Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Airbus A380 Under Fire

Posted by ScuttleMonkey on Sat Oct 01, 2005 07:03 PM
from the u.s.-laws-that-aren't-so-bad dept.
jose parinas writes "The security of the Airbus A380 jetliner is questioned by a U.S. Engineer that faces arrest and bankruptcy in Austria. A year ago, Mangan told European aviation authorities that he believed there were problems with a computer chip on the Airbus A380, the biggest and costliest commercial airliner ever built."
+ -
story

Related Stories

[+] Technology: Boeing 787 Dreamliner Delayed Again 214 comments
An anonymous reader writes "It's not just that the Boeing 787 Dreamliner may be unsafe or vulnerable to hacker attacks. At this point, it seems everyone would be happy for it to arrive in any state. The 787's carbon-fiber construction and next-generation technology have pushed back their delivery schedule once again, this time requiring a redesign of the plane's wingbox. Airlines will have to wait 18 more months to get it delivered, which is an extremely serious blow to the credibility of the company and their financial standing, as they would have to pay penalties to the buyers of more than 850 of these planes. And we thought Airbus had problems." Good thing Boeing can still count on its patent portfolio.
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • ha (Score:5, Funny)

    by Anonymous Coward on Saturday October 01 2005, @07:06PM (#13695468)
    This story will never get off the ground.
      • Re:ha (Score:3, Insightful)

        by Anonymous Coward
        I'll tell you the secret that I discovered. I always liked moderation, but never got to moderate much. I've always had excellent karma, so that wasn't it. I read Taco's posts about /. on his Journal, and one day he mentioned thinking of re-dooing the moderation system, and how there are different kinds of moderators, and what not. He said something along the lines of "I can count on one hand the number of excellent moderators there are" and that they try to give them more points. Recently, I've been moderat
  • easy (Score:4, Insightful)

    by Dance_Dance_Karnov (793804) on Saturday October 01 2005, @07:09PM (#13695482) Homepage
    Take chip, look for problem, if exists fix and replace. It isn't like they would have to rebuild the whole plane.
    • Re:easy (Score:5, Informative)

      by Cylix (55374) on Saturday October 01 2005, @07:16PM (#13695513) Homepage Journal
      Except now the chip has to be recertified for aviation.

      In effect, the article states it has already been modified and there was some sentiment that it really should be re-certified yet once again.

    • by CyricZ (887944) on Saturday October 01 2005, @07:20PM (#13695534)
      Let us assume that a problem is found. But even if it is fixed, then how can we know for sure that other problemtic parts were used? If this chip was able to get through the engineering screening process, perhaps other faulty componentry was used as well. A fault here could, in theory, make need for a complete analysis of every single part used. And in a plane this size, that's a massive amount of time and effort.

      • by Anonymous Coward on Saturday October 01 2005, @07:32PM (#13695577)
        Read the article again. This chip didn't "get through." According to the whistle blower, the company forged his signature on documents approving the chip. If true that means they knew about the problem and tried to cover it up.
          • This is a question of a $500 vs $50 part in a plane that costs a couple hundred million. I would be quite amazed that any company in the modern litigious world would forge a signature to get a part as critical to safety as this one passed when knowing that the part was sketchy.

            Airbus didn't forge his signature, that would be the company who makes the $50 part.
    • by guardiangod (880192) on Saturday October 01 2005, @07:29PM (#13695565)
      If you care enough to RTFA, you will see the following line

      Yet his employer ignored his concerns, he alleges, because fixing the glitches would be costly, could take up to a year and would further delay the A380's launch.(a year behind already)

        • by EvilNTUser (573674) on Sunday October 02 2005, @04:08AM (#13697426)

          The pilot made *excessive* alternating rudder inputs. The main problem with the aircraft seems to have been that it wasn't programmed to stop him. Try trusting the NTSB reports instead of the conspiracy theories.

          Not to mention that turning this into a pissing contest will force someone else to bring up the problems with the Boeing 737 rudder. You wouldn't want that, would you?

