Wednesday, May 31, 2017

Air France 447: Eight Years Later


Eight years ago on the night of May 31st, 2009, Air France flight 447 from Rio de Janeiro, Brazil was lost in the Atlantic Ocean north of Brazil.
Virtually every aviator today knows the number 4-4-7 and the unnecessary tragedy it represents. The initial reaction of many was “how could this happen?” How could three airline pilots possibly lose control of their aircraft in under a minute and kill everyone on board within 4 ½ minutes of the autopilot disconnecting—essentially because the autopilot disconnected?
But the world of aviation has not sat idly by in its aftermath. The NTSB has a saying: “From tragedy we draw knowledge to improve the safety of us all.”
Much like the June 1975 crash of Eastern flight 66 at JFK due to a microburst, and the follow-on windshear crashes of Pan American 759 in New Orleans (1982) and Delta 191 in Dallas-Fort Worth (1985), these accidents lead to increased research and education on the weather phenomena and the development of windshear warning systems, both on the ground and as airborne equipment.
Also like the December 1974 crash of TWA 514 into the mountains outside of Washington, DC, which lead to the increased awareness of minimum safe altitudes, the installation of the basic Ground Proximity Warning Systems (GPWS) on all transport aircraft and the subsequent development of the modern look-ahead GPWS systems.
In each of these cases, the development that resulted in the aftermath of these accidents significantly reduced or virtually eliminated those causal factors in the years since.
Loss of control in flight (LOC-I) now remains as the leading accident factor in the few accidents and incidents we see in recent times.The loss of Air France 447 and another LOC-Iaccident earlier that same year, Colgan 3407 on February 12, 2009, spurned:
  • Increased awareness of the need for manual flying practice and more concentration on hand flying skills.
  • The need to be aware of normal pitch attitudes and power settings for all flight regimes.
  • The roll of the startle factor in pilots being able to cope with unexpected unusual conditions.
  • The roll of automation dependency in this increasingly automatic industry.
  • Increased training, now mandated, in upset recovery, high altitude stalls, with a revised emphasis on correction of a stall by reducing angle of attack, not just power application.
  • Increased minimum flight times for new airline pilots.
And while most of the emphasis is focused on human flying skill (and rightly so), technological advancements have also been taken, almost surely with this accident in mind. The new Airbus A350’s autopilot now can remain engaged in all but the most extreme situations, thus far reducing the instances where pilots are unexpectedly handling a causal factor (e.g., weather), system malfunction, and autopilot disconnection all at the same time. The system allows the airplane to recover back to within the normal flight envelope from extremes of speed, bank, and pitch and reduces the other recovery maneuvers that must be hand flown by providing for the capability of the autopilot to fly windshear and TCAS traffic resolution advisory maneuvers automatically, and allow the pilots to take over when they are ready. Enhancements to the weather radar allow for better analysis of a storm and provide an aural warning should one several minutes ahead go unnoticed.
Yet, still, the problem of LOC-I has not been eliminated, even though the lessons of AF447 seem loud and clear. Air Asia 8501 in December 2014, stands as a stark reminder that continued diligence is required.
Commercial aviation is very safe, it is in fact amazingly safe, but it is not inherently so. It is safe because a lot of people work hard every day to make it that way, and to keep it that way.



Sunday, December 11, 2016

Repeat after me: "Declaring an Emergency, Proceeding Direct"

LaMia Flight 2933 (LMI2933) was a charter flight of an Avro RJ85, operated by LaMia, that crashed near Medellin, Colombia shortly after 22:00 local time on November 28, 2016, killing 71 of the 77 people on board. The flight had run out of fuel.

While it was supposed to be flight planned to fly to its destination of Medellin, then its alternate Bogota, and then for an additional 30 minutes, upon arrival in the Medellin area it was only minutes from total fuel exhaustion.
Avro RJ 85

The aircraft had been flight planned to (or beyond) its maximum range. According to the Wikipedia article, this operator had repeatedly flown to or beyond the legal limits of the airplane. In all likelihood, the PIC was blatantly reckless. Arrests have been made and government officials suspended, but that's not the point of this entry.

