Archive for the ‘Aviation’ Category

Search Recommendation for MH370’s Debris Field

[This is the web version of a paper written by me, Bobby Ulich, Richard Godfrey, and Andrew Banks. The PDF version is available here.]

1 Introduction

Presently, there is no active search to find MH370’s debris field on the seabed of the Southern Indian Ocean (SIO). The last search was conducted by Ocean Infinity, who consulted with official and independent researchers, and subsequently scanned the seabed along the 7th arc as far north as S25° latitude. Since then, independent researchers have continued to analyze the available data to understand what areas of seabed are the most likely, and why previous search efforts have been unsuccessful. The objective is to define a manageable area for conducting a new search of the seabed.

In a previous post [1], we presented an overview of Bobby Ulich’s research [2], aimed at more precisely locating the point of impact (POI) using statistical criteria that requires that random variables (such as the reading errors of the satellite data) are not correlated, i.e., are truly random. A subsequent post [3] describes the work of Richard Godfrey et al. [4] to analytically evaluate a large number of candidate flight paths using these and other criteria. The results of that work suggest that the final hours of the flight were due south in the Indian Ocean along E93.7875° longitude, which matches a great circle between the waypoint BEDAX (about 100 NM west of Banda Aceh, Sumatra) and the South Pole. The POI was estimated to lie close to the 7th arc around S34.4° latitude.

Work continues to evaluate candidate paths using an accurate integrated model that includes satellite data, radar data, flight dynamics, automated navigation, meteorological conditions, fuel consumption, drift models, and aerial search results. That exhaustive work is nearing completion, and documentation of the methods and the results is ongoing. Like the previous work [4], the ongoing work suggests that the final trajectory of MH370 was most likely along a due south path along E93.7875° longitude.

In the interest of providing information in a timely manner, we have chosen to recommend a search area based on this most likely path. A comprehensive paper which expands upon the methods and results presented in previous work [2,4], and provides further justification for the selected path, will be available in the near future.

2 Last Estimated Position (LEP)

Using the results of the analysis presented above, the last estimated position (LEP) is based on a final trajectory of a constant longitude of E93.7875°, which is consistent with the aircraft traveling due south from waypoint BEDAX towards the South Pole. The LEP is based on a location exactly on the 7th arc, and the uncertainty associated with the LEP helps define the limits of the recommended search area.

When the SDU logs onto the Inmarsat network, the SDU begins the log-on sequence by first transmitting a log-on request, which is followed some seconds later by transmitting a log-on acknowledge. For MH370, those were the final two transmissions, transmitted at 00:19:29 (BTO = 23,000 μs) and 00:19:37 (BTO = 49,660 μs), respectively. From past work [6,7], we also know that the BTO values for the log-on request and log-on acknowledge are “anomalous” in that the raw values are outliers that require a correction. Fortunately, the required corrections are repeatable, and can be determined by analyzing prior flights.

Using the Inmarsat transaction logs for MH371 and MH370 [8], the BTO log-on statistics from March 7, 2014, 00:51:00, to March 8, 2014, 16:00:00, were analyzed to determine what offsets might be applied to log-on requests and log-on acknowledges. There were 29 cases in which there was an R-channel burst just after the initial (R600) log-on request and subsequent (R1200) log-on acknowledge. Of those 29 cases, the number of packets in the burst was 3 for 20 bursts, 2 for 6 bursts, and 1 for 3 bursts. The average of each burst was used as the reference for the log-in request and log-on acknowledge. In 4 of the 29 cases, the correction for the log-on request was near zero, i.e., the BTO values were not anomalous, so only 25 cases were included for log-on request statistics.

For the log-on requests, the mean offset from the R-channel burst is 4,578 μs with a standard deviation of 94 μs. The maximum offset was 4,800 μs (+222 μs from the mean) and the minimum was 4,380 μs (-198 μs from the mean).