    • Not Quite (Score:4, Informative)

      by WindBourne (631190) on Saturday October 01 2005, @09:25PM (#13696079) Journal
      1. Finding the problem is sporting.
      2. From there, you then have the programmer(s) test it and make sure that there are no more issues.
      3. Once that has passed, then you have the test group re-design a set of new tests and test them as well.
      4. Once there, an internal auditor goes over your work.
      5. From there, an Airbus auditor goes over said work.
      6. Then an EU FAA-equivilence auditor.
      7. Then an American FAA auditor.
      Just that little bit of a fix, takes no less than 9 months (normally closer to 1.5 years). Delaying the A380 will cause serious issues right now. In fact, there are probably performance clauses penalties associated with this that would probably sink TTTech (hence the reason why they want to cheat).

      BTW, if you wish to argue with me over this (and some idiot will ), I currently do the coding of the test for the data AND APIs of an american unit that be in the cockpit of the A-380 (and other aircrafts). I have found out that getting this level C cert. has been very sporting.
      • Still... (Score:5, Interesting)

        by autopr0n (534291) on Sunday October 02 2005, @02:00AM (#13697095) Homepage Journal
        He's an American (as am I, just for the record) so people might think that he's a Boeing spy. If this guy can spread even a little doubt about the safety of the A380's safety, it could end up making hundreds of millions of dollars for Boeing. There is a lot of espionage in the Aerospace industry.

        This isn't just a disagreement, someone is lying here, and with geopolitical stakes what they are, who knows...
        • by Slashamatic (553801) on Sunday October 02 2005, @04:46AM (#13697508)
          For the A320, all critical systems used a minimum of two chip architectures and 3 independent software solutions working from the same closely controlled spec but otherwise not communicating. A friend worked on one of the computers there.

          I can't see what would be different for the 380. the only point is whether the pressure control system was considered to be critical enough to be fully backed up.

      • Undercarrage test (Score:4, Insightful)

        by MROD (101561) on Sunday October 02 2005, @08:41AM (#13698055) Homepage
        The test you saw was the emergency deployment when all hydraulic power has been lost and not normal deployment.

        In the case of a complete hydraulics failure the crew can actuate a manual lever which unlocks the undercarrage and deploys it using only gravity to do so. This is what you saw.

        Normally, the doors and the undercarrage itself are driven fully by the hydraulic system and the doors are never touched by the wheels or anything else.
  • Autopilot (Score:4, Interesting)

    by Cthefuture (665326) on Saturday October 01 2005, @07:15PM (#13695510)
    The story about the plane losing pressure then flying on autopilot before crashing is interesting. Doesn't the plane know it has lost cabin pressure? If it's on autopilot why can't it reduce altitude so the people can regain consciousness? Hell, why can't it just declare an emergency and automatically land at the nearest airport after receiving an OK signal from the airport that it's safe to land.

    We have all this technology but it's implemented by idiots.
    • Re:Autopilot (Score:5, Informative)

      by rv8 (661242) on Saturday October 01 2005, @08:11PM (#13695733) Homepage

      1. There are already multiple possible failures that could cause a depressurization (cabin window failure, door failure, engine rotor burst, crew error, etc). The design requirements call for systems to alert the crew if the cabin altitude exceeds normal values, and there must be oxygen masks that they can don within 5 seconds. The operational requirements call for the crews to be properly trained in the use of these masks, etc. So even if this chip has a problem, it doesn't necessarily create a new safety issue. Of course, the problem, if it exists, should be corrected.

      2. Some business jet aircraft do have an autopilot mode that will automatically descend the aircraft if the cabin altitude exceeds a certain value (several Cessna Citation models, some Gulfstream models, latest Bombardier Global Express, etc). These aircraft often cruise at altitudes up to 51,000 ft, which is quite a bit higher than the maximum altitude for the A380 (apparently 43,000 ft, but typical cruise altitudes will be lower than that). The smaller cabin volume of the business jets mean the cabin depressurizes much quicker, given a similar failure.

