most likely "too expensive"... as ever. :(
Well - possibly, but it raises the spectre of something else that happens in mass production. Ultimately you get the contractors to bid and the ones with the best chance of fulfilling the contract at the required price will get it. If Goodrich could not provide the yields (presuming they were making them as fast as they could) then throwing money at them couldn't get them to make the things faster, so it looks like the Thales AB probes were borne out of necessity. Even if Airbus and EASA said "Replace these now" - if Goodrich couldn't supply them then the replacement work would have been slowed down anyway.

It does rather beg the question of how they worked the AD after the accident though (unless the AD was simply a political fudge to make it look like something was being done, while the replacement programme played out as it did before).

ChristiaanJ 7th October 2011 16:49

Dozy, et al.,

What, in the end, are the differences between the Thales (AA and AB) and Goodrich probes?

AFAIK, all of them are still being qualified/certified against an obsolete standard, and so far I still have NOT seen any 'news' about the standard itself actually having been updated/improved, to take into account the environment that AF447 encountered.

I have the impression that too many people here prefer to 'blame' the UAS events and the pitots, instead of thinking the issue through.

Why weren't the standards changed, after the first UAS incidents due to hi-alt pitot tube icing occurred? Whose responsability was that?

DozyWannabe 7th October 2011 17:35


Originally Posted by ChristiaanJ (Post 6738603)
AFAIK, all of them are still being qualified/certified against an obsolete standard, and so far I still have NOT seen any 'news' about the standard itself actually having been updated/improved, to take into account the environment that AF447 encountered.

The issue is one of all engineering being a compromise to some degree - there is no such thing as a 100% reliable way to measure airspeed in all conditions (in fact one could argue that there is no 100% reliable way to do anything). Being mechanically very simple in principle, along with the fact that there have only been two fairly recent fatal accidents on the line involving failure of the pitot system - and only one where the design of the pitot tube itself is suspect - I'd wager a guess that it is simply the most reliable of the alternatives on offer.

Airbus's response to when the pitot system does fail is the BUSS module, but the way the BUSS calculates airspeed is more complex than that of the pitot system and as such it is better suited to a secondary role.

Lyman 7th October 2011 17:58

FWIW.

Fuel Chemistry was never "mysterious", "Heretofore well understood", or lacking for standards.

It was a Straw man, such that RR could redesign a duff Fuel/Oil Heat Exchanger, and re-enter the playing field as though the design was not dangerous.

Qantas32? Same-O. An AD was relaxed, and an engine exploded in passenger carrying flight.

Comet and Skin? 737 Skin? Rudder? Pilots who hear the STALL WARN and PULL?

Any one see a pattern? No, Engineering is not a "compromise".

Spec. Duty cycle, Training, etc. These are compromises. There is no excuse for a Pitot Tube gnarling up at altitude.

IF that is what happened. Most people never learn, and most of those capable of learning are too easily distracted.

jcjeant 7th October 2011 18:11

Hi,

Again news in the press (Le Figaro)

Le Figaro - Flash Actu : Rio-Paris : de nouveaux lments

Google Traduction

And weird statements from the SNPL (the most important pilots union of Air France)
So for the SNPL .. just after the disconnection of the autopilot .. PF thought that the aircraft began to descend fast enough ... and so he reacted as we know (put the plane in a stall condition by pulling the stick for "regain" cruise altitude ) .....
Which pilot can think of such thing (important altitude loss after sudden disconnection of the autopilot while ... .. a few seconds before the aircraft was flying perfectly stable)

BEA report N°3
2 h 10 min 05 Altitude (ft) 35 024 (PA disconnection)
2 h 10 min 09 Altitude (ft) 34 664 Altitude ISIS (ft) 34 900
And I repeat these comments come from the majority pilots union pilots of Air France !
This gives again a very bad image of these .. "pilots" ? ...
It's no more "esprit de corps" .. it's foolish instead ..

Lyman 7th October 2011 18:35

We have been previously chastened that the altitude discrepancy was "merely" 300 feet, and was the result of a predictable anomaly in the system.

So I won't hold my breath.

Is there more to this story than "Baby pilot kills all". FGS.

Loss of altitude without a commitment to STALL means exactly what the PF kept reporting, "I feel we have some crazy speed." If at a/p drop, his NU was to arrest descent (as he sussed it), and the 'descent' never 'arrested', this easily explains his commitment to overspeed in descent. It explains his deployment of spoilers, and his disregard for the STALL WARN; without comment or interference from his mates, it appears they all bought it.

What sort of STALL hasn't a concomitant drop of the NOSE? If his reliance (ill placed) on altimeter was driving his thoughts, the entire upset takes on a different shape.

I hadn't known the Pilots had written off the BEA. I'll admit to a bit of relief. Witholding important input from an investigation? The BEA??

Mais non, Impossible. Incroyable, n'est-ce pas?

jcjeant: If the reads were real, the descent was approximately 4,500 feet per minute. Substantial.

