Computer Error Grounds Japanese Flights 154
zephiros writes "Mainichi Daily News reports that a "computer glitch" in Tokyo air traffic control systems resulted in the cancellation of 203 flights this weekend. At 7am Saturday, the error "caused the names of airlines and flight numbers to disappear from radar screens." A Japan Times article suggests the problem may be related to upgrades on a system which exchanges flight plans with the Defense Agency. Makes one wonder about the integration and maintenance risks of systems like CAPPS II."
Re:Was It Linux Based? (Score:4, Insightful)
OMG... man are you brainwashed. First, as impossible as it may seem (gasp), open source software has bugs in it too. Second, even if it were open source, what million eyes would be looking at the code? I bet there isn't any source in the OSS archives that a "million eyes" have looked through. Third, you assume that the operator is an a) programmer, and b) at all familiar with the code enough to debug it and understand just what in the hell the code is doing anyway. Keep repeating your mantras fan boy, may they always give you a warm tingly feeling as you say them.
Risk Maintentance 101 (Score:4, Interesting)
Maybe I should take a trip to Japan in a few months.
Re:Risk Maintentance 101 (Score:3, Informative)
As far as risk management, had there actually been a perceived emergency due to the malfunctioning radar display system, the airports would default to an agreement with Yokota and Atsugi US airbases to provide fallback flight control facilities.
This is really a non news item. The system administrator correctly applied upgrades during non-critical operation time. (i.e. not during the main business week) The problem was identified early on and corrected pretty damned quick. This happens hundreds of times a week all over the world. Had the glitch actually halted the entire Japanese air system for a long period of time, then it would make more sense.
Why? (Score:4, Insightful)
Re:Why? (Score:4, Funny)
I just dropped a floppy from 2-in above my desk (Score:1, Offtopic)
Re:Why? (Score:5, Insightful)
To quote the article:
A Japan Times article suggests the problem may be related to upgrades on a system which exchanges flight plans with the Defense Agency.
Re:Why? (Score:3, Interesting)
Even if CAPPS is only connected to ticketing and passenger information, a bug could result in a pretty nasty transportation snarl. Suppose airlines are unable to issue boarding passes for an hour, or an unusually large number of people were flagged for screening.
For any of these total-information-awareness type systems, one has to ask "what happens when some part of the patchwork breaks?" Even the most diehard "I have nothing to hide from my government" type understands that multi-hour flight delays are bad.
Re:Ban this evil game! (Score:1)
What does CAPPS II have to do with this? (Score:5, Insightful)
Does that seem like flaimbait to anyone else? Computers crash all the time, granted steps can be taken to ensure redundancy, but this is nothing new. This problem has nothing to do with the CAPPS II system other than the fact that they are both computerized systems, I'm not trying to defend CAPPS II, I just don't think that it is any way related to this this tokyo airlines problem. Computers crash, it's a fact of life, the real question here, is why weren't there multiple redundancies in place for such a mission critical application.
Re:What does CAPPS II have to do with this? (Score:5, Insightful)
Been listening to Microsoft too much lately, eh? It shouldn't be something we take for granted.
Re:What does CAPPS II have to do with this? (Score:3, Insightful)
What about hardware failures? Even the best code still has bugs in it, and the potential to fail
Re:What does CAPPS II have to do with this? (Score:2, Funny)
I've never been able to crash helloworld.c.
Re:What does CAPPS II have to do with this? (Score:2)
Uh, I wouldn't refer to helloworld.c as "best"... I think the grandparent was refering to the fact that larger (that is, more complex) programs are more likely to have more bugs in them.
Re:What does CAPPS II have to do with this? (Score:1)
Seeing as we're still in a young industry, it's nice to think that over the coming years things *should* get better, on the hardware side at least.
The problem with software development is that it's so damn easy to ship a product, let hundreds (thousands? tens of thousands?) of users test the product for you, then release appropriate bug fixes. People don't design a new bridge and let thousands of people try it out before declaring it safe, nor when building new buildings, and usually not even when designing a new microprocessor, so why are we still getting away with it in software engineering?
Presumably because Microsoft has let the general public get used to this as "the way it is"
Re:What does CAPPS II have to do with this? (Score:2)
In the case of some proprietary software either charging for the bug fixes or intermingling them with new "features" (which may very well contain their own bugs). That's assuming they don't insist on playing "it's a feature not a bug".