      • Re:Autopilot (Score:5, Informative)

        by david.given (6740) <dg AT cowlark DOT com> on Saturday October 01 2005, @07:55PM (#13695681) Homepage Journal
        They were trying to take off, and the enhanced autopilot decided they were trying to land and took over, so it got about 100ft off the ground and started heading back down, off the end of the runway and into a forest. Nice large fireball too.

        Sorry, that's incorrect.

        What you're talking about here is Air France Flight 296 [ncl.ac.uk]. There's a full description on the link, but the short version is that the pilot tried to throttle up because the plane was too low, and the fly-by-wire system overrode him due to a fault. Nothing to do with the autopilot at all --- autopilot landings are quite common these days.

        (There's also been a lot of controversy about that accident, because there are a number of irregularities with the investigation indicating that the evidence has been tampered with. Check out this link [airdisaster.com] for more information.)

        (Oh, yes; only three people died, although about 50 were injured.)

        • Re:Autopilot (Score:5, Informative)

          by Paul Jakma (2677) <paul+slashdot@jakma.org> on Saturday October 01 2005, @08:48PM (#13695884) Homepage Journal
          but the short version is that the pilot tried to throttle up because the plane was too low, and the fly-by-wire system overrode him due to a fault.

          If there was a fault anywhere it was in the engine. The pilot claims it didn't spool up fast enough, it may have suffered a stall. The official accident report concluded he simply applied throttle way too later (some conspiracy theories say the FDR was hacked by 3s to make it look like he left it too late). That said, even if that claim of the captain's was true he still furked in several other ways, which led him to be flying 30ft off a runway, when he had intended to be at 100ft (and he would never have hit those trees then..).

          Ie, it was definitely compound pilot error (as is often the case), and possibly a (what should have been) problem with an engine. "Computer overrides pilot and flies into trees!" is catchier though, but simply not true - no matter how many times people repeat it.
      • Re:Autopilot (Score:5, Informative)

        by Colbalt Blue (915568) on Saturday October 01 2005, @08:01PM (#13695700)
        You are way off on what pilots use autopilot for. On most commercial flights these days the pilot rarely touches the yoke after takeoff. He enters all headings, altitudes, speed and vertical speed settings into the autopilot and the computer takes care of it for him. In my plane I can enter my entire flight plan into the computer before taking off, engage the autopilot at 500 feet off the ground and not touch anything except the radio until the computer has me lined up for a landing at the destination airport.
      • Re:ROFLMAO (Score:4, Interesting)

        by afaik_ianal (918433) on Saturday October 01 2005, @08:22PM (#13695776) Journal
        It doesn't seem all that silly to me..

        > > Doesn't the plane know it has lost cabin pressure?
        > No. It's a plane.
        We could replace the word "know" with "detect", and lose the patronising response altogether.

        > > If it's on autopilot why can't it reduce altitude so the people can regain consciousness?
        > Because it's on autopilot. The captain set the autopilot's target altitude, turned it on,
        > and then keeled over. The autopilot held the altitude as long as it could.
        So change the way autopilot works, which is what the OP was getting at. Clearly, something can be improved here: The fact that a plane will happily fly until it runs out of fuel, when it could probably have detected that the chances of the pilots being concious were remote at best is a part of the plane that could be designed much better.

        > > Hell, why can't it just declare an emergency and automatically land at the
        > > nearest airport after receiving an OK signal from the airport that it's safe to land[?]

        > And if it has to crash land, it can go for a nice long trip to the plane hospital, and
        > maybe the plane doctor will give it a nice lollipop! Yeah, that sounds good.
        Why the sarcastic answer on this one? Auto-landing is used all the time - see http://answers.google.com/answers/threadview?id=48 2344 [google.com] for more info.

        Now admittedly, the accident refered to in the article happened on a Leer Jet, so they are unlikely to have the same technology as a commercial liner, but I don't think the post was deserving of your somewhat harsh response.
      • Re:Autopilot (Score:5, Informative)

        by Paul Jakma (2677) <paul+slashdot@jakma.org> on Saturday October 01 2005, @09:10PM (#13695987) Homepage Journal
        Also, don't forget that the cockpit oxygen masks drop down before the main cabin

        Cockpit masks don't "drop down" - They're a far more robust (and bulky) construction than the el-cheapo plastic cup+bag things the passenger cabin has, and anyway the space above the pilots tends to be occupied by switch gear and breakers. They're stowed within easy reach of each pilot (to the side, under the seat).

