Page Links: First Previous 1 2 3 4 5 6 7 8 9 10 11 12 13 14 Next Last Index Page
Lonewolf_50
July 15, 2025, 18:12:00 GMT permalink Post: 11923148 |
For Dr Bru and Engineless:
I think that there is a thread about hacking of airliners somewhere on PPRuNe, might want to take that discussion there. (Here is one, there are others) A short response to you both: 1. Note that the article was from 2019 2. I am very doubtful that this occurred, beyond estimating the efficacy of any protections Boeing and Honeywell will have come up with since that article was published. I doubt that either company sat on their hands after that Black Hat conference. 3. Caveat: yes, hackers never sleep . = So some kind of sabotage is supposedly done, you think? = (I'll put the speculation into the spoiler)
Spoiler
But I think that you are both grasping at straws, for a variety of reasons, among which are: 1. No evidence to date. 2. Nothing in the report (but then, it's a prelim report) 3. If that kind of thing was going on, I don't think that the report would appear to lean so hard toward the human factors piece. 4. Unless that is part of the deception plan! ![]() 5. Yeah, right, we are back to the Hollywood thriller that neither of you have gotten a producer to try and get filmed. 6. Fear 7. Surprise 8. A fanatical devotion to Saint Bernoulli. Please take any further discussion of this line of inquiry to a thread involving hacking. Thank you all in advance. T28B (As an aside: if you took a look at the debris field, and the fact of the post impact fire, finding any evidence of something like what you are alluding to would be tough unless there's a way to parse EAFR information to detect the intrusion into the system of spurious / outside signals). Last edited by T28B; 15th July 2025 at 19:52 . Reason: Alert to move hacking discussion elsewhere |
WillowRun 6-3
July 15, 2025, 18:16:00 GMT permalink Post: 11923153 |
After all the analysis on PPRuNE, fuel switch failure (well, dual switch failure, at practically the same time) seems so unlikely it's no longer worthy of consideration. However, I'm still open to the idea of a failure elsewhere that may have signalled the fuel switches had transistioned from Run to Cutoff wthout physical movement of either switch. Why? Firstly, because of this (taken from the preliminary report)
The STAB cutout switches are located next to the Fuel cutoff switches. What did Air India’s on duty AME do as part of their troubleshooting? Were panels removed to gain access to the rear of the switches and wiring? What about wiring and data connections elsewhere? What may have been disconnected/disturbed as part of this process? Do the STAB cutout switches and Fuel cutoff switches share any connectors that could have been inadvertantly cross-connected? Etc. It would not be the first time that an engineer had innocently done something that later caused an accident. And I haven't read anything about possible nefarious action by a (disgruntled?) engineer - but I've seen lots of accusations directed at the pilot(s)... Secondly, the preliminary report's version of (part of) the conversation in the cockpit - Until proven beyond reasonable doubt I'm chosing to take the cockpit conversation at face value, because I really don't want to believe any of the following scenarios: A) one of the pilots lied B) one of the pilots attempted to deflect blame onto the other pilot for the benefit of the CVR C) One of the pilots unknowingly operated the fuel cutoff switches. D) One of the pilots deliberately operated the fuel cutoff switches. It is all too easy to blame one of the pilots when in reality no one outside of the official investigation may yet know what most likely happened. |
OldnGrounded
July 15, 2025, 18:37:00 GMT permalink Post: 11923165 |
We know with reasonable (although not perfect) certainty that the fuel control switches were placed in CUTOFF almost immediately after rotation and were later moved back to RUN. We do not know who did that or why it was done and we don't have nearly enough information to answer those questions with any confidence. |
OldnGrounded
July 15, 2025, 19:15:00 GMT permalink Post: 11923192 |
It's certainly possible that we will someday learn that the Indian investigators have been conducting a manipulative campaign and using the preliminary report as an instrument of that campaign, but there is absolutely no evidence of that currently available to us now. |
Mr Optimistic
July 15, 2025, 19:26:00 GMT permalink Post: 11923197 |
You're making things up, attributing motive where you cannot possibly know motive. You're just guessing, and conveniently making your guesses match your preferred scenario. It is entirely possible, indeed it is the way it is supposed to be done, that the investigators have included what is known with reasonable certainty, and known to be relevant, at this point and not included other things about which they are uncertain.
