On Optional Extras and Risk Assessments

Kinja'd!!! "For Sweden" (rallybeetle)
03/22/2019 at 13:30 • Filed to: Rants, Do you really expect me to read all this, Was this a first draft, You need an editor, Planelopnik, Boeing 737 Max, Boeing 737, 737 Max, 737, Boeing, Aviation, Safety

Kinja'd!!!3 Kinja'd!!! 12
Kinja'd!!!

United States Ambassador to Indonesia Joseph R. Donovan Jr. speaks on partnership between Boeing and Lion Air on 10 April 2018.

All car shoppers have looked at an option sheet, wondering if lane departure warning or blind spot monitoring add enough value to justify buying a higher trim level model.

People purchasing $100 million-plus aircraft have the same predicament, or more accurately, they used to.

Per the !!!error: Indecipherable SUB-paragraph formatting!!! :

Boeing will make standard on its troubled new airliner a safety feature that might have helped the crew of a jet that crashed shortly after takeoff last year in Indonesia, killing everyone on board.

The equipment, which had been offered as an option, alerts pilots of faulty information from key sensors. It will now be included on every 737 Max as part of changes that Boeing is rushing to complete on the jets by early next week, according to two people familiar with the changes.

This certainly sounds bad. Boeing sold a safety feature that could have saved hundreds of lives, let alone their reputation, as an optional extra? But optional extras aren’t free, and airlines, like any other fleet buyer with a vicious accounting department, will cut options to save money. This is especially true for low-cost carriers in the Global South catering to leisure travelers. You wouldn’t find these optional extras for the same reason you wouldn’t find adaptive cruise control on a U-Haul truck.

Maybe wouldn’t trust your family’s life to such a truck. Or maybe you would rent from a more-expensive competitor, or lobby the relevant regulator to mandate such features on trucks. Those are the three available strategies to solve the current problem and allow the Maxes to fly, and all three come with a different risk assessment.

First the airlines. When buying a nine-figure airplane, why not check an option box, especially for a safety feature? Especially Lion Air, which has a !!!error: Indecipherable SUB-paragraph formatting!!! . They didn’t see the risk; how different could it be from other 737s?

Boeing offers training programs for all their aircraft, other vendors offer similar training for less, but both should have included the procedure to recover from this situation. Per the !!!error: Indecipherable SUB-paragraph formatting!!! :

After the Lion Air accident, Boeing reminded pilots of the process for stopping the plane’s automatic nose-down tilt, including flipping two cutoff switches near the pilot’s knees. That procedure is unchanged from earlier 737s, and pilots are expected to know it.

Employers expect employees to know many things. Based on reports of the Lion Air pilots frantically reading a manual while falling from the sky, no one verified that expectation. The airline could make this situation a memorized procedure, as they do with other critical phase of flight emergencies such as losing an engine during takeoff, but they didn’t pay for that either.

Then we have regulators, the people entrusted by the public to keep us all alive. They certified the airplane, with or without the optional features. They could mandate training, simulator or flight, requiring pilots to recover from pitch-down events. They could mandate training on simulators that replicate the MCAS failure ( !!!error: Indecipherable SUB-paragraph formatting!!! ).

But Boeing, and foreign airliners, can remind regulators that their power only exists in their airspace, and they cannot mandate their rules assessment on the world. If the Indonesian Directorate General of Civil Aviation doesn’t mandate the optional extra, why should the American Federal Aviation Administration force Boeing to make it standard? The FAA could reply that every Boeing is a symbol of American industry, and people dying in American aircraft hurts American interests, but they didn’t.

Finally, the party that made the option an option, the manufacturer. These optional hardware and software features are not free to make, test, and maintain. Some airlines will pay this cost, and others would rather walk to Airbus then pay for something supposedly frivolous. Boeing could have made the features standard, raised the list price, and told some airlines to take a risk on Airbus. Hopefully Sully is in the cockpit when the plane decides to save the engines over the passengers.

Of course Boeing gave everyone the optional extra, after two crashes and hundreds of lives lost, for free.

The accident investigations are continuing, and American criminal and congressional investigations will soon begin. This story will get bigger in the upcoming weeks, and I won’t try to speculate on what will develop in these specific cases.

I will speculate on what it means for everyone else, especially the automobile industry. Like the 737 Max, many cars have installed hardware supporting optional safety features. Most famously, every new Tesla famously has cameras for self-driving features, which customers may use if the buy the software. One day, a driver that did not buy the software will die, or kill someone, in a crash the software would have prevented. We will compare accident and fatality rates between cars with and without the optional extra, and ask why it isn’t standard. Hopefully our risk assessments include those eventualities..