        - the cockpit pressure sensor is pegged at a higher level, so that if there is a slow leak, the pilots can don their masks early and do a more controlled descent.

        Lower level surely you mean (be it in terms of altitude or barometric pressure). I'll have to ask to find out if this is true, it doesn't ring true at all with me though.

        modern aircraft are fitted with ground avoidance radar (what causes the 'whoop-whoop, pull up!' scenario).

        The radio altimeter you mean? The one which provides highly accurate relative readings, but only when you're reasonably close to the ground (ie within 1 or 2k feet)? I've never heard it called "ground avoidance radar"...

        But, as for the plane landing itself... well, we're still a fair way off with that one. Airports have to be equipeed with differential GPS beacons that allow the plane to determine its position down to about half a metre.

        Ok, now I know you're definitely not a pilot but a troll. If you were a pilot you would know that ILS and auto-land systems have existed since at least the 1960's which can guide an aeroplane to within 50ft or so of the runway and that more recent ILS (since the 80s or so? i don't quite know, maybe before then) can bring the aeroplane to 0ft. You'd also know that ILS uses two polarised planes of radio waves - GPS doesn't come into it at all.

        You, sir, are a troll. Mods: please undo parent's "interesting" moderation.

        (FWIW, my father *really* is a retired commercial aviation pilot).
        • Re:Autopilot (Score:4, Interesting)

          by csirac (574795) on Saturday October 01 2005, @09:24PM (#13696073) Homepage
          It's nothing like adding grammar check to OpenOffice, for example.

          _ALL_ features must endure full engineering analysis in its effectivness, usage, cost, failure modes, complexity, and maintenence. For this idea to be considered, all these factors must offset the expected increase in safety (preventing the very rare occurance of decompression resulting in death), and it must be a demonstrable INCREASE in safety (are the potential failure modes and their frequency likely to result in MORE deaths than it will prevent?).

          Just the mere fact that most aircraft are designed with 25 year life-cycles in mind makes the entire process almost unrecognisable to other industries.

          The people in charge of deciding what features go in to the avionics are engineers as well, not just the implementors that they assign the work to.
  • Offer (Score:5, Interesting)

    by mysqlrocks (783488) on Saturday October 01 2005, @07:16PM (#13695516) Homepage Journal
    TTTech has offered to drop its legal action against Mangan, court records show, and pay him three months of severance, if he retracts his statements.

    This doesn't sound like much after all he's been through.
    • Re:Offer (Score:4, Insightful)

      by nutshell42 (557890) on Saturday October 01 2005, @08:35PM (#13695826) Journal
      This doesn't sound like much after all he's been through

      It sounds like much more than he deserves if he really started spreading FUD after it was clear that he was going to lose his job.

      The only way to decide whether he is a whistle blower or a liar that tries to make some cash by blackmailing his former employer and Airbus is to have an independent review of the chip in question. Airbus said they did that but of course they're biased.

  • by antek9 (305362) on Saturday October 01 2005, @07:18PM (#13695527)
    Let's just hope at least slashdot does keep its hands out of the propaganda war already started between Boeing (US) and Airbus Industries (EU). It's a dirty economical struggle, its about jobs and profits in the US, or jobs and profits in Europe. And because of that, plus the military aspects of aircraft research and development, both companies are, and will always be heavily funded by the respective governments.
    Keep that in mind before making mindless posts about A. vs. B. . Thanks for your time.
    • by guardiangod (880192) on Saturday October 01 2005, @07:33PM (#13695587)
      Well when it concerns about the lives of 800+ men, women, and children. I think it is safe to think that we better get it right the first time around. If we don't, welll... This is not a matter of US vs world- if the plane has known flaws, yet it is still certify to fly for cost/politic reason...I want to see heads rolling- and not from my side either.
    • by niXcamiC (835033) on Saturday October 01 2005, @07:41PM (#13695620)
      RTFA! It says that both Airbus AND Boeing are going to be useing this new chip. It seems like people go out of their way to trash stories, when they have no idea what there talking about.
    • by Thu25245 (801369) on Saturday October 01 2005, @10:47PM (#13696406)
      Since the beginning of Airbus vs. Boeing (Indeed, since Boeing vs. Lockheed vs. Douglas) there has been one rule:

      Don't impugn the safety of the competitor's aircraft.