People don't design a new bridge and let thousands of people try it out before declaring it safe,
There is a story that in the USSR once a bridge was completed the designers and archiects had to stand underneath whilst the Red Army drove a column of tanks across.
Model of a Slashdot Personality (Score:1, Funny)
Gilbert and Sullivan...
Model of a Slashdot Personality
I am the very model of a Slashdot personality.
I intersperse obscenity with tedious banality.
Addresses I have plenty of, both genuine and ghosted too,
On all the countless topics that my drivel is cross-posted to.
Your bandwidth I will fritter with my whining and my sniveling,
And you're the one who pays the bill, downloading all my driveling.
My enemies are numerous, and no-one would be blaming you
For cracking my head open after I've been rudely flaming you.
I hate to lose an argument (by now I should be used to it).
I wouldn't know a valid point if I was introduced to it.
My learning is extensive but consists of mindless trivia,
Designed to fan my ego, which is larger than Bolivia.
The comments that I vomit forth, disguised as jest and drollery,
Are really just an exercise in unremitting trollery.
I say I'm frank and forthright, but that's merely lies and vanity,
The gibberings of one who's at the limits of his sanity.
If only I could get a life, as many people tell me to;
If only Mom could find a circus freak-show she could sell me to;
If I go off to Zanzibar to paint the local scenery;
If I lose all my fingers in a mishap with machinery;
If I survive to twenty, which is somewhat problematical;
If what I post was more mature, or slightly more grammatical;
If I could learn to spell a bit, and maybe even punctuate;
Would I still be the loathsome and objectionable punk you hate?
But while I have this tiresome urge to prance around and show my face,
It simply isn't safe for normal people here in cyberspace.
To stick me in Old Sparky and turn on the electricity
Would be a fitting punishment for my egocentricity.
I always have the last word; so, with uttermost finality,
That's all from me, the model of a Slashdot personality.
THIS IS YOU
Re:What does CAPPS II have to do with this? (Score:1)
Brake systems in cars don't fail safe, yet they do on some trains. This isn't a fault of braking systems, just the application of the system in one vehicle.
Everything fails. (Score:3, Insightful)
No, computers shouldnt crash. But they will eventualy fail, just like everything else will.
Re:What does CAPPS II have to do with this? (Score:1)
Do YOU want the ticket agent behind the counter to have access to a network that is interconnected with air traffic control? Neither do I.
Re:What does CAPPS II have to do with this? (Score:1)
Re:What does CAPPS II have to do with this? (Score:2)
To quote the article:
A Japan Times article suggests the problem may be related to upgrades on a system which exchanges flight plans with the Defense Agency.
Re:What does CAPPS II have to do with this? (Score:2, Funny)
"Uh, folks, we're experiencing some moderate Godzilla-related turbulence at this time, so I'm going to go ahead and ask you to put your seatbelts back on. When we get to 35 thousand feet, he usually does let go, so from there on out, all we have to worry about is Mothra, and, uh, we do have reports he's tied up with Gamera and Rodan at the present time. Thank you very much."
Don't believe the lies!
Re:What does CAPPS II have to do with this? (Score:1)
Such news articles should say "hardware failure" if it is a hardware failure, if a computer crashes due to software it should say a bug in the software caused the problem.
Re:What does CAPPS II have to do with this? (Score:1)
Well for one, who said some computer crashed? From what I understood from the story. The system had a glitch after a software upgrade. So it seems the new software is at fault. That's not the same as some hardware failure. How do you fight a sysematic error in software with a redundancy?
The trick with software upgrades is to do some testing in as-real-as-possible environment before going live.
Re:What does CAPPS II have to do with this? (Score:2)
I'm guessing that the computers didn't crash. The description sounds more like software bugs. Still... one would think that for a system like this they would have done the upgrades on a duplicate server, and only switched over to them after all checks had been passed.
(Perhaps the only thing CAPPS II has to do with this is that it takes a currenly extrememly complex system and makes it more complex without sufficient testing. That would be enough similarity, but perhaps the comparison should have been more explicit.)
Computers are just too fragile? (Score:2, Insightful)
Lol. Depends how they're set up. I'd say you can get them fairly robust. Clustered, load balanced, hot-swap, failover, etc.