For the log-on acknowledge, we considered a correction of the form (a + N × W), where a is a constant, N is an integer, and W represents the delay per slot. We found that the standard deviation of the correction error (using the average of the R1200 burst as the reference) to be minimized for W = 7812.0 μs. That’s very close to the 7812.5 μs value suggested by the 128 Hz internal clock of the SDU. By forcing W=7812.5 μs, the mean error to the correction is 23 μs, and the standard deviation is 30 μs. The observed standard deviation is very close to the 29 μs that DSTG recommends to use for “normal” R1200 values [7]. The consistency of the standard deviation of the corrected anomalous values with the standard deviation of the values not requiring a correction is reassuring. The total correction to the BTO for log-on acknowledges is therefore (23 + N × 7812.5) μs.

Using these log-on corrections produces corrected BTO values at 00:19 equal to:

00:19:29: 23000 – 4578 = 18422 μs
00:19:37: 49660 – 23 – 4 × 7812.5 = 18387 μs

We combine these values to determine the BE value of BTO by using the inverse of the variance as weighting, yielding a BE value of BTO = 18,390 μs (σ = 29 μs). Using this BE value of BTO with the longitude of E93.7875° and an assumed geometric altitude of 20,000 ft results in a position of S34.2342° E93.7875° at 00:19:29, which we assign as the LEP.

3 Terrain Near the LEP

Figure 1 shows the subsea terrain in the vicinity of the LEP using data provided by Geosciences Australia [5]. Some of this area has already been searched by GO Phoenix (managed by the ATSB) using a towfish, and by Ocean Infinity (OI) using Seabed Constructor and its team of AUVs. However, as can be seen in Figure 1, some of the previously searched area has challenging terrain with steep slopes, and the debris field may have been either not detected due to terrain avoidance or shadows, or detected but not properly interpreted by reviewers. In particular, there is a steep slope that lies about 20 NM due south of the LEP that was not scanned by the towfish and appears to have been only partially scanned by the AUVs.

Figure 1. Terrain in the vicinity of the LEP

Figure 2 shows the ocean depth along a line of constant longitude in the vicinity of the LEP. The previously identified steep slope to the south of the LEP has a grade of about 30%. To the north, another slope has a grade of 44%. This slope was beyond the limits of the search boundaries of GO Phoenix, but was scanned by Seabed Constructor’s AUVs.

Figure 2. Ocean depth at constant longitude and +/- 46 km (+/- 25 NM) from the LEP

4 No Pilot Inputs after Fuel Exhaustion

In order to define the search area limits, we first consider no pilot inputs after fuel exhaustion. For this case, the search area limits are defined by the uncertainty of the LEP and the uncertainty of the uncontrolled flight path before impacting the ocean.

4.1 Uncertainty Due to BTO Noise

The uncertainty in the BTO produces a corresponding uncertainty in the position of the 7th arc. The calculated sensitivity of the arc position to the BTO is 0.104 NM/µs, i.e., a 1-µs increase in BTO pushes the 7th arc outward (southeast) by 0.104 NM. The 1-σ uncertainty of the arc position due to BTO noise is therefore 0.104 NM/µs × 29 µs = 3.0 NM.

4.2 Uncertainty Due to Altitude at 00:19:29

The LEP is based on an assumed altitude of 20,000 ft that is reached at 00:19:29, i.e., 1.5 to 2 minutes after fuel exhaustion. As the BTO represents the range between the aircraft and the satellite, the position of the 7th arc as projected on the surface of the earth depends on the altitude. As the aircraft would be between 0 and 40,000 ft at this time, we assign this altitude range as the 2-σ limits. The calculated sensitivity of the BTO to altitude is 12.8 µs/10,000 ft. The 1-σ uncertainty of the arc position due to altitude uncertainty is therefore 0.104 NM/µs × 12.8 µs = 1.33 NM.

4.3 Uncertainty of Turn Between Fuel Exhaustion and 00:19:29

Boeing conducted 10 simulations to determine the behavior of MH370 after fuel exhaustion with no pilot inputs [9] using a high-fidelity simulator for the 777-200ER aircraft. The trajectories for these simulations are shown in Figure 3. For each simulation, the autopilot was automatically disengaged after fuel exhaustion, and the aircraft turned slightly either to the right or to the left depending on a number of factors, including the electrical configuration, the initial conditions of the flight parameters, and the meteorological conditions. Within the 2-minute interval between fuel exhaustion and the log-on request at 00:19:29, the slight turn shifted the location that the aircraft crossed the 7th arc relative to where it would have crossed the 7th arc if the autopilot had remained engaged and the course was maintained. For the 10 cases, the lateral shift along the arc varied between 1.1 and 8.8 NM. As we don’t know how well the 10 cases represented the actual conditions, we conservatively assign a 1-σ uncertainty of 8.8 NM along the 7th arc due to the slight turn between fuel exhaustion and crossing the 7th arc.