      By and large, these huge, competitive companies have all followed that rule. They bribed, called in political favors, exaggerated, waged huge PR campaigns against their competitors...but nobody at Airbus claims that a 737 is unsafe, and nobody at Boeing claims that an A320 is unsafe. Because everybody knows that passengers don't know squat about aircraft, and that the flying public only flies because it has faith that all flying machines are equally, perfectly, safe.

      There have been a few minor skirmishes over the years, several having to do with the number of engines needed to safely carry a plane over an ocean. But all of the players (which is, both of them now) have largely refrained from saying "The other guy's planes will fall out of the sky!"

      If this is a Boeing PR move, it's a dangerous and stupid one.
      • by sonamchauhan (587356) <sonamc AT gmail DOT com> on Sunday October 02 2005, @01:44AM (#13697035) Journal
        This does not look like a Boeing PR move. This looks like a honest-to-goodness engineer sticking to his ethics.

        From the article [latimes.com]:

        "Unlike U.S. laws that shield whistle-blowers from corporate retaliation, Austrian laws offer no such protection. Last year an Austrian judge imposed an unusual gag order on Mangan, seeking to stop him from talking about the case.

        Mangan posted details about the case anyway in his own Internet blog. The Austrian court fined him $185,000 for violating the injunction. ...

        To help pay living expenses and legal fees, Mangan sold his house in Kansas. With only about $300 left in his bank account, Mangan missed a Sept. 8 deadline to pay his $185,000 fine and faces up to a year in jail. Next month he's likely to be called before a judge on his criminal case.

        The family expected to be evicted this month from their apartment, but their church in Vienna took up a collection to pay their rent. ...

        TTTech has offered to drop its legal action against Mangan, court records show, and pay him three months of severance, if he retracts his statements. But Mangan has refused.

        Mangan said he was looking for a new job. He has contacted dozens of aerospace firms in the U.S. and Europe, but none have returned his calls. "Nobody wants to touch me," he said."

  • by freeweed (309734) on Saturday October 01 2005, @07:24PM (#13695544)
    After all, it's easy to lose your daughter on one.

    To top it off, the flight attendants just don't care :(
  • by br00tus (528477) on Saturday October 01 2005, @07:24PM (#13695547)
    The story begins with a portrait that tries to paint this fellow sympathetically, and I normally would look on him sympathetically. He goes to the government and complains about problems he perceives, and he gets fired. The events transpire, and eventually a judge tells him to be quiet. By now this is out in the public - he is an American with a family in a foreign city and if he had a need to do something he did it. But then he violates the judges order and begins posting about this on a blog? It makes me think there's something more to the story, or as aviation consultant Weber says "There is something really unusual about this case in the sense that there is this hard standoff between Airbus and the individual, it doesn't make any sense to me." It doesn't make sense - him violating a judges order doesn't make sense, them filing criminal charges doesn't make sense. There seems to be something more at work here. I'll read more about this, but both parties are acting unusual to the point where I am really on neither side, whereas normally I suppose I would be on his side.
      • by br00tus (528477) on Saturday October 01 2005, @08:32PM (#13695818)
        You seemed to have missed the point. He came forward, his story was public, a judge told him to quit talking while the case was ongoing and he didn't. You're spinning the story just like it seemed spun to me in this newspaper article. The point is what he did after he went public, after the matter went to court.
  • by Chmarr (18662) on Saturday October 01 2005, @07:26PM (#13695554)
    The article claims that a failure in the chip could open valves that would cause rapid decompression.

    There is NO WAY a valve could open up far enough to cause that kind of decompression. It would take several minutes to equalise with the outside air.

    The article also claims that such depressurization would cause uncomciousness 'within seconds'.