Re:Computers are just too fragile? (Score:1)
Re:Computers are just too fragile? (Score:2, Funny)
Re:Computers are just too fragile? (Score:2)
From the article: Simultaneous fialure of two independent systems that are designed to tolerate failure doesn't sound like a hardware issue to me. I could be wrong, but I'm more than willing to bet it's an "oops!" situation, albiet somewhat more serious than most.
too suspicious (Score:1)
Note to anyone, yes, this is pure speculation, I admit it out loud. My default nature that I am completelycomfortable with is whenever strange occurrences happen with "government"- anyone's government - I am suspicious of it as being more than incompetence or actual random accidents. Too many events over the years that at first looked one way turned out to be completely different, they were either delibarately done, or somehow they were collateral damage from something bigger that needed to occur for some agenda, or allowed to happen, again, for a higher level agenda not readily apparent at the time.
people are more fragile (Score:1)
trouble is computers are designed by people.
air traffic control and missile guidance are two systems I'd never ever work on.
I'd like to program all the missiles to fly to the sun, but the consequences of a bug in the system are just too scary for me to contemplate.
2 things I want to know... (Score:1, Interesting)
2) Whose bright idea was it to do a "systems upgrade" while there were large, flying metal objects carrying many people still in the air?!?! Wouldn't you do a test run, install it on a backup system, or one that's not systems-critical?
This just makes no sense....someone explain it to me?
Re:2 things I want to know... (Score:1)
Re:2 things I want to know... (Score:5, Informative)
Read the article. It says that just the airline name and flightnumber tags printed beside the radar blips vanished. The radar worked just fine.
> 2) Whose bright idea was it to do a "systems upgrade" while there were large, flying metal objects carrying many people still in the air?!?!
Read the article. The change was made early in the morning on a weekend. When would you suggest?
> Wouldn't you do a test run, install it on a backup system, or one that's not systems-critical?
The article (did you read it?) hints that might have been a networking problem when they integrated the military database with the civilian database. A backup system is a good first start, but isn't always the same as the production system. Network problems can't always be perfectly tested or simulated.
Re:2 things I want to know... (Score:2)
re: 2) Let's see, early morning on a weekend. Weekends are known to be busy times for airports and morning is when they tend to fly. When would I recommend? Maybe a Thursday? Middle of the night?
re: 3) Bullshit. The backup system should be IDENTICAL to the production system, otherwise it's a worthless backup. Especially in something as critical as ATC. But I will concede the problems with testing network problems being hard to simulate.
Re:2 things I want to know... (Score:1)
Well, it depends what the purpose of the backup is. If the backup is perfectly identical to the main system, that means when something kills the mainsystem,(say a bad string of data is being passwed around the network) you switch to the backup, and it has the same flaw,so it dies too! Thats why its sometimes nice to have a backup system that uses slightly different code/hardware.
Re:2 things I want to know... (Score:1)
Midnight: Upgrade to a system that tracks planes in the air. If there are no planes in the air, how can you test it? The upgrade was most likely done around midnight, but didn't see any signifigant use until the heavy part of the travelling day. The article indicated it was due to an interface with a defense system. JIEITAI (Japanese military) usually hit the office between 7 and 8, which was when the delays started. I could be wrong about the work time for the folks in Tokyo, but the two units I've worked with in Okinawa and Hokkaido were usually rolling in to hit their first cup of coffee just after 7.
Despite the lack of information in the article, passengers were not stranded. If their flight was cancelled, they were re-booked and most likely in the air within the hour of their original scheduled flight. Japanese air systems are extremely efficient, although I have no clue how they could be making any money.
Re:2 things I want to know... (Score:3, Insightful)
Actually, there are planes in the air most hours of the day. There is no time when planes aren't flying.
The best time (when there are fewest planes) may be at night. But that's just the time when the people actually doing the upgrade are going to be half asleep.
"Wouldn't you do a test run, install it on a backup system, or one that's not systems-critical?"
I'm sure they did. But the live system is bound to be different in some small way
- maybe a different (more powerful) system, which might cause different timing issues;
- maybe a different disk configuration, perhaps with a file system running out of space (e.g. more online logs);
- maybe the live database (if any) is different to that on the backup system.
These things can easily go wrong. In my experience, it's vital to ensure you have a way of getting some sort of system operational if you do screw up. Maybe ensure a backup system is capable of running live first, then attempt the update of the live system, and if it goes wrong, you have a backup system capable of operating until you can correct the screw-up.