It's certainly possible that we will someday learn that the Indian investigators have been conducting a manipulative campaign and using the preliminary report as an instrument of that campaign, but there is absolutely no evidence of that currently available to us now. Why the person in charge of the hand did that is unlikely ever to be known. |
T28B
July 15, 2025, 19:40:00 GMT permalink Post: 11923208 |
He perhaps used the wrong turn of phrase there.
Something like sabotage/hacking would be in the realm of what's addressed in a criminal investigation. Our topic in this thread is the preliminary report of the accident investigation team. (That's a reminder for all, not just D Bru). Last edited by T28B; 15th July 2025 at 19:43 . Reason: (I need to stop trying to answer two posts at once). |
T28B
July 15, 2025, 20:07:00 GMT permalink Post: 11923228 |
The report is linked in the first post of this thread, and is attached to post # 3 in .pdf format . |
T28B
July 15, 2025, 21:02:00 GMT permalink Post: 11923261 |
On this forum (unlike some other internet sites) you cannot unlike a post. Speculation on Maintenance Actions/Ground Crew Actions: We must accept that there is very little hard information in the Preliminary Report addressing maintenance actions before this flight. When the final report, or perhaps an interim report, is issued then more detail on the activity by the ground crews between the successful flight from Delhi and the unsuccessful flight to Gatwick will become available. I ask that we all refrain from spinning the hamster wheel regarding 'What if they removed or repaired that gizmo-thingamajig?' unless there is something to anchor that to from the report. Thank you all in advance. |
AirScotia
July 15, 2025, 21:03:00 GMT permalink Post: 11923262 |
So why did they give so much space to a discussion of SAIB NM-18-33? It's obvious that the switches were not faulty, or they'd have said. If they couldn't tell if the switches were faulty, they'd have said. They do tell us that the throttle control module was swapped out and there's been no problem with the switches. So they don't need to mention it. It doesn't read to me as a logical part of the preliminary report, but as something they were under pressure to include to imply that there may have been a technical problem rather than pilot malfunction.
|
Mrshed
July 15, 2025, 21:38:00 GMT permalink Post: 11923288 |
So why did they give so much space to a discussion of SAIB NM-18-33? It's obvious that the switches were not faulty, or they'd have said. If they couldn't tell if the switches were faulty, they'd have said. They do tell us that the throttle control module was swapped out and there's been no problem with the switches. So they don't need to mention it. It doesn't read to me as a logical part of the preliminary report, but as something they were under pressure to include to imply that there may have been a technical problem rather than pilot malfunction.
Simplest answer is often the best - they included it to show they had considered it? Imagine this forum if they hadn't included a nod to the SAIB - 90% of posts would be about the SAIB. can't really win on this one in the court of public opinion. Included or not, they made no recommendations for even proactive reminding of the SAIB to operators. This is more telling for me.
They are as aware as anyone on this forum of previous SAIB relating to these switches, and explicitly reference them in the report, and haven't even taken the incredibly easy step of "re-suggesting" this. This is telling and should be very carefully considered before further suggestions in this direction.
|
WillowRun 6-3
July 15, 2025, 21:44:00 GMT permalink Post: 11923291 |
So why did they give so much space to a discussion of SAIB NM-18-33? It's obvious that the switches were not faulty, or they'd have said. If they couldn't tell if the switches were faulty, they'd have said. They do tell us that the throttle control module was swapped out and there's been no problem with the switches. So they don't need to mention it. It doesn't read to me as a logical part of the preliminary report, but as something they were under pressure to include to imply that there may have been a technical problem rather than pilot malfunction.
