Hacker News new | ask | show | jobs
by userbinator 544 days ago
instead of being on by default during the flight but i assume the current procedure exists for a reason.

Suppose it fails the other way --- pilot needs oxygen but the valve refuses to open. I think they definitely did a risk analysis and came up with the current design, reasoning that the increased risk of an oxygen fire would be less than the risk of a pilot suffocating if the system failed the other way.