Re:2 things I want to know... (Score:1)
Except on 9/11. In fact, scientists used this to determine how having no jet contrails in the air affected the daily high temperatures.
Re:2 things I want to know... (Score:1)
Big airports DO have ground radar... they like to keep track of everything either in the air or on the ground. I would imagine they use different displays for each radar given the differences of scale, but the data is probably merged. A plane attempted to take off in Taiwan in a storm in low visibility, ended up on the wrong runway and people died. The lack of ASDA radar [channelnewsasia.com] meant the tower couldn't track their ground path and spot the pilot error.
2) Whose bright idea was it to do a "systems upgrade" while there were large, flying metal objects carrying many people still in the air?!?! Wouldn't you do a test run, install it on a backup system, or one that's not systems-critical?
I would expect a control tower's computer systems to have the tightest change control procedures possible. Unforeseen situations can occur no matter how careful you are. What matters is what procedures you have in place to deal with it when everything goes pear-shaped. Given no planes fall-down-go-boom I think their procedures worked out quite nicely. There's nothing in the article to say the "glitch" occurred at the time of upgrade or whether the upgrade was done earlier and the computer waited until 7am to stick it's finger in it's ear....
A Control Tower's ability to identify planes isn't magically connected to their ability to fly... and I think they're fairly good at teaching pilots how not to bump into things...
Re:2 things I want to know... (Score:2)
They still had working primary RADAR and radios. Aircraft on the ground are managed by controllers at the airport itself.
2) Whose bright idea was it to do a "systems upgrade" while there were large, flying metal objects carrying many people still in the air?!?!
They did it on a Saturday.
redundancy (Score:5, Insightful)
Am I the only one wondering why there was no redundancy. As in effective. One would think something as important as airtraffic control should have several layers of complete redundancy. As in if a control tower has say a catastrophic failure there is another a.) civilian b.) military control center able to hand off instructions. which would include all flight information. including passengers, cargo flight log, flight plan everything.
Re:redundancy (Score:2, Interesting)
Am I the only one wondering why there was no redundancy.
Typically there are redundant systems as well as manual processes - in Sydney Australia there's even a redundant tower, which is used if the main tower stops working (e.g. major power problems).
Bean Counters (Score:4, Insightful)
Re:Bean Counters (Score:2)
Perhaps in this case the separate building and separate power would be excessive. But
(Perhaps they did, and figured out that it would cost them more to notify their customers than to risk just suddenly closing the airport.)
Re:Bean Counters (Score:2)
The problem with this situation is that there is a significant period of time in which the smallest hiccup can bring the whole aviation system back to the stone age because of the lack of redundancy. There have also been (unfortunately numerous) occasions where latent software defects were not detected until after the second side had been upgraded.
The need for quality control at the design and coding stages cannot be overstated, as it's almost impossible to do live load testing on these systems before they are shipped to the facilities. Sure, the developers can pipe in recorded radar traffic, etc., but nothing can simulate the pseudo-random reality-based pounding of a hundred controllers on the keyboards.
From my experience, the biggest bugs to reach the operational systems are generally race conditions that weren't expose in testing due to the different operating conditions and/or the presence of debugging code that were actually masking the condition they were trying to detect.
Re:redundancy (Score:2)
From the Australian ABC [abc.net.au]
I presume they made a change to both systems, or more likely, the backup system was also connected to the military system and also choked on the data is was being fed.
Re:redundancy (Score:2)
ATC and CAPPS II are NOT connected (Score:5, Informative)
Passenger listings, airline booking systems, and related software are NOT connected to the ATC network. Since CAPPS II looks at booking data, credit card info, and related data, it would not be connected to the ATC network.
Re:ATC and CAPPS II are NOT connected (Score:2)
Anyway, the worst hassles of a functioning ATC system are long delays, holding patterns, etc, while the security system has much more troubling implications - which are obvious to anyone. So I guess, in a way, it's better that the ATC system failed, and no one got hurt, than a security failure
how do they test the system? (Score:4, Interesting)
Re:how do they test the system? (Score:2)
I don't think they do this with maintenance updates, but maybe they should consider it. Unfortunately, air traffic controllers are still rare and (not in the least) expensive.
