Boeing caused plane crash, air crew blamed

This 20 January 2020 video says about itself:

Boeing used to represent the gold standard in aircraft safety, but critics say it has lost its way in the pursuit of profit. We tell the story of two fatal crashes involving the 737 Max 8 jet: the Ethiopian Airlines crash last March that killed 157 people and the Lion Air disaster in October 2018 that killed all 189 on board. We explore why experts say those disasters were preventable. The story is told by pilots, legislators, Boeing insiders and the families of the people killed. But the biggest revelations come from Boeing itself, through internal messages and emails showing Boeing officials knew about the potential for a catastrophe well before the two crashes occurred.

From the New York Times in the USA:

How Boeing’s Responsibility in a Deadly Crash ‘Got Buried’

By Chris Hamby

Jan. 20, 2020, 6:00 a.m. ET

After a Boeing 737 crashed near Amsterdam more than a decade ago, the Dutch investigators focused blame on the pilots for failing to react properly when an automated system malfunctioned and caused the plane to plummet into a field, killing nine people.

The fault was hardly the crew’s alone, however. Decisions by Boeing, including risky design choices and faulty safety assessments, also contributed to the accident on the Turkish Airlines flight. But the Dutch Safety Board either excluded or played down criticisms of the manufacturer in its final report after pushback from a team of Americans that included Boeing and federal safety officials, documents and interviews show.

The crash, in February 2009, involved a predecessor to Boeing’s 737 Max, the plane that was grounded last year after accidents in Indonesia and Ethiopia killed 346 people and hurled the company into the worst crisis in its history.

A review by The New York Times of evidence from the 2009 accident, some of it previously confidential, reveals striking parallels with the recent crashes — and resistance by the team of Americans to a full airing of findings that later proved relevant to the Max.

In the 2009 and Max accidents, for example, the failure of a single sensor caused systems to misfire, with catastrophic results, and Boeing had not provided pilots with information that could have helped them react to the malfunction. The earlier accident “represents such a sentinel event that was never taken seriously,” said Sidney Dekker, an aviation safety expert who was commissioned by the Dutch Safety Board to analyze the crash.

The study was never made public. The Dutch board backed away from plans to publish it, according to Dr. Dekker and another person with knowledge of its handling. …

At the same time, the Dutch board deleted or amended findings in its own accident report about issues with the plane when the same American team weighed in. The board also inserted statements, some nearly verbatim and without attribution, written by the Americans, who said that certain pilot errors had not been “properly emphasized.”

The muted criticism of Boeing after the 2009 accident fits within a broader pattern, brought to light since the Max tragedies, of the company benefiting from a light-touch approach by safety officials.

References to Dr. Dekker’s findings in the final report were brief, not clearly written and not sufficiently highlighted, according to multiple aviation safety experts with experience in crash investigations who read both documents.

One of them, David Woods, a professor at the Ohio State University who has served as a technical adviser to the Federal Aviation Administration, said the Turkish Airlines crash “should have woken everybody up.”

Some of the parallels between that accident and the more recent ones are particularly noteworthy. Boeing’s design decisions on both the Max and the plane involved in the 2009 crash — the 737 NG, or Next Generation — allowed a powerful computer command to be triggered by a single faulty sensor, even though each plane was equipped with two sensors, as Bloomberg reported last year. In the two Max accidents, a sensor measuring the plane’s angle to the wind prompted a flight control computer to push its nose down after takeoff; on the Turkish Airlines flight, an altitude sensor caused a different computer to cut the plane’s speed just before landing.

Boeing had determined before 2009 that if the sensor malfunctioned, the crew would quickly recognize the problem and prevent the plane from stalling — much the same assumption about pilot behavior made with the Max.

And as with the more recent crashes, Boeing had not included information in the NG operations manual that could have helped the pilots respond when the sensor failed.

Even a fix now proposed for the Max has similarities with the past: After the crash near Amsterdam, the F.A.A. required airlines to install a software update for the NG that compared data from the plane’s two sensors, rather than relying on just one. The software change Boeing has developed for the Max also compares data from two sensors.

Critically, in the case of the NG, Boeing had already developed the software fix well before the Turkish Airlines crash, including it on new planes starting in 2006 and offering it as an optional update on hundreds of other aircraft. But for some older jets, including the one that crashed near Amsterdam, the update wouldn’t work, and Boeing did not develop a compatible version until after the accident.

The Dutch investigators deemed it “remarkable” that Boeing left airlines without an option to obtain the safeguard for some older planes. But in reviewing the draft accident report, the Americans objected to the statement, according to the final version’s appendix, writing that a software modification had been unnecessary because “no unacceptable risk had been identified.” GE Aviation, which had bought the company that made the computers for the older jets, also suggested deleting or changing the sentence.

Dr. Woods, who was Dr. Dekker’s Ph.D. adviser, said the decision to exclude or underplay the study’s principal findings enabled Boeing and its American regulators to carry out “the narrowest possible changes.”

The problem with the single sensor, he said, should have dissuaded Boeing from using a similar design in the Max. Instead, “the issue got buried.”

Boeing declined to address detailed questions from The Times. …

At the request of the American team led by the N.T.S.B., the Dutch added comments that further emphasized the pilots’ culpability. The final report, for example, included a new statement that scolded the captain, saying he could have used the situation to teach the first officer a “lesson” on following protocol. …

The Dekker study found that another decision by Boeing — to leave important information out of the operations manual — had also hampered the Turkish Airlines pilots. …

What the pilots couldn’t have known was that the computer controlling the engine thrust always relied on the left sensor, even when the controls on the right were flying the plane. That critical information was nowhere to be found in the Boeing pilots’ manual, Dr. Dekker learned. …

“It’s really easy to blame it on the dead pilots and say it has nothing to do with our improperly designed system,” said Shawn Pruchnicki, who teaches at Ohio State and has worked on accident investigations for the Air Line Pilots Association.

See also Dutch daily De Volkskrant on this.

See also here.