Maybe it was the 100% fly by wire that made me think of this, but I just listened to "Bit flip" on Radiolab. Apparently the Toyota stuck accelerator issue was due to random bit flipping caused by cosmic radiation. At least that failure mode could be reproduced by simulating/inducing a bit flip in the speed control program. Now the system has redundancy to prevent such a problem (or make it statistically extraordinarily unlikely).
I'm sure an aircraft would have this redundancy built in, but with so much software, there's bound to be weaknesses in the code/redundancy/contingency.
|