4.4 Uncertainty of Trajectory Between 00:19:29 and the POI

In all 10 of the Boeing simulations, the aircraft banked after the autopilot was disengaged following fuel exhaustion. The magnitude and direction of the bank that develops is the net effect of a many factors, including thrust asymmetry, rudder inputs from the Thrust Asymmetry Compensation (TAC), rudder trim input, lateral weight imbalance, aerodynamic asymmetry, and turbulence, any of which increases the bank angle. On the other hand, the tendency to bank is opposed by the dihedral effect of the wings and the low center-of-mass. For all the simulations, the POI was within 32 NM from the 7th arc crossing at 00:19:29, as shown in Figure 3.

Figure 3. Calculated end-of-flight trajectories from the Boeing simulations [9]

In some of those simulations, the bank was shallow, and phugoids lasting many minutes developed. In only 5 of the simulations did the rate of descent exceed 15,000 fpm while also experiencing a downward acceleration exceeding 0.67 g, which are the values of descent rate and downward acceleration derived from the two final values of the BFO. For these cases, the POI occurred between 4.7 and 7.9 NM from the point where the descent rate first exceeded 15,000 fpm. Other simulations of a banked descent after fuel exhaustion [10] suggest that an uncontrolled Boeing 777 would travel an additional distance of about 5 NM after a downward acceleration of 0.67 g and a rate of descent of 15,000 fpm simultaneously occur.

None of the Boeing simulations predict that the aircraft was in a steep descent as the 7th arc was crossed, so there is an unexplained discrepancy between the Boeing simulations and the descent rates derived from the final BFO values. In light of this discrepancy, we choose to not limit the distance traveled after crossing the 7th arc by only considering the distance traveled after the steep descent. Instead, we assign a 2-σ value of 32 NM for the distance traveled after crossing the 7th arc, based on the farthest distance that was observed in all 10 simulations, irrespective of the magnitude and timing of the descent rates.

4.5 Uncertainty Due to Navigation Error

There are two autopilot modes that could result in a trajectory that nominally follows a great circle between BEDAX and the South Pole. After passing BEDAX, if the autopilot remained in LNAV and the active waypoint was the South Pole (entered as 99SP, S90EXXXXX, or S90WXXXXX), the aircraft would fly along the longitude E93.7875° within the accuracy of the GPS-derived navigation. In this case, the expected navigational error would be much smaller than other sources of error, and can be safely ignored.

The other possibility is that after passing BEDAX, the autopilot was configured to fly along a constant true track (CTT) of 180°. Selecting this mode would require manually changing the heading reference switch from NORM to TRUE, as directions on maps, procedures, and in ATC communications are normally referenced to magnetic north, except in polar regions.

Unlike LNAV mode in which the cross-track error of the target path is continuously calculated and minimized, errors in track (which may be positive or negative) in CTT mode produce error in the due south path that may accumulate without correction. We assume here that that course is nominally 180° True, with a 1-σ uncertainty of 0.1 deg (0.001745 rad). As the distance between BEDAX and the 7th arc along the line of constant longitude is around 2365 NM, the cross-track error has a mean value of zero and a 1-s uncertainty of 4.1 NM. However, since the path crosses the 7th arc at an angle of 46 deg, the 1-σ uncertainty in position along the 7th arc is increased to 5.9 NM.

4.6 Search Area Based on No Pilot Inputs

Assuming there were no pilot inputs after 19:41, the uncertainties in the POI are summarized in Table 1. The 1-σ uncertainty along the 7th arc is 19.2 NM, and 16.3 NM normal to the 7th arc.

Table 1. Summary of POI Uncertainties Assuming No Pilot Inputs

To achieve a confidence level of 98% requires searching an area defined by ±2.3-σ limits, with the LEP at its center. Based on this, the recommended area is 91 NM × 74 NM, and the total area is 6,719 NM2, or 23,050 km2. This area is depicted as A1 in Figure 4.