The prevalence of the 787 type. The quite recent travails of Boeing and the pace of its recovery (and some doubters that it can or will recover). The orders of magnitude increase in information, as well as misinformation or even disinformation, about this accident compared to .... well, compared to the UPS accident in Birmingham in 2013 (Flight 1354), cited as it was the first "current" accident occuring as of my stumbling across this forum and its threads. Sure, not a dramatic passenger aircraft accident but still valid for comparing the information environment then, and now. The persons responsible for this report, I think, did not act improperly if they included information not strictly necessary for the purpose of keeping aviation cognescenti updated about what is known with some (imprecisely defined) level of certainty and clarity. Such other information items could be intended to make some effort at mitigating ("minimizing" would be hoping for too much) the volumes of noise emanating from all over. Then there's the point about the report source knowing who did what, and when, but not providing specifics. Perhaps forensic analysis of the voice recording is ongoing, perhaps an analysis was completed but with reason to examine more closely. Regardless, I do not find it an affront either to solid, long-established principles of the Chicago Convention and Annex 13, or to the general ideas about advancing aviation safety, for the report sources to not treat the 30-day rule for preliminary reports as some "complete download demand function." Given what is reported about the fuel cutoff switches moving and the summarized cockpit statements, either way the final facts resolve will be tremendously impactful for the airline, the CAA of India, and the country (including but not only in its role as a major aviation Member State). I wouldn't hold this view if it was a question of deception. I see it instead as a matter of reasonable discretion, about both ..."what to leave in, what to leave out" (with apologies to Bob Seeger, "Against the Wind", 1980). |
appruser
July 15, 2025, 21:55:00 GMT permalink Post: 11923297 |
In my opinion, not enough attention is being paid to why the Pilot Monitoring might have *had to* execute the memory items for dual-engine failure. |
Mrshed
July 15, 2025, 21:57:00 GMT permalink Post: 11923299 |
Other than the report stating (by implication of IAS etc) no issue with thrust until the switches were moved, as well as the CVR exchange shared makes basically no sense in that scenario.
|
Sailvi767
July 15, 2025, 22:04:00 GMT permalink Post: 11923302 |
So why did they give so much space to a discussion of SAIB NM-18-33? It's obvious that the switches were not faulty, or they'd have said. If they couldn't tell if the switches were faulty, they'd have said. They do tell us that the throttle control module was swapped out and there's been no problem with the switches. So they don't need to mention it. It doesn't read to me as a logical part of the preliminary report, but as something they were under pressure to include to imply that there may have been a technical problem rather than pilot malfunction.
|
EDML
July 15, 2025, 22:08:00 GMT permalink Post: 11923307 |
After all the analysis on PPRuNE, fuel switch failure (well, dual switch failure, at practically the same time) seems so unlikely it's no longer worthy of consideration. However, I'm still open to the idea of a failure elsewhere that may have signalled the fuel switches had transistioned from Run to Cutoff wthout physical movement of either switch. Why? Firstly, because of this (taken from the preliminary report)
Inspired by the mention in the
PR
about a MEL on the ‘core network’, I came across the polemics between Boeing and IOActive a few years ago about the alleged vulnerability of 787 core systems to outside interference (hacker attack from within a/c and/or ground), including the highly sensitive CDN module, from where also the fuel cut-off module can be accessed. It’s definitely not my specialty, but I thought to flag it in case someone has more informed ideas about this. To my mind it could potentially “outshine” intentional crew action. Boeing at the time denied such options, of course. Obviously also in good faith, moreover it seems to be Honeywell &GE code anyhow, but who knows where we are 6 years on.
https://www.wired.com/story/boeing-7...ecurity-flaws/ |
galaxy flyer
July 15, 2025, 22:58:00 GMT permalink Post: 11923333 |
Likely because the FDR readout showed the engines at the appropriate takeoff thrust, then the switches move, takeoff thrust goes away. Switches move back to RUN and the quick restart begins.
|
GroundedSpanner
July 15, 2025, 23:24:00 GMT permalink Post: 11923343 |
Moving the conversation forward - What can we do?
I refuse to use the phrase that involves small rodents and circular exercise machines. But this conversation has to move forward.