Approaching its destination of Medellin, the flight was issued holding instructions due to another aircraft that had, ironically, a fuel situation. That would later be determined to be caused by a malfunctioning fuel gauge. That flight was making a precautionary landing and had been given priority. LMI2933 was third in line for landing and had been issued a holding pattern. At the point they entered the holding pattern, they had six minutes of fuel on board.
this doesn't mean that you wait to declare an emergency until you have less than 30 minutes of fuel on board, but as soon as it looks like you'll land with less than that

LMI2933 mentioned to ATC an “issue with fuel”, but that is a long way from declaring an emergency, which they eventually did, but not before they had apparently already run out of fuel, saying "Lamia 933 is experiencing a total failure, total electrical failure, out of fuel." The electrical failure, was of course due to the fact that the engines had stopped working due to fuel starvation. The airplane was already in a descent due to engine failure at the time they asked for radar vectors to the airport.

ICAO (International Civil Aviation Organization) requires "If the PIC calculates that the flight will arrive with less than reserve fuel (30 minutes minimum), then it is required to declare a Mayday-fuel." Note that this doesn't mean that you wait to declare an emergency until you have less than 30 minutes of fuel on board, but as soon as it looks like you'll land with less than that on board, even though you may have much more on board at the time.

It should have been clear to this crew that this had been the situation for a while. Other than proper flight planning and landing at an airport short of the stretched limit of Medellin, the crew should have declared and emergency due to fuel as soon as they contacted the Medellin controller (as well as with each previous controller).

When told of "an issue with fuel" the controller was apparently preparing to bring them in next, which was kind of the controller—but not required. When issued the holding instructions the crew accepted them and took two turns in the holding pattern.

The captain, who as also an owner of the airline, may not have  wanted to admit that his planning was that bad, and he had gotten them into a terrible situation. Had he landed "safely" he may well have had legal action taken against him for violating multiple safety regulations, instead they did not admit their situation and not only the pilots, but most of the passengers paid the ultimate price.

There are many lessons in this accident. No doubt among them will be safety culture, fuel planning, and CRM. More will probably be revealed when the final accident report is issued. But clearly one clear lesson to put into play when all of the unexpected events pile up and you're short on fuel is that saying "an issue with fuel", "minimum fuel" or other similar terms does not get you the immediate priority handling that you need. The words "mayday" or "emergency" must be used. If still, you do not get what you need to land safely, then you must violate any clearance or other regulation to maintain the safety of the flight. In this you are not only allowed, you are required!
Repeat after me "Declaring an emergency, Proceeding Direct...."



Other reading on the subject
https://fearoflanding.com/accidents/not-enough-fuel-the-disgusting-truth-about-lamia-flight-2933/
https://airwaysmag.com/industry/lamia-bolivia-2933-lesson-to-be-learned/
http://nsnbc.me/2016/12/02/its-official-colombias-caa-confirms/

Monday, May 9, 2016

Flying Around Turbulence

In response to an article in the Washington Post on an in-flight severe turbulence event, one commenter (who also wrote to me) questioned:

Is it possible to fly around bad weather or just too costly in terms of time and fuel to do so?

I'm just an armchair captain, but what I have seen on flights I've been on recently is a willingness to fly straight through the weather instead of flying around it. Southwest flight from Minneapolis to Phoenix flew over thunderstorms in the Colorado area. Turbulence was moderate to significant, though not as severe as this article records. The pilots tried FL360, FL380, and FL400. Eventually FL380 gave us the smoothest ride but it was still really bumpy. So maybe more consideration should be given to flying around the weather rather than straight through it. I know that means additional fuel costs and possibly delays, but isn't that better than very uncomfortable passengers, or in this case, passengers fearing for their lives? I'm more than willing to accept a 15 minute or 30 minute longer flight in order to be comfortable, rather than a roller-coaster ride that gets me in 10 minutes early. The airline has to factor in that passengers may not fly that airline again if the in-flight experience is too severe. And yes, you should ALWAYS have your seatbelt fastened when you are seated. No argument there.

First, the premise “Why don’t pilots try to fly around bad weather?” presumes to know what the pilots have tried to do to detect and avoid the “weather.” Unless you have interviewed the crew or done other specific research on the specifics of that flight, you don’t know what the crew has “tried” to do.  In fact, in your own statement you say that “The pilots tried FL360, FL380, and FL400. Eventually FL380 gave us the smoothest ride but it was still really bumpy.” Of course, this indicates that the pilots tried at least other vertical options. It’s not likely you were informed of the lateral options that were considered.