Figure 4. Search recommendation, showing areas A1, A2, and A3

5 Controlled Glide Due South

We next consider the case in which there was a controlled glide after fuel exhaustion, which would extend the search area beyond the search area based on no pilot inputs. For a Boeing 777 gliding at an optimum speed, a glide ratio of about 20:1 can be achieved. This corresponds to a descent angle of 2.86°, and a continuous reduction in altitude of 1000 ft for every 3.29 NM traversed. Assuming an initial altitude of 42,400 ft (based on a standard altitude of 40,000 ft), the impact could be as far as 140 NM from the point of fuel exhaustion (ignoring the headwind at some altitudes, which would reduce the ground distance of the glide). If the glide started at a lower altitude, or if non-optimum airspeed was flown, the glide distance would be less. The uncertainty associated with the glide distance is much larger than other uncertainties, so we assume that with a glide, the POI might have been as far as 140 NM from the LEP, and use that as the southern limit.

The width of the search area as defined by a controlled glide is more difficult to estimate. If an experienced pilot wished to continue the flight path on a due-south course, that could be accomplished quite precisely. For example, if the autopilot mode was CTT before the fuel exhaustion, then a constant (true) track of 180 deg could be maintained using the indicated track shown in the navigation display. On the other hand, if the autopilot mode was LNAV before fuel exhaustion, then the cross-track error could be minimized by following the “magenta” line defined by the BEDAX-South Pole leg. In either case, the search area width could be limited to less than 10 NM to either side of the projected flight path.

Because we cannot be sure that there was an attempt to precisely follow a due south path, we assign a generous width to this part of the search area, centered on the due south path. A width of +/- 33 NM results in an additional search area of 6,300 NM2 (22,000 km2), and produces an area in similar size to A1. It is depicted as A2 in Figure 4.

6 Controlled Glide in an Arbitrary Direction

If there was a controlled glide that did not continue along the path flown prior to fuel exhaustion, it is nearly impossible to predict the direction. For instance, a path to the west would shield the pilot’s eyes from the rising sun to the east. A path to the northeast would extend the glide due to the tailwind. A path to the west would create more distance to the Australian shoreline. A path towards the northwest would be towards Mecca. Any of these directions is less likely than a continuation of the due south path, but it becomes nearly impossible to prioritize among these or other directions. Instead, we define area A3 as the circle with a radius of 140 NM, excluding the areas already included in A1 and A2. The area is roughly 48,400 NM2 (166,000 km2), and is depicted as A3 in Figure 4.

7 Conclusions

Recent analyses suggest that MH370’s flight path in its final hours followed E93.7875° longitude, corresponding to a great circle path between waypoint BEDAX and the South Pole. Using this result, the last estimated position (LEP) is S34.2342° E93.7875°. Although some of the subsea was previously searched in this vicinity, the terrain is challenging, and the debris field might have been not detected, or detected and misinterpreted. There is also the possibility that there was a controlled glide after fuel exhaustion, and an impact well beyond what was previously searched.

To define the search area near the LEP, three cases were considered, each with an associated search area. The highest priority search area of 6,719 NM2 (23,050 km2) assumes there were no pilot inputs after fuel exhaustion. The search area of next highest priority encompasses 6,300 NM2 (22,000 km2), and assumes there was a glide towards the south after fuel exhaustion. The lowest priority is the controlled glide in an arbitrary direction with an area of around 48,400 NM2 (166,000 km2).

8 References

[1] Iannello, “A New Methodology to Determine MH370’s Path”, May 31, 2019,

[2] Ulich, Technical Note presented in [1].

[3] Iannello, “A Comprehensive Survey of Possible MH370 Paths”, June 30, 2019,, excerpted from [4].

[4] Godfrey, Ulich, Iannello, “Blowin’ In The Wind: Scanning the Southern Indian Ocean for MH370”, June 24, 2019,

[5] “MH370 Data Release”, Geosciences Australia,

[6] Ashton, Shuster-Bruce, College, Dickinson, “The Search for MH370”, The Journal of Navigation, Vol 68 (1), January 2015.