Overheard, Call to help center (Score:1, Funny)
2. We are going to need some registration information before we get started.
3. Oh, we don't support that OS
4. Anything else, have a nice day
Anyone see the other news on this site?! (Score:4, Insightful)
Police recover rock climber's body after fatal fall
Motorcyclist dies after being hit by a truck
61-year-old jobless man fatally abuses senile mother
Dad dies of shock after son's repeated beatings
Comic questioned over hitting woman in restaurant
Death row inmate dies in prison cell
Can someone in Japan please confirm that this is a freaky, awful day, and that Japan isn't normally this bad?
Although that last one is quite ironic.
Yes, it is that bad (Score:2, Informative)
Re:Anyone see the other news on this site?! (Score:1)
Yes, I'm serious. Read your own home town newspaper if you don't believe me.
KFG
Re:Anyone see the other news on this site?! (Score:1)
Customs officers stop a 46-year-old woman at Bristol airport and find £96,000 in her hand luggage.
Operatunity winner 'floating on air'
Man, 83, charged with murder
Patients' phrasebook aids 999 crews
A future for Concorde?
South Gloucestershire council tax up 6.1%
How dull is that?
http://www.bbc.co.uk/bristol/content/news/ [bbc.co.uk]
mayhem, madness and sailor suit fetishes. (Score:1)
Strong winds strike fatal blow to do-gooder
Public servant disguised as delivery man rob mother, daughter
Osaka legislator slurs Asians
Computer cock-up continues plaguing domestic travelers
Prison death trial to see violent video images
Marine steals from cabby
Man sits by unaware as neighbor plunges to death
Jilted man busted for forcing woman to wear sailor suit
Old man slits own throat with paper cutter
Women call for sex scandal governor's resignation
Education evolves from coeducation to social equality
And the rest of the items were similarly strange. The thing is, you know how you watch the local news on television and they only seem to report items involving spectacular suffering or small fluffy animals. I think they get extra points if they can find a small fluffy animal suffering. The news items seem to be the standard fare but without the feel-good pieces that we're (that's the royal we, if you don't agree with me) used to.
Re:Anyone see the other news on this site?! (Score:2)
The explanation (Score:5, Funny)
Who needs computers? (Score:2, Funny)
ATC?It's a big tower, but that's not important now (Score:5, Funny)
Captain Oveur: Loger, Loger. What's our vector Victor?
Tower voice: Tower's ladio crearance, over!
Captain Oveur: That's Crarence Oveur! Oveur.
Tower voice: Loger.
Roger Murdock: Huh?
Tower voice: Loger, over.
Roger Murdock: Huh?
Captain Oveur: Huh?
Re:ATC?It's a big tower, but that's not important (Score:1)
IOW, a culturally insensative joke that will probably be banned or highly shameful 20 years from now and will go on your permanent record. Or is that pelmanent wecord?
Re:ATC?It's a big tower, but that's not important (Score:1)
some glitch (Score:5, Interesting)
Kind of like how Hugh Jackman can hack into the DoD from a computer he's never touched before in Swordfish.
I'm tempted to think that this was much more human error than a bonefide "computer glitch". Maybe that 54 minutes was the time it took to call in their expert, have him look at the system, and declare "Why, you must have hit F11, which toggles the flight information. Just hit it again and it comes back."
Re:some glitch (Score:1)
Re:some glitch (Score:2)
Keep in mind that they had the advantage of not being "serviced orally" while they were at it.
*ducks*
This 80's Show (Score:2, Funny)
If this was the 80's, I could say: "Their programmers are Samari trained, and if they don't work fast and accurate, they have to commit hari kari (disembowelment) in front of their peers.", and everybody would believe me. Guess I'll just have to make up shit about Islam instead.
The real reason the flights disappeared! (Score:1, Offtopic)
You have seen the Simpsons episode where they go to Japan right?!
Computer or Programmer error? (Score:5, Insightful)
I am sick of people complaining abour "computer errors" when they are at fault.
Yeah, computers don't make errors... (Score:2)
THIS is why you don't upgrade (Score:3, Interesting)
DATELINE: JAPAN (Score:5, Funny)
Computer related story about a programming error halting Air traffic control system in Japan is entered in a pre-posting queue to Slashdot.
DETAILS: Limited and not noteworthy.
REAL NEWSWORTHYNESS: Not really. No deaths reported.