Quoting the article about the Allegiant Air incident: "Initial reports from our crew indicate that it was unreported moderate clear air turbulence that caused the injuries and subsequent diversion.” It becomes much more difficult to avoid turbulence that you don't know is there.
Turbulence is caused by numerous factors, including, but not limited to, thunderstorms, tropopause and jetstream interactions, wave action (e.g., mountain wave), trough lines and their associated areas of convergence and divergence, and wake turbulence from other aircraft, among others. Several of which are referred to collectively as Clear Air Turbulence (CAT).

Correctly predicting CAT is a combination of art, science, and luck. Causal factors include jet stream/tropopause shear zones (which typically have the most significant turbulence in the area above the jet and at a lower altitude where the accompanying tropopause slops below the jet core known as the upper front). The temperature lapse rates in each air mass (either side of the Jet & Trop) will produce a variability in the thickness of the turbulent area either side of the tropopause (which can often be a 6,000 ft thick band of potential turbulence). Of course the height of the tropopause is often right in the operational altitudes of most airliners, and that height changes—sometimes up to 15,000 feet at the jet stream boundary, limiting options of vertical avoidance. Horizontal avoidance is also tricky, and it's often just not possible to "fly around" the continuous line of a jetstream.

Wake turbulence, usually manifests itself as a short jolt of turbulence as the aircraft crosses behind the path of another, often out of sight, aircraft. It can be quite violent. You can often visualize this turbulence as a tornado like vortex in the contrail of a passing aircraft. The vortex spreads and settles with time, leaving its location hidden—if not accompanied by a tell-tail contrail.

Trough lines, while defined as a line of low pressure, also indicate areas of a shift in wind direction, often many hundreds of miles long, through a wide range of altitudes. The sift is often accompanied by a decrease in wind speed along the line resulting in areas of convergence ahead and divergence behind the trough line which result in vertical air movement generating turbulence. But not all trough lines generate turbulence. Predicting it requires an analysis of such factors as the speed of the trough’s movement and the degree with which the temperature and wind gradients are out of phase. These factors are usually not within the pilot’s toolbox, both in terms of the raw data and in terms of the ability to conduct the necessary analysis, since very few pilots are also meteorologists.

Thunderstorms are the more obvious hazard and are generally easier to see and avoid. However, even with thunderstorms there is a lot of variability as the turbulence is not limited to the confines of the cloud. The cumulonimbus disturbs the air around it, often throws hail out the top and is a dynamic beast capable of climbing at > 6000 feet per minute. Turbulence can exist for many miles downwind, even well clear of the cloud. Weather radar certainly helps, but it only indicates water, and not turbulence directly and requires a certain degree of skill and interpretation. If there were only one plane in the sky and the airplane had unlimited performance capability things would certainly be easier. However, any deviation requests must be coordinated with ATC which as to balance separation from other traffic restricted airspace and other constraints. The flight you were on was lucky that it had the capability to climb to FL380 or FL400, which is often not the case.

That said, different human and company attitudes are sure to apply in the aggressiveness with which different levels of turbulence are avoided. Operations on often-busy oceanic routes out of radar contact have even less flexibility available to crews for lateral or vertical deviations. Sometimes the best you can do is have everyone seated while passing through an area of turbulence that could not be flight planned arount. My own airline  is one of the few (if not the only?) airlines with a meteorology department which puts a lot of time, money, and effort into predicting and helping crews avoid turbulence, as well as educating pilots on its causes and avoidance. Its weather products are used by several other airlines as well. However, it is not a foolproof system. I can't speak for Allegiant Air, nor do I know what the upper-air charts looked like for that day. Sometimes you can be smart and avoid it, and sometimes no matter what you try, you can't.

Keep those seat belts fastened!

Sunday, August 2, 2015

MH 370 Floating Part Found - So Where is it?

A B-777 flaperon, almost certainly to be determined to be from the missing flight MH370 turned up on Reunion Island, located off the east coast of Madagascar.
As  of today, it's been over 509 days that's  about 12,400 hours. I give the figure in hours, because when applied to a  drift rate that will easily reveal how many miles this part may have traveled before showing up on the Reunion Island beach, 600 miles east of Madagascar.

Some Indian Ocean-current charts look fairly simple. Like this one. But even there. a plane crashing just about anywhere in the entire Indian Ocean could have parts end up near the shores of Madagascar eventually.


