I'd go further.
Use of software to make a plane airworthy when it isn't natively airworthy is a problem. Civilian aircraft should have a different standard than fighter aircraft: one that allows graceful degradation under failure.
Use of software to make a plane airworthy when it isn't natively airworthy is a problem. Civilian aircraft should have a different standard than fighter aircraft: one that allows graceful degradation under failure.
Having a second angle of attack sensor on the Boeing 737 MAX (which is critical to aircraft safety) be an extra cost option is unconscionable.
See https://pdfs.semanticscholar.org/d4ac/17fcc0db3396a3219785bd...
It's a question of what design choices you make. For instance Boeing only has three in its comparable 777 fly by wire system.