Max Crashes Strengthen Resolve of Boeing to Automate Flight
My knee jerk reaction to this is &quot;more automation after an automation failure? Huh?&quot;. But whenever I think someone is being that stupid, it&#x27;s always worth a second look, and it turns out the reality is more complex.<p>This article[1] linked off of the OP goes into detail about their crashes. It describes a design philosophy that pushes robustness fully onto the pilot, expecting him to flawlessly stitch together independent automated systems and unreasonably rapidly interpret and react to  their error modes. In the case described in the article, separate automated systems had contrasting views of the world, and shouted their contradictory errors at the pilots, relying on them to be able to instantly reconcile these models and figure out what the root problem was. (In this case, a specific sensor failure made a single system think the plane was pointed up, and this system made the isolated decision to push the nose downwards while warning that the nose was too high. Naturally, other systems simultaneously complained about the nosedive).<p>One solution, of course, is to remove automated systems from planes. But assuming they provide any value (I don&#x27;t think this is in dispute?): another, more reasonable strategy is to commit more fully to an automated system design that is intentionally fault-tolerant, robust to system and sensor errors, and has a more complete view of the plane&#x27;s world. Instead of requiring the overall state of the meta-system to be lossily communicated to humans in a time-critical emergency, the newer designs are intended to use all the information available to the plane&#x27;s systems to reconcile subcompoments&#x27; contradictory view of the world. Note that this doesn&#x27;t preclude human control at all: if anything, it makes pilot control _safer_, since the system can provide a coherent view to the pilot in a way that&#x27;s currently impossible.<p>I don&#x27;t know enough about large aircraft operation to fully comment on the wisdom of this approach, but it&#x27;s substantially more complex than &quot;auto system failed, why would they expand use&quot;.<p>[1] <a href="https:&#x2F;&#x2F;www.wsj.com&#x2F;articles&#x2F;the-four-second-catastrophe-how-boeing-doomed-the-737-max-11565966629" rel="nofollow">https:&#x2F;&#x2F;www.wsj.com&#x2F;articles&#x2F;the-four-second-catastrophe-how...</a>