This chart, from the Kenya Meteorological Department, shows that the currents may be a bit more complex than the simplified illustration above. In fact, the Indian Ocean currents are full of meanders and eddies that slow and complicate the drift journey.
The current velocities range from near zero, to 130 cm/sec (0-2.5 knots/2.9 mph) The average speed appears to be somewhere between 1/2 and 1 mph, or 6000—12,000 miles traveled. Of course a floating object is also affected by the winds, not just the current.
.

The effect of the wind on any floating object will depend on the profile of the object and how much of it sticks up out of the water. Some areas are know for their 40 knot or greater winds!

Looking at the tracking data for drift buoys released after the  Air France 447 crash on June 1, 2009  it becomes clear that performing a backwards drift calculation is a difficult proposition. This illustration covers two weeks. Working backwards over 17 months with only a few specimens (one or two so far) places the possible origins virtually anywhere in the entire ocean.
Let's look at a couple of 12,000 mile possibilities based on the simplified current chart above. :

Some maps have been drawn and drift plotted to show that debris from the theoretical crash sight off of southwestern Australia could have ended up on the Reunion Island beach. But, what other locations in the Indian Ocean would also land parts in the target area? It's not a stretch for the part to have circled parts of the Indian Ocean several times, depending on which chart of ocean currents you refer to. 

At this point, nearly 17 months after the loss of the aircraft, determining where it started out is kind of like trying to figure out the address a car started from based on the off ramp it took from the interstate, when it's been gone long enough to cross the country three times!

Perhaps what this find will do mostly is to show that the airplane did in fact crash somewhere in the water, and  that it was not hijacked to Kazakhstan, or even shot down as MH17 over the Ukraine.

I find that many people simply underestimate the situation of 20,000+ square miles of ocean, much of it 3 miles deep. Cases in point:

  • Searchers knew very closely where AF447 must have been, yet it took two years to find it. 
  • A Northwest Airlines DC-4 crashed in lake Michigan in 1950 (flight 2501) has still never been found. 
  • When Steve Fossett's aircraft crashed in September 2007, it took a year of extensive searching by up to two dozen aircraft, and while search crews had found eight previously uncharted crash sites, Fossett's aircraft remained elusive. Only with clues from a hiker was the wreckage finally found near a California mountain top only 65 miles from his takeoff position. 


I believe the mystery of MH370 will continue for a long time. 

Sunday, January 18, 2015

How flying a glider makes me a better airline pilot


Like any endeavor, a well rounded education makes you more insightful, if not better at it. 
Can soaring (i.e., glider flying) make you a better pilot airline pilot? I think so.

Every glider flight, whether by aerotow or winch launch, starts out with a precision flying exercise. Being connected to the airplane in front of you with a rope does command a certain degree of concentration. One must avoid the wake of the tow plane, maintain proper tension on the tow rope (the tow plane and the glider often don't encounter rising or sinking air at the same time), and maneuver to the outside in turns. 
Flying a glider requires an appreciation and understanding of a whole set of factors that an engine makes it easy to ignore. Keeping a glider aloft for hours at a time requires putting the glider in air that, on average, is going up faster than the glider is going down.  So, there are two factors: can you find air that is going up, and how you control how fast the glider is going down. 

The first requires an understanding of the micro-meteorology. 


In soaring, I found an appreciation for how it works, for seeing a cloud not just as a puffy object, but adding to it all the airflows that make it and surround it. Essentially asking "what makes that cloud that shape, and how will it change over time?"   As airline pilots, we fly through clouds all the time—mostly we just plow right through. But we're also looking for a smooth, efficient, and safe ride even if we don't have to try to harness the power of the airflow around it to stay up. The thermals, updrafts, downdrafts, and waves make those clouds and turbulence. In the same way that a lion tamer should know about lions,  I think that appreciation, that better understanding of the environment I fly in makes me a better pilot as a result. 
The second factor, how you control how fast the glider is going down, requires an understanding of aircraft performance. 



When there's no engine, efficiency is the name of the game. It would be easy if there were just one optimum speed to fly—but there isn't. There is a speed that provides a minimum sink rate—that's good for thermalling, flying tight little circles trying to get the most altitude out of the rising air. But that very slow speed (just a few knots above stall) isn't a good one to make a distance over the ground. That is another speed. But, that changes with the wind and how fast the air your in is rising or sinking. Counter-intuitively, in air that is sinking the best approach is to push the nose down! That's to go faster and get out of that sinking air quicker. One also needs to go faster with a headwind than tailwind. (When you're only going 50 mph, it really makes a big difference.)
Those same principles apply equally to a jet airplane!  For example, in the event of an engine loss at altitude, the question is: "what speed to fly". Do I need to minimize my sink rate (to avoid traffic below), make the best distance per altitude (to clear that mountain range), do I need to make the most fuel efficient diversion, or the fastest one?

