[danjayh]

The solution here is going to be to have MCAS automatically disengage when the two sensors disagree, which will change the stall behavior automatically. Airbus has the same problem, and so will any manufacturer that introduces computer augmented flight characteristics in their aircraft. If a component of the computerized flight control system fails, the flight characteristics of the aircraft will change. In fact, Airbus has had a similar crash: in that instance, a pilot was pulling full back on the stick thinking that the aircraft was unstallable, but one of the sensors (airspeed, maybe? can't remember) was disabled (by icing, if I remember) and the aircraft had changed to a different flight control law that didn't have the anti-stall function. Splash.

Eh, I googled it for you people. It was air france 447: https://en.wikipedia.org/wiki/Air_France_Flight_447

[lmm]

I don't think the AF crash was a case of that pilot "thinking it was unstallable" so much as not thinking, in the mental state he was in at that point. Even if the plane were "unstallable", pulling full back on the stick like that would not have been the right course.