On Sunday, Ethiopia's transport minister announced that information recovered from flight data recorders aboard the ill-fated Ethiopian Airlines Flight 302 revealed "clear similarities" to the data from the crash of Lion Air Flight 610 off Indonesia last October. And analysis of the wreckage indicated that the aircraft's control surfaces had put the Ethiopian Airlines Boeing 737 MAX 8 into a dive just before it crashed, killing all aboard.
While the investigation is still underway, the flight data increases the focus on Boeing's Maneuvering Characteristics Augmentation System (MCAS) flight software—software developed to help manage the shifted handling characteristics of the 737 MAX aircraft from other 737s. And that software, it turns out, was originally presented to the Federal Aviation Administration as much less risky than it actually was, which limited FAA oversight.
Now the Transportation Department and Justice Department have launched a new investigation into how Boeing got the initial safety certification for the 737 MAX from the FAA two years ago.
The Seattle Times reports that Boeing may have undersold the safety impact of the MCAS system during its 2015 safety certification review. Engineers who worked on the program told the Times' Dominic Gates that the safety analysis of MCAS presented to the FAA understated the magnitude of control adjustments the software could make. It also failed to take into account that, unlike previous automatic stabilizer trim systems, MCAS would reset itself each time a pilot corrected against it—in other 737s, overriding an anti-stall correction would disable the software's changes.
Additionally, the MCAS system was designed to work based on input from only one sensor—despite the fact that Boeing rated a failure of the system as "hazardous." That level of risk—which in itself was understated, according to engineers—should have been enough to require redundant sensors.
All of these understated analyses gave the FAA a false picture of the impact of the MCAS system, which was presented as a simple modification of systems aboard existing 737s. But the changes were enough that Brazilian authorities cited a need for additional pilot training on the 737 MAX even while the FAA allowed the system to go essentially unmentioned in US operation manuals.