All airplanes could be gliders, and there have been a few classic examples when some big ones unexpectedly became a glider. Here's three:
  • Air Transat #236  An A330 that ran out of fuel over the Atlantic and glided to a safe landing in the Azores.
  • Air Canada Flight 143 aka, "the Gimi Glider.   A Boeing 767that ran out of fuel at 41,000 feet , about halfway through its flight originating in Montreal to Edmonton, and glided to a safe landing.
  • USAirways 1549 The "Miracle on the Hudson"
In each case, the captain was an experienced glider pilot. Hard to argue with success!
Along those same lines, energy management—a key element in the instances above—is always on a glider pilot's mind. You always have to be able to make it back to the airport (or to a different airport) and a go-around is not an option!

In a recent simulator session  we ended up shortly after takeoff with no engines operating (a fire in one and failure in the other). The objective was apparently to do a ditching drill. But, why put it in the water, when you can land on the runway—which is what I did instead. (A glider pilot is always aware of when and how he can turn back to the airport in case the tow rope breaks!)

I've also found that gliders (or other small acrobatic airplanes) can be a great resource to expand a pilot's attitude envelope. This may come in quite handy in the event of an upset event.  When you're upside down for the first time, hanging by your seatbelt, and all the dirt and other objects that aren't tied down are falling up in front of you-—it can be a little disorienting! "Tunnel vision" comes to mind.  Training in aerobatic capable aircraft can prepare you to handle an extreme upset—like an inadvertent case of upside-down. The intuitive answer is not always the right one!

Then there's the aspect of no-autopilot. Somehow that should count for triple the time spent in an airplane for hour requirements! Of course there would be few times when an autopilot would be of any use, as a glider pilot is almost constantly changing speed and direction to maximize the flight.

It won't happen magically when the new glider pilot solos or gets that new ticket. It will take some time, some effort, some thinking about it, and a lot of fun along the way!

Saturday, January 10, 2015

Comparing QZ8501 to Air France 447

On December 30, 2014 two days after the loss of Air Asia Indonesia (QZ) flight 8501, CNN asked me to provide a comparison between QZ 8501 and Air France 447.
The following was published 12/31/14

On Sunday, all contact with Air Asia flight 8501 was lost over the Java Sea as a wide area of thunderstorms covered the area. The discovery of floating debris on Tuesday about 100 miles from its last known position in combination with an analysis of ocean currents will give investigators clues where to search for the remainder of the aircraft. From its cruise altitude, the airplane’s gliding distance would also be about 100 miles, but consider that for the debris to drift that same 100 miles it would only take a drift rate of 2 knots, yielding a wide range of possibilities as to  the nature of the aircraft’s descent to the water below.

Many parallels between Air Asia 8501 and Air France 447 in June, 2009 are obvious. Both aircraft were lost in thunderstorm areas of the Intertropical Convergence Zone (ITCZ). Both were found within a few miles of its last known cruise altitude position, both were sophisticated fly-by-wire Airbus aircraft (though different models), and both crashed at sea.

While flying into a thunderstorm is always to be avoided, it not likely the sole cause of the accident.
The weather in the ITCZ has some unique qualities compared to your average thunderstorm over land. The storms are driven by the convergence of airflow patterns between the northern and southern hemispheres of the Earth in addition to the usual factors of warm moist air and unstable atmospheric conditions. The height of the stratosphere –- which tends to put a cap on the height of thunderstorm growth, and averages about 35,000 feet over the mid latitudes (such as that of mainland USA), reaches to 50,000 feet or more, providing for the growth of thunderstorms to great heights and accompanying intensity. These features can lead to some unusual conditions within those storms, making the proper assessment of them with airborne weather radar more difficult.

In the aftermath of the Air France crash significant emphasis has been made in pilot training on the prevention and recovery from similar scenarios. I would say that few pilots, especially of Airbus aircraft would be unaware of AF447’s lessons, almost certainly one with the reported experience of QZ8501’s captain.

