Airbus A380 flew for 300 hours with meter-long tool left inside engine | Hacker News Reader

Airbus A380 flew for 300 hours with meter-long tool left inside engine

theregister.com

22 pointsrntn10 comments

    Qantas personnel in Sydney even requested removal of the report as it was causing problems – in response, the tool's status was downgraded.

Remind me never to fly Qantas.

Named worlds safest airline 2023 and many other years. No 2 in 2024 to Air New Zealand.

Could it be because they remove and downgrade reports?

I know very little about aviation. Can someone explain if there is a tool tracking system, or what measures mechanics use to track tools used in something like that? This sounds like an edge case, but also seems very preventable if all tools are tracked. Like they try to do with humans in surgery.

As the article says: yes.

This is the type of edge case that will always eventually arise after enough hours. We have had nukes nearly go off after 10 fail safes were tripped.

A medical issue followed by lack of sufficient follow up should not happen, but they statistically will eventually.

First thought: if I left bad or useless code in a commit, how many levels of verification would it need to pass to make it to production?

my thought was that if you get an alert that a key system is flapping in production, your first thought shouldn't be to squelch the alert.

That's partly where I was going: performative vs effective processes.

Otoh, the fact that there's a clear audit log that this happened, even if it wasn't effectively handled at the time, is quite impressive.

And finding a lost tool is a toughy -- how do you avoid an infinite loop, looking for something that really did walk off the site and/or end up in a trash can? You can't prove the lack of something.

For code running in a commercial jet engine, so usually DAL A or DAL B? You should be caught by the first level of verification —- can’t even get past code review, because you don’t have a requirement to tag to trace the useless code back to. If that process failed (and any can), you have the whole climb up the right side of the V. And in the end, if the code is not /so/ useless as to be removed by the compiler, the final check that all generated bytes have traceability should catch it.

Reply on news.ycombinator.com