    Well, at 45,000 feet, you have 15 seconds of useful conciousness. Most craft cruise at around 38,000', where you'd have a full minute of useful conciousness... PLENTLY of time, in both cases, for you to put on supplemental oxygen masks.

    There may well be problems with that chip, but the article really hypes up the fear factor. Typical of today's journalism: just repeat what others say, dont even bother making your own analysis, and you can't be sued.
    • by Yoohoo Ladies! (919562) on Saturday October 01 2005, @07:40PM (#13695615)
      A slow decompression is even more dangerous than an explosive one because hypoxia can sneak up on anyone without them realising it. It takes a very special person to recognise the symptoms of hypoxia when they're not looking for them specifically.
      • by Chmarr (18662) on Saturday October 01 2005, @07:43PM (#13695632)
        I agree. However, there are other systems in the aircraft that detect the low pressure, and THESE cause additional alerts, plus the oxygen systems to activate.

        In addition, a slow 'leak' gives the pilots great time for an emergency descent. Give me a slow leak over a fast one anyday.
  • by Anonymous Coward on Saturday October 01 2005, @07:32PM (#13695574)
    Really strange reporting. For starters, they don't even get basic facts right, e.g. they report Airbus was "owned by Dutch and British companies", when in fact it is owned by EADS (80% share, French/German) + BAE (20%, British). They also keep calling it a problem between Airbus and Mangan, when the actual events (as per their own article) seem to only involve Mangan and his former employer, TTTech. Airbus doesn't seem to have any involvment in this.
  • by Muhammar (659468) on Saturday October 01 2005, @07:35PM (#13695594)
    I worked for 3 pharma companies. I would never openly challenge a company like this about their product. I would find a new employer first and then I would try to leak out what was going on - and I would be extra careful that my new and old employers would not find out it was me. Why volunteer yourselfs to go in front of a firing squad? - It is not important that you made the point first, give a journalist a hint, he will give you a story. If they then call you then to testify, you do it, maybe without trying to look eager.

    Reporting to autorities on your own employer - even if there was a serious wrongdoing - is certain to end your industry career.
  • His blog (Score:4, Informative)

    by HotNeedleOfInquiry (598897) on Saturday October 01 2005, @07:38PM (#13695607)
    I'm not positive this is his blog (it looks more like a static web page) but it does have a ton of information on the subject:
    http://www.eaawatch.net/index.html [eaawatch.net]
  • by StressGuy (472374) on Saturday October 01 2005, @07:46PM (#13695645)
    The FAA and European agencies are pretty close to each other on regulations...a good thing since we fly big commercial aircraft in each others airspace all the time. The rest of the Airbus fleet is type-certificated in the US, I can only assume they wish the same for the A380.

    In this country, you're not going to put an "off the shelf" anything in a commercial aircraft unless it's gone through appropriate approval processes. You can't change the color of the fluid in the compass bowl without PMA approval.

    Furthermore, if they want thier TCDS (Type Certificate Data Sheet), they will need to, among other things:

    1) Fully ground test the operation of the depressurization valves

    2) Ground pressurization test the aircraft

    3) Test the pressurization systems in flight

    [Reference: Title 14 Code of Federal Regulations Part 25, Subpart D, Paragraphs 841 and 843]

    Bypassing the approval process for a component is a serious charge. However, given that a gigantic double-decker commercial aircraft has "new and novel" written all over it, something just doesn't quite compute here.

    Smells like a propaganda war, but I'll keep my eye on it.

      • by StressGuy (472374) on Saturday October 01 2005, @08:29PM (#13695806)
        What you are not considering is that the A380 does not yet have a TCDS. They won't get type certification in the US unless and until they show outright compliance or ELOS (equivalent level of safety - yes, the aviation industry is full of acronyms). Trust me, there is not way that veritable armies of inspectors will not "be around" as it were. You just don't bypass these regs by just getting someone to "look the other way". As Douglas once put it, "when the weight of the paperwork equals the weight of the airplane, the airplane will fly" The A380 is a BIG airplane.