DISCUSSION (12)


Kinja'd!!! facw > For Sweden
03/22/2019 at 14:54

Kinja'd!!!2

Yeah, it’s a complex situation. Obviously you can’t just say, “if it makes things safer, it needs to be included”, because you have to balance the costs. Otherwise, you’ll ultimately end up making flying more expensive, and probably with even more deaths on the roads instead.

In this case though, it seems like even if you don’t have the disagree light, the MCAS surely should not be making decisions if the AoA indicators are in a disagree state (or making only very conservative decisions based on the idea that either could be right), and in that case you need to be alerting the pilots to that fact so they know they can’t rely on it. That seems like it should have been a basic requirement for MCAS acceptance.


Kinja'd!!! nermal > For Sweden
03/22/2019 at 15:25

Kinja'd!!!0

Why is everyone so quick to blame Boeing and not the airlines that were not only too cheap to pay for the extra safety feature, but also too incompetent to train their pilots on it? 


Kinja'd!!! For Sweden > nermal
03/22/2019 at 15:31

Kinja'd!!!3

Plenty of blame to go around


Kinja'd!!! Honeybunchesofgoats > For Sweden
03/22/2019 at 15:37

Kinja'd!!!1

I think your car safety tech analogy is a little flawed. The real complaint with Boeing is that they had a single point of failure with the MCAS without any redundancy, the optional safety tech would have just alerted pilots to the failure, but that doesn’t excuse Boeing for not designing in a redundancy, despite knowing how deadly a failure would be:

“ Additionally, the MCAS system was designed to work based on input from only one sensor—despite the fact that Boeing rated a failure of the system as “hazardous.” That level of risk—which in itself was understated, according to engineers—should have been enough to require redundant sensors.”

https://arstechnica.com/information-technology/2019/03/boeing-downplayed-737-max-software-risks-self-certified-much-of-planes-safety/

In your analogy, a car could have automatically braked to avoid hitting a pedestrian, but didn’t because that wasn’t optioned , but that’s not really a true direct analogy. A direct analogy would be the car’s brakes failing and careening into a pedestrian. The irony is that unlike Boeing’s design of MCAS, automotive braking systems do have redundancies built in, such as redundant circuits and an independent emergency brake.


Kinja'd!!! Honeybunchesofgoats > nermal
03/22/2019 at 15:38

Kinja'd!!!2

https://www.seattletimes.com/business/boeing-aerospace/failed-certification-faa-missed-safety-issues-in-the-737-max-system-implicated-in-the-lion-air-crash/


Kinja'd!!! For Sweden > Honeybunchesofgoats
03/22/2019 at 15:48

Kinja'd!!!0

The redundancy for MCAS is turning off automatic pitch trim control.


Kinja'd!!! Honeybunchesofgoats > For Sweden
03/22/2019 at 15:58

Kinja'd!!!1

That’s not a redundancy, that’s an override. Boeing’s own engineers complained about the system being reliant on a single sensor functioning properly. 


Kinja'd!!! BahamaTodd > For Sweden
03/22/2019 at 20:18

Kinja'd!!!0

If the AoA indicator or malfunction light were necessary safety features they would be required by the FAA. The problem in all of this is the MCAS system relying on data from a single sensor. If the plane could fly ok without the MCAS system, those optional features would not be necessary to safely fly the plane.


Kinja'd!!! ttyymmnn > nermal
03/26/2019 at 17:12

Kinja'd!!!0

American, Southwest, and United fly flew the MAX in the US (I have a very nice photo of a UAL MAX 9 here in Austin). American and Southwest opted for the extras, United passed. For their part, United said their pilots knew what they were doing and didn’t need the extra alerts. 


Kinja'd!!! ttyymmnn > facw
03/26/2019 at 17:14

Kinja'd!!!1

It was enough for the FAA, or at least Boeing’s guy at the FAA. This whole thing is a mess, and there are many hands in the cookie jar. Why hasn’t anybody called out the manufacturer of the AoA sensor? Hell, if that hadn’t failed, we wouldn’t be talking about this.

That said, it’s very good we’re talking about this.


Kinja'd!!! Highlander-Datsuns are Forever > For Sweden
03/26/2019 at 17:25

Kinja'd!!!1

*news flash* Boeing to retrofit all 737 max’s with flight controls from 1970's Cesna 172's, and 180's. Boeing currently scrounging local municipal airports and craigslist for good deals. Pilot’s union representatives not sure what to say about a knob that says “choke”.


Kinja'd!!! For Sweden > Highlander-Datsuns are Forever
03/26/2019 at 17:33

Kinja'd!!!1

What is c arb h eat? I’m on a keto diet!