[7] Davey, Gordon, Holland, Rutten, Williams, “Bayesian Methods in the Search for MH370”, Defense, Science, and Technology Group, Australia, November 30, 2015.

[8] Iannello, “The Unredacted Satellite Data for MH370”, June 12, 2017,

[9] Iannello, “End-of-Flight Simulations of MH370”, August 2018,

[10] Iannello, “MH370 End-of-Flight with Banked Descent and No Pilot”, June 4, 2017,

Update on March 12, 2020

The best estimate of the point of impact (BE POI) has been renamed the last estimated position (LEP), which is a more accurate description. The location is unchanged.

Posted in Aviation | 534 Comments »

A Comprehensive Survey of Possible MH370 Paths

This is the second in a series of articles that is dedicated to defining a new area for the underwater search of MH370. In the previous article, we presented Bobby Ulich’s overview of a new statistical criteria that supplements the criteria that many investigators have used in the past for evaluating candidate flight paths. In the present article, we present an overview of an exhaustive study principally undertaken by Richard Godfrey, with contributions by Bobby Ulich and me, to examine flight paths with the assumption that after 19:41, the flight was automated and with no pilot inputs. The results indicate that a flight crossing the 7th arc near 34.4S latitude merits a deeper investigation, which will be the subject of the next (third) paper.

What follows are excerpts from “Blowin’ in the Wind”, by Richard Godfrey et al. For more details, please consult the full paper.


Following on from Richard Godfrey’s earlier paper entitled “How to play Russian Roulette and Win” published on 13th February 2019, which covered the first part of the flight and diversion of MH370 into the Straits of Malacca, Richard was contacted by Bobby Ulich, who asked the question “where do we go from here?” Richard Godfrey, Bobby Ulich and Victor Iannello came up with the idea to scan the Southern Indian Ocean (SIO) for possible flight paths of MH370 using a degree of precision that we believe has not been previously applied, and to use certain statistical checks on the presence or absence of correlations in the data. Each of us had independently developed a MH370 flight model using the Boeing 777-200ER aircraft performance data, Rolls Royce Trent 892 fuel range and endurance data, Inmarsat satellite data and the GDAS weather data. The goal was to find all possible MH370 flight routes that fit the data within appropriate tolerances. Additionally, the data would be checked using a set of correlations.


Our assumptions about the automated flight after 19:41 are that there are 7 parameters that determine a possible MH370 flight path:

  1. Start Time
  2. Start Latitude
  3. Start Longitude
  4. Flight Level
  5. Lateral Navigation Method
  6. Initial Bearing
  7. Speed Control Mode

If you draw an arbitrary line of latitude between the area of the last known point and the SIO, MH370 must have crossed this line at a certain time, longitude, flight level and initial bearing using a particular lateral navigation method and speed control mode.

Having fixed the start latitude, the start time and start longitude can be varied for any given flight level, lateral navigation mode, initial bearing and speed control mode, and the fit to the aircraft performance data, satellite data and weather data ascertained. The flight model used in the wide area scan was developed by Richard Godfrey. First the altitude and air pressure at the selected flight level is determined. The GDAS weather data provides the actual surface air pressure and surface air temperature for a given position and time by interpolation. The air pressure for a given flight level is calculated based on the ISA standard surface pressure of 1013.25 hPa and standard surface temperature of 15.0°C. The geometric altitude for a given flight level is then approximated using the actual surface pressure and actual surface temperature. The altitude is used in the satellite data calculations, assuming the flight level is maintained between 19:41:03 UTC and 00:11:00 UTC. Similarly, the GDAS weather data is interpolated for the exact latitude, longitude and time to find the Outside Air Temperature (OAT) and wind at the given flight level.

The scan method for each Lateral Navigation Method (LNAV, CTT, CTH, CMT and CMH) and for each Speed Control Mode (Constant Mach and Long Range Cruise) requires stepping through each possible Initial Bearing (initially from 155°T to 195°T) in steps of 1°T. In Constant Mach (CM) the value was set initially at 0.85 and decremented in steps of 0.01 Mach.