        Don't just dismiss the regs as easily bypassed, it has happened, but it's the exception, not the rule. Once it does happen, it's not unusual to see an entire aircraft type grounded until the matter is resolved. Airbus went through this not long ago when it was discovered that certain empannage components came from what essentially turned out to be an Italian aircraft scrapyard. They falsified documentation to make the parts appear to be remanufactured and approved.

        Pretty sure they are still in prison.

  • My reactions (Score:5, Insightful)

    by erroneus (253617) on Saturday October 01 2005, @08:20PM (#13695769) Homepage
    My first reaction was the expected "Oh my god! This consciencious guy is getting royally screwed!" and I immediately felt for his situation and could only hope to be as honorable.

    But after reading the article and the other Slashdot opinions, I too think there's a lot that needs to be revealed before we can form an opinion about this.

    Ultimately, we should hope that all the facts are revealed in this case and quickly. If there's a problem, it should be fixed and let this thing move on. If there's not, then I hope the true motivations are revealed as well. But I don't want to see this problem disappear under secrecy and then read about some horrible terrorist attack that was actually a system malfunction in disguise.
  • by SimJockey (13967) on Saturday October 01 2005, @08:32PM (#13695815) Homepage Journal
    I've gone up against a client (big multi-national oil company) who disagreed with me on what was required for a refinery safety system I was designing. I wanted a pretty elaborate and redundant system to take care of what I will admit was a remote contingency. However it is my job to consider remote contingencies, it was what they hired my company for. But they really balked at what I was proposing.

    As much as engineers like black and white solutions, there is a lot of grey out there. In my case, I saw the deficiencies one way, they saw them another. The scenario couldn't be practically tested and the academic research on the topic was spotty and a lot of it was unpublished internal data. I ended up putting together reports with experts from two continents to convince this client that there was a problem they weren't seeing.

    Standing up on something like this is a lonely place to be. Like the article, I live with the thought of what I do can kill people if I am wrong. Makes me real cautious. But people who I report to are often non-experts, and occasionally they believe things irrationally (to me anyway) and it takes a lot of convincing to get them to see the my side. And hey, I am wrong sometimes too. But to stand up to a company that is paying your paycheque and say that you will not sign off on a design because you believe there is a problem, all the while they are screaming at you that we are behind schedule and over budget, makes for a truly shitty day at work. You get all sorts of pressure to let things go "good enough". Takes a lot of backbone and confidence for a technologist to stand up to economic pressures. We tend not to care as much for the dollars as we do for safety. I admire whistleblowers for this.
  • by MrPerfekt (414248) on Saturday October 01 2005, @08:32PM (#13695817) Homepage Journal
    You're doing the morally right thing but you'll get the shaft every time...

    Mangan said he was looking for a new job. He has contacted dozens of aerospace firms in the U.S. and Europe, but none have returned his calls. "Nobody wants to touch me," he said.

    It's not really shocking that nobody wants to touch you after you've potentially cost your former employer, in the same field no less, millions of dollars. It's amazing to me though that the US has some of the best protection laws when it comes to this sort of thing.
  • Mangan's blog (Score:4, Insightful)

    by jmichaelg (148257) on Saturday October 01 2005, @09:36PM (#13696134)
    Joseph Mangan's blog [eaawatch.net] starts off being pretty inflamatory. However, down towards the bottom of his main page, he posts the minutes of a meeting that discusses how the employees should act if anyone asks about problems with the chip. The items he cites can be read two ways:
    1. say as little as needed to avoid getting entangled in details or...
    2. say as little as possible so Airbus is deceived into thinking the part is "simple."
    Without more documents, it's not clear to me which interpretation is closer to the truth.