There is a recent development however that relates to Airbus A320 series aircraft. A December 10, 2104 Airworthiness Directive (AD 2014-25-51) describes how control of the aircraft could be lost in flight as a consequence of icing of the angle-of-attack probes and an interaction with the airplane's stall protection function. Those probes act like small weather vanes on the side of the aircraft and measure the angle at which the airplane moves through the air--the angle of attack. If the angle is too high the air can no longer flow smoothly around the wings, resulting in an aerodynamic stall. The acceptable range of angles of attack is fairly small, and gets considerably smaller at higher speeds, such as cruise speed.

Simply put, depending on the position of the angle-of-attack probes when freezing occurs and the subsequent speed of the aircraft, the system may be fooled into thinking that the aircraft is approaching a stalled condition-even when it isn’t. In response, the airplanes stall protections pitch the aircraft’s nose down to recover. This erroneous pitch down cannot be overridden by the pilots unless an emergency procedure in the Airworthiness Directive is followed. All pilots flying this model airplane should be aware of this.

The procedure instructs the pilots to shut down two of the three air data computers to render the usual stall protection inoperative an allow recovery of the aircraft. Of course, there is no way, at this stage of the investigation, to know if this played a part but investigators will certainly be looking for evidence of this phenomenon.

Another obvious question is the apparently lack of transmitted position and altitude data after its last known position in cruise. This data is transmitted throughout the flight by a system known as ADS-B (Automatic Dependent Surveillance-Broadcast). This system transmits the airplane’s position and other basic data to ground stations. Though its position is GPS satellite derived, it is not transmitted to satellites, only to ground stations – so the range to the nearest station is a factor.

The apparent sudden loss of this data at cruise could be explained by failures in flight such as an electrical failure, in-flight breakup of the aircraft, or the pilots switching off required data to operate the system such that outlined in the emergency procedure above. However, it could also be that the aircraft simply flew out of range of the ground stations. Flight tracking websites indicate that this routinely occurs in the general area where QZ8501’s last ADS-B transmission was made. I think that is the most likely cause of the end of the data stream and is not necessarily an indication of catastrophic failure in flight.


In the case of Air France 447, the aircraft came down in the Atlantic Ocean where the sea depth exceeded 12,000 feet. While some floating wreckage and a of number of bodies were discovered within a few days on the surface, the extreme depth and rough terrain on the ocean bottom delayed discovery of the remainder of the aircraft and recovery of the flight recorders for two years.

Fortunately, the 100 foot depth of the Java Sea in the area where evidence of QZ8501 was found will almost certainly result in the relatively rapid location of the aircraft and recovery of the two flight recorders. Consideration of ocean currents during the two days between the aircraft’s disappearance and the discovery of floating debris will help lead investigators find  the remainder of the aircraft and its passengers. We should not be subjected to long period of uncertainty such as with AF447 or the continuing lack of information on MH370.

In the aftermath of the Air France crash significant emphasis has been made in pilot training on the prevention and recovery from similar scenarios. I would say that few pilots, especially of Airbus aircraft would be unaware of AF447’s lessons, almost certainly one with the reported experience of QZ8501’s captain.

While any accident investigation will take months to complete, I would expect more information to be available as the search and recovery continues. Clues from the way in which airplane parts were damaged on impact, the flight data and voice recorder contents will provide answers. But like any aircraft accident, the cause is likely to be the result of a chain of events and conditions, the absence of any one of which would have avoided this tragic accident. At this time we can only guess what some of those events and conditions are.

Sunday, July 6, 2014

New Theory for MH370: Oxygen fire, west toward the Maldives.

A new theory on the fate of Malaysia Airlines flight 370 has been proposed by Stuart Yeh, an associate professor at the University of Minnesota. As you can see from his profile, he is no stranger to analyzing complex problems

Like all good theories, this one incorporates previously known, but incongruent observations left out of most previous theories.

The synopsis is that the airplane suffered an electrical malfunction and fire in its crew oxygen system. This ruptured the fuselage, resulting in a decompression. Because the crew oxygen system was affected, the crew's estimated time of useful consciousness was only about 20-30 seconds at 35,000 feet. 

A similar fire had occurred in an Egypt Air B-777 in July 2011—its serial number was only 3 numbers different than the B-777 flown by MH370. That fire occurred on the ground, was quickly attended to by the crew,  yet burned a significant hole in the right side fuselage, and completely damaged the cockpit.
The theory supposes that the crew, in an attempt to fight the fire by removing electrical power to the highest degree possible, shut down the aircraft's generators (two overhead switches) which resulted in the apparent failure of the transponder. 