[Note: LNAV = Lateral navigation (following waypoints connected by geodesics); CTT = Constant true track; CTH = Constant true heading; CMT = Constant magnetic track; CMH = Constant magnetic heading]

Once the Initial Bearing and (if relevant) the Mach has been set, the Start Time or Start Latitude is adjusted to minimise the RMS BTO Residual (BTOR) across the 5 satellite handshake points between 19:41:03 UTC and 00:11:00 UTC. The BTOR is the difference between the predicted BTO and the observed BTO. Then the Start Longitude is varied to minimise the RMS BTOR. Finally the Flight Level is adjusted in steps of 1 (standard altitude steps of 100 feet) to minimise the RMS BTOR. A full report is then produced for each scan. (The definition of GSE is found later in the paper, and the significance of the correlation coefficients is based on the work of Bobby Ulich and will be presented in a future paper.)

A number of MH370 candidate flight paths have been found over the years by various analysts resulting in Regions of Interest (ROIs) that have either already been searched or have been proposed for a further search. The table below lists some of the ROIs. The table includes some new ROIs which have been found as a result of the current systematic search. Some of the ROIs can be readily dismissed as the standard deviation BTO residual (<47 μs), standard deviation BFO residual (<4.3 Hz) or the calculated PDA (<1.5%) is too high.

Possible MH370 flight paths resulting in a candidate Region of Interest (ROI)

Systematic initial bearings from 155°T to 195°T in steps of 1°T were analysed, plus some exotic cases in steps of 0.1°T. All navigation methods were covered: LNAV, CTT, CTH, CMT and CMH, all speed modes: Constant Mach 0.80 to 0.85, LRC 0.7047 to 0.8408, MRC, ECON CI52 and all flight levels: from FL290 to FL430. The fuel endurance was allowed to vary around 00:17:30 UTC and the resulting PDA was noted. The PDA was allowed to vary from the nominal 1.5% and the possibility that the bleed air was shut off for part or all of the time was considered.

In total 1,372 flight paths have been analysed, of which 828 flight paths since the start of this systematic study on 17th February 2019. Start latitudes from 16.0°N to 4.3°S have been covered and the start longitudes were unconstrained. Start times from 18:41:00 UTC to 19:32:00 UTC, but the final major turn had to be completed before the 2nd Arc at 19:41:03 UTC was reached.


A more detailed analysis reveals 3 candidate ROIs for further investigation: ROI 1 – LNAV180 CM 0.84 FL403, ROI 2 – LNAV 170 LRC FL350 and ROI3 – CTH170 LRC FL290.

From a pilot’s point of view, a LNAV path on a bearing of 180°T would require setting a final waypoint as the South Pole. This flight path passes close to waypoint BEDAX. The overall fuel endurance and range fits and for a Main Engine Fuel Exhaustion (MEFE) at 00:17:30 UTC, a PDA of 1.37% is calculated (the nominal PDA is 1.5%). The RMS GSE is 2.49, which fits the expected range between 1.0 and 3.0 knots. This flight path ends at 00:19:37 UTC at around 34.5°S near the 7th Arc. This area was originally searched by Go Phoenix but all possible sightings were reexamined and discounted. The search area was widened in later search by Ocean Infinity, but again nothing was found.

An LNAV path on an initial bearing of 170°T starts close to Car Nicobar Airport (VOCX) and passes close to Cocos Island before ending at 00:19:37 UTC at around 28.9°S near the 7th Arc. The overall fuel endurance and range fits and for a MEFE at 00:17:30 UTC, with a calculated PDA of 1.17%. Notably, the Mean BFOR for this flight path is low at -6.87 Hz and is out of the expected range. The area around 28.9°S was searched by Ocean Infinity, but nothing was found.

The CTH path on an initial bearing of 170°T is unlikely as the fuel endurance and range does not fit well. The RMS BTOR is high at 79.6 μs and individual BTOR values are out of normal range. It is also unlikely that a pilot would switch to a True Heading mode. Normal operation is Magnetic Track and this mode is only used for short flight paths, such as during an approach or deviating to avoid bad weather. Switching from Magnetic to True compass mode is only normally done in the region of the north or south poles.

Candidate ROIs for further investigation. (Click on image to enlarge.)


All possible MH370 end points of flight routes in any navigation mode and any speed mode have already been searched, within at least ± 25 NM of the 7th Arc (partially ± 40 NM). This means that MH370 has either been missed in a previous search or recovered from a steep descent of around 15,000 fpm and glided out to an end point outside the previously searched area.