    In this document [eaawatch.net] he asserts that the OS that runs on the chip was hacked together and that the software being delivered to Airbus was not put together according to the software engineering standards Airbus requires of its sub-contractors. He also says:

    In numerous official review findings by Honeywell International employees performing the role of external reviewers, led by Honeywell Engines and Systems Tucson, Software Quality Assurance Manager Jeff Young, TTTech consistently failed to deliver documentation, tests, and process compliance evidence at an acceptable level of quality.
    Perhaps someone here knows Jeff Young and can ask him if Mangan's charge is true vis-a-vis the product delivered to Honeywell.
  • by Ancient_Hacker (751168) on Sunday October 02 2005, @09:20AM (#13698201)
    Now maybe Boeing is just as bad, but Airbus seems to be particularly ATROCIOUS at systems design. BAd chips are about the least of their problems. A few examples: Airbus runs off end of runway, investigation shows:
    • Water in brake cylinder back end froze up. Cylinder lacked weep hole.
    • Brake electronics had two identical systems running in parallel.
    • If you pressed one of the brake system buttons for more than 10 msec, but less than 20 msec, one computer might see the keypress, the other might not. Never tested for.
    • Brake system uber-boss hardware checks for differences between two computers.
    • If it finds a difference, it turns off the secondary computer, WITHOUT SNOOPING AROUND to see if in fact it was the secondary computer that was getting off-track.
    • Said turning off is not signaled to the pilots in any obvious way.
    • Even if the pilot notices, by flipping to a obscure status-page, that the secondary braking system has been downed, pressing the RESET button doesnt actually reset much of anything.
    • Airbus encourages pilots to use auto-braking mode, which supposedly gives a steady 0.3G's of decelleartion.
    • If auto-braking doesnt seem to give 0.3G's, some TILT lights go on, but the braking system doesnt try using the suspect bad system, even after the other system is now known to be bad.
    I could go on, but I think you see the basic drift here. Not a clue among the designers, testers, or managers.

    Similar totally foobared design blew up the $400M Ariane rocket. Similarly foobared design for the Airbus flight control computer: lessee-- Pilot is pulling very hard on the stick, should we do what he says or drill a big hole in the ground? Hmmmmmm.....

    Full report URL's I can find if anybody is interested.

    • Maybe he was thinking that they Airbus was built and designed in Europe? And that he'd need to move there in order to work on it?

      http://www.airliners.net/info/stats.main?id=29

    • Re:WTF? (Score:4, Informative)

      by DrSkwid (118965) on Saturday October 01 2005, @07:19PM (#13695530) Homepage Journal
      He lived & committed the crime in Vienna, how would your US law provide any protection ?

      Try reading stuff, it usually helps.

    • by digitalgimpus (468277) on Saturday October 01 2005, @08:36PM (#13695830) Homepage
      I'll take that one further.

      A Persons first duty is always to the public.

      It doesn't matter who you are. If your a cook, and know the meat your using was mishandeled, you have an obligation to prevent human consumption. Doctors have an obligation to preserve life. A cop's first duty is to the public (before his fellow officers or commanders).

    • by Martin Blank (154261) on Saturday October 01 2005, @09:52PM (#13696202) Journal
      The fact that the company forged his signature on internal certifications should be enough to throw the burden of proof on the company.

      It's not a fact. It's a claim made by Mangan that no doubt will come up during trial. If this can be proven, then it's a really bad mark against the the company.
    • Scewed up? (Score:4, Insightful)

      by Savage-Rabbit (308260) on Saturday October 01 2005, @11:02PM (#13696448)
      It sure sounds like Austria has a screwed up legal system.

      Screwed up as it is I don't think the Austrian system is any worse than the US, German, French. British one.... The basic truth is that every body is equal under the law in a Democracy and everybody can get justice. All you have to do is put up the money for a N-year long legal battle and we all know who is more likely to win that one don't we? Ciitizen John Q. Public or Corporation X? My money is on the corporation. The end result in cases like this usually is that however wrong they may be the corporations always win. They do it by dragging things out in court until they have bankrupted you broken up your marrage and genarally ruined yoru life causing you to give up. One is just left hoping that Boeing and Airbus both have the sense to test these chips exhaustively before one of their aircraft makes them regret their lethargy when several hundred people die. Of course it usually never sinks in until to late that the PR damage done by one of their new superliners crashing will cost them more than what they are saving by ignoring the problem but one can always hope for a miracle, like... say... an aerospace industry CEO growing a consience? I know it's a slim chance but I have't quite given up on the human race yet.