Hacker News new | ask | show | jobs
by dotnet00 674 days ago
I agree, what I'm trying to emphasize is that the current software is able to undock autonomously, it isn't able to handle failures autonomously. Many people seem to be thinking that Starliner had been capable of autonomous docking/undocking and the functionality had been removed for seemingly no legitimate reason. But, if we understand that autonomous undocking is present, but autonomous error handling is not, the engineering reason becomes obvious, that when you have a crew available, they're the better option for error handling than the software.

I'm not trying to make the excuse that's going around about how they don't need to change the software, just the configuration. It's absurd that they need 4 weeks for this change when switching from manual to automatic fault handling should be a basic safety contingency (it'd be necessary if the crew had become incapacitated for any reason).
1 comments
bunderbunder 673 days ago
I'm still not convinced this is sound engineering? Shipping two different versions of the software, instead of having some sort of switch you can flip, seems sub-optimal precisely because it increases your exposure to risks like this where you're less able to adapt to unforeseen circumstances because as soon as you wander off the happy path you're in completely uncharted waters. This feels more to me like yet another example of Boeing cutting corners without the benefit of a full understanding of the implications of the decision because their left, right, top, bottom, front, back, charm and strange hands all have no idea what the others are doing.
link
skissane 673 days ago
> Shipping two different versions of the software, instead of having some sort of switch you can flip, seems sub-optimal precisely

Someone on X was saying that NASA's definition of "flight software" includes config files. So it isn't actually the code that needs to be changed, just the config.

I think the need for 4 weeks for a config change is the requirement to test the new config in a simulator (against a long list of scenarios) and have it reviewed and approved by various engineering teams, both Boeing and NASA. Plus likely some margin added.

link