If we take it that the preliminary report is true (or true enough). switches were moved by human hands, and is thus a Human Factors incident with very little that we can learn technically about the aircraft design... How is this community going to learn from this incident? What are we going to do as a community to improve safety? Accident investigation - IMO - is about examining all the facts. Looking at those facts, in the most unfiltered light, and working out the TRUE causes, regardless of the prevailing opinions of the time. Any aviation death is one too many. Every aviation death should be used to improve safety for those that follow. Sometimes the results are technical / design philosophy changes, sometimes its about humans. Regardless of whether this incident was action slip, absent mindedness, intrusive thoughts manifested, or murder-suicide. The common theme is mental health. What - really - is the state of mental health awareness in the pilot/aviation community? How much does it vary across geographic locations / cultures and communities? I don't know. I'm an engineer in a single location. I have never been in a CRM training session (plenty of HF Training though), I have no business getting involved in your business . Yet I have observed from the outside over the years pilots going from outright ridicule of CRM concepts as a flash-in-the-pan management consultancy theory, to being 'a bit interesting', to being 'a useful tool', to it being baked in as a fundamental concept of what you do. But CRM is about the interpersonal aspects of working with each other. About assessing the competency and capability of your team mates, and utilising each others skills and capabilities for the best outcome. CRM is about interacting with others? But what about interacting with your self? How open can you be? - Really? I've seen this thread, this forum, and the moderation team deny the discussion of pilot suicide (and even action slip) as 'unprofessional' talk, slander against professional pilots. Is that not suggestive of a community that is not (as a group) ready to acknowledge the possibilities? If so - Why? Is there a fear that acknowledgement of mental health issues will lead to personal disadvantage? Me - As an engineer. My company is starting to 'talk the talk' about mental health awareness. There's mental health awareness week. There's leaflets and presentations and hotlines to call. But do I believe really that if I seek help, my company has got my back? No of course not! There is fear. Fear that should I take advantage of the 'services' then a 30 minute conversation could balloon into the loss of my career, income, ability to pay the mortgage and feed the family. And you guys and gals - have Licences to maintain. Lose that and you are off the job. How much pressure do you have to pass your medicals? at any cost?. I've been watching a PPL on YouTube recently - reddit link containing a video and discussion who lost their licence because they sought help for a relatively minor issue, in a modern western 'enlightened' society. They have a YouTube career to fall back on, and they are young. A lot of us have only done aviation all our lives, are paid well for it and have nothing to fall back on. I don't know the answers. I don't have a magic solution. I don't know how the pilot (or aviation as a whole) community can solve the next big challenge. How do WE the aviation professional community address mental health in a way that works for safety as a whole, whilst protecting the needs of the individuals and the needs of our employers? A lot of questions and no answers. Sorry. |
T28B
July 15, 2025, 23:29:00 GMT permalink Post: 11923347 |
For GroundedSpanner:
You seem to have left out the fatigue bit. ![]()
Originally Posted by
Garage Years
Originally Posted by
someone
Is it possible the switchers were improperly installed and it wasn't noticed/reported? I'd suggest yes since the SAIB was issued at all.
These same switches are used on about 7,000 aircraft. A new part (766AT614-3D) with a new locking mechanism that could not be installed incorrectly was made for the 737. The 787 uses an entirely different part number (4TL837‑3D). Read the entire Preliminary report, and pay particular attention to pages 5 through 9. Five different buildings were damaged, badly, because this aircraft hit five buildings as it came down with forward momentum. Parts of the aircraft hit some buildings and not others. There was a fire. The debris field was spread out over a large area. There were whole, and broken, and burned parts of this aircraft all over the place at the crash site that the investigators needed to identify and sift through, and then try to use, to come up with the who, what, where, why, when and how of this accident. The flight deck was found about 650 feet from the initial impact point. The overall extent of the debris field was roughly 1000 feet by 400 feet. That's about three football pitches/fields long (plus a bit) and one football pitch/field wide (plus a bit). Cut the investigating team a break, if you please, and exercise a bit of patience. |
Xeptu
July 16, 2025, 00:30:00 GMT permalink Post: 11923360 |
Since the preliminary report neglected including when the RAT deployment occurred, I've tried to estimate it based on the picture they did include:
![]() Baro altitude should be around 150ft; using the public cctv video, I estimate this picture was taken between 4-7 seconds after rotation. A wide range, but that was the best estimate I could come up with. Maybe someone else could narrow it down further. I'm equally impressed by how quickly No1 engine recovered. I think it's safe to say that this situation is not recoverable, but a truly impressive piece of engineering all the same. |
za9ra22
July 16, 2025, 00:45:00 GMT permalink Post: 11923362 |
Might be that a good place to start would be to identify some
real
dots, because those links don't point to anything but the same unsubstantiated commentaries which don't give us facts, just conjectures based on nothing but gossip really.
The first link does confirm that the records for the captain were provided to the investigation (as would be expected) and nothing found:
|
Page Links: First Previous 1 2 3 4 5 6 7 8 9 10 11 12 13 14 Next Last Index Page