There is only one Region of Interest, where we recommended a further analysis and search at around 34.4 °S near the 7th Arc, following a flight route from close to waypoint BEDAX using the LNAV lateral navigation mode with an ultimate waypoint of the South Pole on a track of 180°T due south, in Long Range Cruise speed mode and at a flight level between FL390 and FL403.

This Region of Interest will be analysed in more depth in the next paper in this series.

Posted in Aviation | 2,470 Comments »

A New Methodology to Determine MH370’s Path

Ocean Infinity associates review sonar data

The community of independent researchers is divided about where a new underwater search should be conducted. In this light, Bobby Ulich, PhD, has been quietly developing new statistical criteria that supplement the criteria that many of us have used in the past. The objective of this research is to define a new search area that is of manageable size and has a reasonable chance of success. Bobby has been working closely with Richard Godfrey to identify candidate paths, and with me to a lesser extent. At this point, the most promising candidate is a path of constant longitude, i.e., following a constant track of due south, aligned with waypoint BEDAX, and crossing the 7th arc near 34.3S latitude. This path, which was identified as a candidate path some years ago, could have been easily programmed into the flight computers with the waypoints BEDAX and the South Pole (e.g., by entering the waypoint S90E000). Work continues to evaluate this and other paths.

The note below from Bobby gives an overview of the new methodology, and is provided here to elicit comments from contributors of the blog.

Note from Bobby Ulich, PhD

There are two pieces of available MH370 information that have not yet been fully utilized in predicting the southern route and the most likely impact latitude near the 7th Arc.  Neither one was included in the DSTG Bayesian analysis.

The first item is the inclusion of a detailed and accurate fuel flow model.  All DSTG analyses effectively ignored fuel consumption as a route discriminator by assuming “infinite fuel”.   I and several others subsequently developed fuel flow models and compared them with Boeing tables, prior 9M-MRO flights, and the MH370 flight plan in order to validate the predictions.  My model fuel flows are consistent with these comparisons, nearly always within +/- 1 %.  As I understand it, Boeing did some range and endurance calculations and found that it was possible, at some combination of altitude and speed, for 9M-MRO to have reached a wide stretch of the 7th Arc, totally excluding only the region beyond circa 39S.  However, the DSTG analyses did not factor in fuel consumption for each route they examined, so it is unknown whether or not that route was actually flyable with the available fuel.  This is an important consideration, especially considering the fact that over a large portion of the SIO region of interest, the high-altitude air temperatures on the night in question varied by as much as 12 C with respect to ISA over an altitude range of only about 5,000 feet.  Thus, small altitude changes had major effects on TAS and on fuel flow. 

In my route fitter, one can either predict the main engines fuel exhaustion (MEFE) time using the known average cruise PDA for the engines, or hold the MEFE time at 00:17:30 (per ATSB) by adjusting the assumed PDA.  I generally do the latter because that gives the correct weight as a function of time, which affects the commanded airspeed.  It is also important to allow for the possibility that bleed air was turned off after diversion, reducing fuel flow by several percent.  So, in fact the effective PDA which would give the correct endurance is potentially a range of values between 1.5% (the known value with bleed air on) and about -0.8% (the equivalent of bleed air off for the entire flight after diversion).  Best-fit PDAs higher than +1.5% and lower than -0.8% are increasingly less likely.

Inmarsat and DSTG have provided some analyses of the BTO and BFO reading errors based on prior flights.  Generally speaking, up to now, the statistics associated with those reading errors are the mean and the standard deviation.  In many cases the RMS statistic has also been used as a convenience when performing route model fits to the satellite data, but the fundamental statistics are the mean and standard deviation of the BTO/BFO reading errors.  In the case of the BFOs, we cannot know that the mean reading error (effectively the BFO bias term) did not change as a result of the in-flight power cycle ending circa 18:24.  Therefore, we really only have three of these four statistics available for route fitting – the BTO residual mean, the BTO residual standard deviation, and the BFO residual standard deviation.