DATELINE: SLASHDOT HQ
PREPOST WORD SEARCH: code runs check for Important items. - keyword search generate matches for two known hot item words [COMPUTER & JAPAN]
HENTAI AND GIANT ROBOT FACTOR?: n/a
CUTE BABE?: n/a
SEARCH FOR BIG NAMES- JOBS, ELLISON, GATES, TORVALDS, STALLMAN, CowboyNeal?: n/a
Microsoft Bashing Factor: High
PRIMARY ACTION TAKEN: Story authorizes posting of story to Slashdot
SECONDARY ACTION TAKEN: activate Inquisitors of the Holy Order of Linux, First Poster Squad IM'ed, new Sex story featuring Whicky the slashdot cat beta authorized.
STATUS REPORT: Status Quo Achieved.
RESOLUTION: Computer error found between keyboard and chair
Slashdotted (Score:5, Funny)
I'm guessing there was an article posted yesterday on Slashdot that linked directly to their system.
Y2K Bug Comparisson? (Score:2)
I know what happened! (Score:1)
Someone obviously broke the coffee cup holder right at the time the sysadmin had clicked on the 'uninstall' button of the old version.
Ah, no, wait...
Japanese software industry. (Score:2, Insightful)
Re:Japanese software industry. (Score:1)
Re:Japanese software industry. (Score:1)
Okinawa used to be a seperate kindom called the Ryukyu Kingdom. I forget the year, but Japan forcefully occupied it a while back without much effort as Okinawan people are really peaceful and laid back, thus not seeing a need for a signifigant army.
A few thoughts on redundancy. (Score:5, Informative)
First, people need to understand that no Bad Things will happen if an ATC system goes offline while planes are under it's jurisdiction. ICAO [icao.org] member countries (and most nations for that matter) have strong procedural rules in place that keep planes separated without the help of radar. This is espcially true in the enroute case. (Area control centres handle overflight and enroute traffic. Eveyone is separated by at least 1000' vertical and 3 miles horizontal at all times. The altitude restrictions and clearances that each pilot receives are chosen specifically so that in the even of loss of communications, the pilot can continue to his "clearance limit" without any problem. Well, you ask, what happens when he gets to his clearance limit and still isn't communicating with air traffic control? They hold. This is all laid our quite clearly. These rules have been around since before RADAR because thats the way it was done.
Just take a look at the RADAR coverage map of Canada (one is visible at the link above). There are lots of places that don't even HAVE radar coverage.
The old tried and true clearance and time/speed based conflict resolutions works and works well.
Secondly, and more imporatantly, there really isn't any news in this article. It's scaremongering. This happens all the time. It's an inconvenience, but rarely a saftey concern.
For those who asked about it; yes, typically a new system is run in parallel with the legacy system for a period of time (sometimes 24 months) before it is used as the primary control. Notice that the old system is live and the new system is shadowing. That way, anomalies that are found do not impact any flights.
[*flame proof underwear on*]
Is it just me, or does the press dig around for 'news' in about as diligent a manner as Slashdot?
Re:A few thoughts on redundancy. (Score:1)
Is it just me, or does the press dig around for 'news' in about as diligent a manner as Slashdot?
It's just you.
In related news: Aviation Security Expert Says Outdated Airtraffic Control System Still in Use 24 Months after Better, RADAR-Based System Deployed; Tries to Convince Unaware Public "No Bad Things Will Happen"; Canada Apologizes for Insufficient RADAR Coverage.
Re:A few thoughts on redundancy. (Score:2, Informative)
Generally they go for sensational headlines and stories (their "Wai-Wai" section is the most popular).
Re:A few thoughts on redundancy. (Score:2, Funny)
Might be time to get out the rulebook...
Re:A few thoughts on redundancy. (Score:3, Informative)
First, people need to understand that some bad things might happen if enough ATC systems go offline at once. Bad things are less likely to happen, as the poster states, if the outages occur in the enroute (my) environment, because the planes are generally farther apart than in terminal airspace. (Picky notes: enroute separation is 5 miles (not 3) OR 1000 feet--not AND--but I'm sure that was just a misstatement.) But they're not THAT far apart. This post makes it sound like any time we want to we can drop back to good old non-radar control. Well, standard separation in a non-radar environment is as high as 10 minutes flying time (longitudinally, which is to say along the same route). That's a lot more than the five miles I was using when the radar was working. The transition will be a bit tricky, and if I have to do it for any length of time, traffic will slow to a virtual standstill.