In the Egypt Air case, the accident report states that "the fire was easily seen from the outside."  In the MH370 case, Mike McKay, a New Zealander working on the Songa Mercur oil drilling platform in the South China Sea observed an aircraft at high altitude burning in one piece about 50-70 km from his location, shortly after MH370's first officer radioed his last message.  His letter is here

There were very few radar hits on MH 370 after ATC radar  contact was lost with the loss of the transponder. The theorized flight path from the few contacts it had with military radar indicate the airplane was heading westbound until it intercepted an arc constructed by analysis of data from an INMARSAT satellite that had brief hourly contact with the aircraft. That turn of over 90° is perplexing and generally unexplained, but probably would have had to have some type of crew action to make it happen.

In Mr Yeh's theory, that unexplained turn didn't occur at all and the airplane continued on its westerly heading.  
The satellite contact data has never been used to locate an aircraft before, and an analysis of that communication record yielded patterns of doppler shifts and latencies that were used to plot a line of positions for those hourly transmissions. Some assumptions had to be made in those calculations. One of them assumed that the time it took to process the signal was the same throughout the flight. 

Mr Yeh, finds that those same signal processing delays can occur by flying closer to the satellite's position over the earth—which a westbound flight would have done. He states:
 The theory that MH370 crashed off the coast of western Australia rests entirely on a single premise: that the Inmarsat analysts correctly accounted for signal processing delays that would normally contribute to the total ping delay of any signal received from MH370. However, as I explained in my article, the procedure used by the Inmarsat analysts is unable to account for the increase in signal processing delay that would be expected if indeed MH370 traveled west toward the Maldives and toward a position 'under' the Inmarsat-3 F1 satellite. The Inmarsat analysts measured the signal processing delay prior to MH370's departure from Kuala Lumpur; this procedure is inherently unable to account for any increase in the signal processing delay after takeoff.

Also, at about the estimated time of fuel exhaustion, residents of Kudahuvadhoo in Dhaalu atoll in the Maldives reportedly saw a low-flying white aircraft with red stripes flying north to south-east around 6:15 am local time on the morning of March 8, flying so low that the aircraft doors were clearly visible. No regular flights fly over the atoll at that hour. Dhaalu atoll is 1900 miles due west of Malaysia, on the last known flight path of MH370. The markings on the unknown aircraft are consistent with the markings on MH370.

Finally, the acoustic signal detected by two sets of underwater listening devices off of the coast of western Australia matches the hypothesis that MH370 crashed near Dhaalu Atoll, but is inconsistent with the hypothesis that the aircraft crashed off the western coast of Australia. Researchers used the information from the two devices to "triangulate" the distance to the source of the signal and eliminated the possibility that the source was located off of the coast of western Australia.

The sea west of the Maldives is extremely deep, like the Austrailian search areas, often 12,000 feet or more. The area is remote. Black box locator beacons (pingers) are long expired, any floating debris will be far from a crash site with the prevailing current flowing west toward Africa.

So, what's to be done? 
Mr Yeh states:
The analysis that I offer suggests that search efforts should be redirected to the area southeast of Dhaalu Atoll in the Maldives. I suggest that the towed underwater sonar device be used to sweep this area in an effort to locate debris that presumably sank to the ocean floor. While some debris may have remained afloat and may eventually wash ashore on the east coast of Africa, the aircraft is a metal structure and, therefore, most of it would have sunk to the bottom of the ocean in the vicinity of the crash location, just as much of the debris from Air France 447 and the debris from TWA 800 was eventually located on the ocean floor.

How can we know that this is the correct location? I cannot offer a guarantee that this is the correct location. However, there is an array of seemingly odd information that appears to only make sense if my hypotheses are correct. I believe that I have assembled the known facts into a coherent explanation of those facts. It is an educated guess, but I believe that it is a better guess than has previously been offered.

As the report is refined and updated, the current version of Read Stuart Yeh's report is always posted here:
http://works.bepress.com/cgi/viewcontent.cgi?article=1018&context=stuart_yeh

All the documents cited in the article can also be found and downloaded from this Box.com site:
https://app.box.com/s/jbfrbkpwcuq7uf8apjxp 

Saturday, May 31, 2014

Five years ago AF447 crashed, lessons learned, progress still needed.