GarageYears 7th October 2011 19:40


Loss of altitude without a commitment to STALL means exactly what the PF kept reporting, "I feel we have some crazy speed." If at a/p drop, his NU was to arrest descent (as he sussed it), and the 'descent' never 'arrested', this easily explains his commitment to overspeed in descent. It explains his deployment of spoilers, and his disregard for the STALL WARN; without comment or interference from his mates, it appears they all bought it.
But fails to explain why TO/GA thrust was selected, no? Where does that fit?

And the Captain restrained second use of the spoilers right?

What of the altitude call outs/VSI?

If you selectively fit the jigsaw pieces together then may be you think you have a picture, but the box is not empty is it?

DozyWannabe 7th October 2011 19:50


Originally Posted by GarageYears (Post 6738796)
And the Captain restrained second use of the spoilers right?

Almost - it was the PNF (senior F/O). Not that we want to go around those houses again, but it looks like he had a better idea of what was going on and unfortunately didn't feel he had the authority to intervene.

HazelNuts39 7th October 2011 20:16

New element?
 
The drop of 300 ft in indicated altitude as a consequence of a drop in the measured total pressure is apparent in AIR CARAIBES memo dated 01-12-2008. I discussed the reason for it in my post on the AF447 thread no.1 (p.193, post #3856, 24 july 2009), and BEA explained it again in para. 1.6.11.6 'Consequences of a drop in the measured total pressure' of their Interim Report No.2 of December 2009.

Lyman 7th October 2011 20:17

GY

Hey. I'm trying to find more pieces, not reject some in favor of a bias. I am looking for reasons to explain certain behaviours? Well, yeah, since the data are thin, and there is evidence that BEA have redacted some evidence for now. Now THAT'S selective, to my way of thinking. I'd be perfectly satisfied if BEA gave you the CVR, let you suss out the deal, and report back.

You, I trust. BEA? Not so much.

TOGA? Not that it's much more than Cruise power, but couldn't he be looking for ways, alternatively, to gain NOSE UP?

We know the NOSE was already up, did he? Not if he rejected the STALL.

Let's don't assume that he was selecting TOGA to recover a STALL he may not have honored? If he was convinced the a/c was descending normally, and one has to allow him that, than TO/GA is a way to force the NOSE UP.

Just because we don't associate spoilers with TOGA doesn't mean it wasn't that way. It was a goofy night, all around. Another thing. What if he saw the TRIM at 13 degrees? With full aft stick, and still entertaining Overspeed, he's thinking the a/c is unresponsive; TOGA as a try?

Lyman 7th October 2011 20:22

Does it not appear to you all that they knew they were descending, but that they thought it was an ordinary (Unstalled) descent? That the Captain rejected spoilers perhaps because he thought they were too fast? That they may not restow correctly on recovery of normal speed? That they never sussed the descent was slow (airspeed), and vertical, rather than horizontal ('normal' assiette), with plenty (too much) airspeed?

Can you see it another way?

At the end, the Captain.... "It cannot be..." Does he just then realize the ship is way nose up? Not Nose down, and (seemingly) 'unresponsive' to Pitch UP commands? They have had no ordinary sense of decel, nor a NOSE DROP, the a/c has been around one g all along, what did they have to sense the a/c's attitude? (That they trusted?) And Clearly, they were unaware of the attitude. How would YOU have known?

"Pull, Pull, Pull...."

Hazelnuts39. Yes, the indicated drop. We know. You know. Did 447 crew Know? Because at uncommanded a/p drop, the ship was descending (for real, though trending NU), rolled right, and presented 336 feet too low.

Two seconds later, a STALL STALL. Some of which were bogus. There was a simultaneous sink, so what does he do? The a/c did NOT climb readily, per BEA, in spite of PF's aft stick. His initial left roll was excessive, so with all this going on, I'm going to go out on a limb and say he............got off to a bit of a bad start. He was never given proper cues to sort that out. Lack of reference(s).

CONF iture 8th October 2011 02:37


Originally Posted by DozyWannabe
Before the crash, you can bet the airlines would have balked.

Why would they have if it can help them to avoid a latent unsafe condition ?

Also, my understanding is, and people with knowledge will correct me, an AD is on the manufacturer’s arms, but a SB is for the airline … ?


ChristiaanJ,
The only thing is that the Goodrich model has proved to be much more resistant to ice crystals than the Thales ones.

Why weren't the standards changed, after the first UAS incidents due to hi-alt pitot tube icing occurred?
As early as 1999 the German BFU had recommended to modify the certification criteria for the pitot probes. But the EASA has been waiting AFTER the accident to go ahead.
Also Air Caraibes did an excellent job to report their events to Airbus. What did Airbus ?
Nothing.

Excellent presentation : AF 447 : l'accident expliqué selon le modèle de REASON


All times are GMT. The time now is 08:39.


Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.