Hacker News new | ask | show | jobs
by pdonis 1034 days ago
I don't think the GP was asking about changing heading instead of altitude; I think they were asking about changing heading in addition to altitude. Sure, the altitude change is going to achieve better separation faster, but a heading change in addition to the altitude change will act as a backup in case for some reason something goes wrong with the altitude change.

In this particular accident, it seems like commanding a heading change (to the right for the Tupolev and to the left for the DHL flight) in addition to an altitude change would have avoided the collision.

2 comments

This is fallacious reasoning. "X would have prevented Y, and Y was a bad outcome, therefore we must do X." You can plug in many things for X which reveal this to be an unsound argument.

Yes, intuitively being able to change headings seems like a good thing except that 1) it adds expense and complexity, and thus produces new potential points of failure and 2) it's not necessary. The problem was not that an altitude change was insufficient, the problem was that two sources of command authority (TCAS and ATC) contradicted each other. The solution is simply to add a new rule: if TCAS and ATC disagree, go with TCAS.

> This is fallacious reasoning. "X would have prevented Y, and Y was a bad outcome, therefore we must do X."

I never said we must do X. It's a suggestion which might or might not be worth considering. From the article it appears that the TCAS system was designed with the assumption that pilots would always immediately do what it said. This accident obviously violated that assumption. The question is how best to respond to that as far as the design of TCAS is concerned; the eventual tradeoffs might lead to the answer "do nothing to TCAS" but that doesn't mean it isn't worth considering possible changes.

> it adds expense and complexity

Yes, this is always a tradeoff with safety systems. But the heading change rule would be even simpler than the altitude change rule (which requires negotiation of possible conflicts between the TCAS systems in the two aircraft): the heading rule is simply "turn away from the other aircraft", i.e., if the other aircraft is to your right, turn left, if it's to your left, turn right. That seems like logic that could be implemented, checked, and verified fairly easily, if it were decided to do so.

> it's not necessary

When it comes to safety systems, "necessary" is always a judgment call. Yes, cases in which adding a heading change to TCAS instructions would be helpful are rare (like this crash was). But all aircraft accidents are rare. No rule gets followed exactly as it's given 100% of the time. Taking that into account when deciding on what safety systems to implement is perfectly justified.

> The solution is simply to add a new rule: if TCAS and ATC disagree, go with TCAS.

Or more precisely, to explicitly make that a rule worldwide, instead of just in the US as it was before this accident.

Yes, this is the response the system settled on, but this, too, involves a tradeoff: this rule has to be implemented by humans, and humans are less reliable than automated systems. The international air safety system evidently decided that humans were reliable enough in this case for this rule to be sufficient; but that doesn't mean they didn't make a tradeoff.

> I think they were asking about changing heading in addition to altitude

Heading and altitude are NOT independent. When an aircraft makes a turn, it banks (it's not like a flat turn you make in your car), and inevitably loses some speed because of extra drag, and some altitude because of loss of lift.

It can be compensated by increasing the engine power, but then you really need to predict that as well.

> Heading and altitude are NOT independent.

Yes, I know how planes make turns. It is valid to point out that a TCAS instruction that included a heading change would, at least for the plane whose TCAS instruction was to increase altitude, also have to include an engine power increase, which might not be feasible depending on the altitude (cruise power might already be pretty close to max power). Or else make the turn a very slow one, which would decrease its usefulness in collision avoidance.

Also that bank means you have a wing tilted up and a wing tilted down, increasing the vertical height of the plane at a time you’re trying to increase vertical separation.

Doing both reeks to me of a solution in search of a problem that’s going to end up the target of some later NTSB report when you hit some weird edge case where the dynamics and dimensions of the two planes aren’t fully accounted for.

> bank means you have a wing tilted up and a wing tilted down, increasing the vertical height of the plane at a time you’re trying to increase vertical separation

Yes, but it's also increasing horizontal separation (from a predicted value of zero), which might still be a reasonable tradeoff to consider.