It was five years ago, the night of May 31st, 2009 when Air France flight 447 crashed in the Atlantic Ocean on its way from Rio de Janerio, Brazil to Paris, France.

The crew flew into a line of thunderstorms in the intertropical convergence zone north of Brazil with little effort to deviate around it. That storm has been estimated to top over 50,000 feet.
In an occurrence not anticipated by the design engineers, the aircraft's three pitot tubes—the speed measuring sensors—clogged, causing the loss of accurate airspeed indications. While the odds of simultaneous failure of three independent systems is measured in the billions, there was no actual system failure. Instead, all three systems were subjected to the same adverse environmental conditions.  Even though the design exceeded the regulatory requirements by a wide margin, the actual conditions exceeded those anticipated by the regulations. Those conditions exceeded the pitot tubes' capacity to deal with the obstruction for about 40 seconds. Those seconds were enough time to put the airplane in serious trouble.

The loss of airspeed indications caused the autopilot, flight director, and autothrust to disconnect—as they require airspeed information to operate. The airplane's handling characteristics also changed as the high-tech airplane's fly-by-wire flight controls degraded from its Normal to Alternate law. Lost also were the airplane's automatic protections built into Normal law, including stall protection. The pilot operating the controls struggled to maintain aircraft control, and in the process climbed nearly 3000 feet losing over 100 knots of critical airspeed. The airplane's stall warning went off for over 50 seconds, but the pilots were poorly trained on how to handle such an event at such a high altitude. They responded by applying full power, as their low-altitude stall training had taught them, but little additional power was available and it did no good. The airplane became deeply stalled. The airplane shook from the poor airflow around its wings, the nose pitched up and down as the airplane rolled side to side as the airplane descended at vertical speeds approaching 20,000 feet per minute. The rapid descent took it into the ocean in less than 3½ minutes.

Even with the nose pitched up 16° the airplane's trajectory was a 45° angle downward. It hit the water going down as fast as it was going forward—123 mph. While 123 mph doesn't sound fast for a jet airplane, imagine an aluminum car hitting a solid concrete wall at that speed you get an idea of the force of the impact. All 228 people on board we instantly killed in the violent impact that completely destroyed the airplane, spreading a cloud of debris over a 13 mile long path on the ocean floor 12,000 feet below.

During the event maintenance messages from the airplane relayed the resulting cascade of error messages to Air France, leaving little doubt when and where the airplane had impacted the water, with strong clues as to why. Floating debris and fifty of the victims were recovered from the surface starting five days after the crash.

Two years and four undersea searches later, sonar scanning vehicles found the debris field on a flat area on the bottom surrounded by mountainous terrain. Had the debris settled in the mountains, it may never have been found.

Studying aircraft accidents, the factors that lead to them and learning from those findings is one reason that air travel is the safest mode of transportation today. That doesn't just happen by itself. A lot of people work very hard every day to make that a reality.

There were many lessons to be learned from the crash of Air France 447. Many have to do with pilots being trained and able to hand fly the airplane at any time without reliance on automatic systems and with partial instrument failure. Those same automatic systems aid in the safe and efficient operation of the airplane nearly 100% of the time in daily operation, but constant reliance on them can weaken a pilot's skills. Those skills can be essential when failures occur.

Changes have been made in the years since the accident's findings. The FAA has encouraged airline pilots to maintain proficiency in hand flying. Aircraft manufacturers have adjusted their stall recovery techniques. Airlines have improved training in high altitude recoveries and manual flying, and emphasized techniques for proper control of the airplane when faced with instrument failure.

But more can be done, and progress needs to continue. More robust autoflight systems can be designed that are tolerant of data loss, perhaps switching to an attitude-hold mode until the pilot can take over when workload permits instead of simply disengaging when things start to go wrong. Better training in upset recovery techniques using actual aircraft, and reinforced with simulator training . These programs are available, but not part of any major airline's standard curriculum.

Air France 447 was the first airliner lost at sea for decades. Out of its investigation came recommendations including the triggering  of transmissions indicating the airplane's location as soon as an emergency condition is detected on board and to extend the transmission life of underwater locator beacons from 30 to 90 days. Those systems are only now being developed. Both of those recommendations certainly ring true in the case of Malaysia flight 370 whose location, after months of searching is still a mystery.