What's more, it is simply not true that aircraft clearances cover eventualities like lost communications or lost radar. This is a myth, and one that new on-the-job trainees quickly get de-programmed out of their heads. It's not possible to issue clearances that are good all the way to your clearance limit--every aircraft that departs, deviates for weather, changes destination, or even changes altitude (say, for turbulence) has the potential to screw up everybody else's "perfect" clearances. We truly don't even try to come up with such clearances. As for the idea that everybody will get to their clearance limit (actually, it's the published holding pattern for the route they're on to their clearance limit--probably that was simplified for clarity) and hold, that's great until you get the part about "until their estimated time of arrival" (original poster left that part out). Now you have planes dropping out of holding (and BTW, who assigned altitudes to make sure 6 aircraft didn't hold at the same altitude when the radios went out?), not necessarily from the bottom first, and flying to their destination airport. It's a 5-times-a-day event at hubs like Atlanta for 30+ aircraft to be scheduled over one fix in an hour--what are we gonna use for sequencing? TCAS? Common Traffic Advisory freqs? Get serious.
I'm not trying to scare anybody here. There are redundant systems (and they're pretty well-seasoned at this point anyway, so they almost never break), and ways to get hold of aircraft through company radios, and it really is a big sky. But it doesn't do anybody any good to pretend that it's not dangerous to try to sort out a major arrival rush by looking in your fish-finder and chatting with the other pilots til the controller gets back.
ATC was invented many decades ago because airplanes flew into each other without it. Those were props, flying to destinations with a tenth the volume of a modern hub. Maybe someday we'll have some cool hive-mind software that will allow the airplanes to sort everything out between themselves, and there won't be anymore ground-based controllers. (I won't see it in my career, cause I retire in less than 6 years.) Until that time, controllers and reliable control equipment will continue to be necessary for safety as well as expediency.
Re:A few thoughts on redundancy. (Score:2)
My understanding is that controllers keep manual flight strips handy just in case a computer fails without warning. They are trained in estimating where a plane will be after flying x minutes at y knots. However, this is not meant as a substitute for the full technology provided by modern ATC systems - it is basically designed to minimize the likelihood of a crash while the computer guys run like mad to get things back up.
Keep in mind that modern ATC systems inflict ulcers and heart attacks on their operators WITH all the fancy technology. Imagine having 100 planes under your control and having to keep calling them all for position updates so you can keep updating their location on a map...
If something like this happened across the entire US at once, the first thing that would happen is all aircraft on the ground would stay that way - no need to add fuel to the fire. Planes in the air would probably be directed away from busy airports as much as possible based on their fuel loads. It is simply impossible to run the JFK or LAX approach patterns without radar at the same capacity they run with it.
You could probably handle something like this without a major disaster if everyone stayed alert, but you can bet that the controllers involved are going to want to take a day off after it is all over...
Similar Story (Score:2)
here. [slashdot.jp]
.Net (Score:1)
This isn't bad at all. (Score:1)
The Good: "Flight Software Runs Smoothly In Japan"
The Bad: "Computer Error Grounds 203 Japanese Flights"
The Ugly: "Computer Error in Flight Software Causes 203 Plane Crashes"
It could have been a lot, lot worse
The Real Story??? (Score:2, Interesting)
Intelligence reports about the terrorist threat to the Hawaiian harbor bombed by the Japanese in World War II were sent to senior U.S. officials in the past two weeks and coincided with reports of the planning of a major attack by Osama bin Laden's terrorist group.
GERTZ: Terrorists aim at Pearl Harbor; Plan to hijack airliners, fly them into nuclear subs
Re:The Real Story??? (Score:2, Interesting)
Computer glitch? (Score:1)
Seems to me we are good at praising ourselves when machines do what we want, but we are quick to distance ourselves from them when they go wrong.
Re:Windows? (Score:4, Funny)
Re:Windows? (Score:1)
Pedantic Bastard to the rescue!!! (Score:2)
Re:This is wonderfil news for opensource! (Score:2, Funny)
Re:This is wonderfil news for opensource! (Score:1)
Oh gosh. If you guys want to correct each other, make sure you get it right.
<checks>
Linus Torvalds