Regarding the standard deviation of the BFO reading errors, there has been much discussion in the past regarding the seemingly inconsistent criteria used by Inmarsat and by DSTG.  I have been modeling the BFO reading errors comprising (1) random electronic noise, (2) non-ergodic and non-stationary OCXO drift, (3) trigonometric quantization errors in the AES Doppler compensation code that give the appearance of being quasi-random for readings widely spaced in time, and (4) vertical speed errors of roughly 40 fpm or higher from the nominal vertical speed profile (caused primarily by turbulence).  I have developed a simple statistical model for the BFO reading noise, and this model gives results which are consistent with both sets of criteria.  This new BFO reading noise model is what I use in my current route fitter.

The second item of previously unused information is also significant in discriminating against incorrect routes.  That item is the fact that the BTO and BFO reading errors are uncorrelated with themselves and with each other, and, in effect, with most route-fitting parameters (with possibly one exception).  Note that it is the reading errors which are uncorrelated, not the actual expected values for BTO/BFO.  The degree of correlation of pairs of parameters is quantified using the Pearson correlation coefficient, and these values may be used as additional statistical metrics of the goodness of fit for the True Route.  The one exception that could have occurred is for the BFO reading errors, which could change linearly with time due to OCXO drift.  So, we must use that one correlation case (BFO residuals with respect to time) cautiously, knowing that it is possible such a drift might have occurred, although we do not see obvious cases of large linear drifts in previous flights.  It seems possible that a very cold cycling of the OCXO might produce a shift in the bias frequency, but it is not apparent that such a cycling would be more likely to produce greater linear drift of the bias frequency well after warm-up.  Small drifts of several Hz during a single flight are seen on prior flights, and it would not be surprising if they occurred in MH370 after 19:41.

We can substantially increase the number of statistical metrics that must be satisfied by a fit using the True Route by adding numerous correlation coefficients to the previously used means and standard deviations of the BTO and BFO residuals.  Using more metrics (~10-12 total) provides greater selectivity in route fitting and better discrimination against incorrect routes.

A requirement for effectively utilizing these additional correlation metrics is the development of a method which allows us to obtain best-fit BTO/BFO residuals which behave statistically the same as the BTO/BFO reading errors.  Those two parameters, the best-fit residuals and the reading errors, are generally not the same quantity.  They are the same only when the model used to predict the aircraft location in 4-D (with 7 assumed route parameters) is perfect.  No 4-D aircraft prediction model is perfect, especially in light of the expected errors in the GDAS temperature and wind data (which must be interpolated in 4-D for calculations along the route).  At best, there will be small (a few NM) systematic errors in the model predicted position at the handshake times.  The along-track and cross-track components of the position errors are systematic and must be allowed for in order to compare the expected BTO/BFO reading errors with the best-fit BTO/BFO residuals.  If this is not done, then accurate correspondence with statistical metrics is impossible.  In other words, just getting a fit consistent with the expected mean and standard deviation is not very discriminating because it ignores the even larger number of statistical metrics which the True Route must also satisfy.  The question is, how can we remove the systematic errors in the handshake location predictions of the flight model (using GDAS data) so that the best-fit residuals are essentially just the reading errors?

I have found that this is indeed possible if the systematic prediction errors are small.  Basically, the procedure is to fit lat/lon positions at the handshake times.  I use only the five handshake points from 19:41-00:11. These data can be well-fitted with a single set of seven route parameters with no maneuvers, and this eliminates the need to make any assumptions about the FMT except that it occurred prior to 19:41. The MH370 data recorded by Inmarsat between 19:41 and 00:11 UTC on 7-8 March 2014 is entirely consistent with a path during that period, while southbound and heading into the Southern Indian Ocean, without major maneuvers such as turns or holds or major speed changes. With the assumption of a preset route during this period using the auto-pilot, solutions may be found consistent with the BTO and BFO data, comprising 5 sets of BTOs and BFOs at 5 known handshake times. The 23:14 phone call BFOs are not used because there is no independent determination of that channel’s frequency bias (offset).

Once I have the five fitted locations, I compare them to the model-predicted locations to generate a set of five along-track position errors and five cross-track position errors.  Then I find the ground speed errors for each route leg that produce the along-track position errors.  I also find the lateral navigation errors that would produce the cross-track position errors.  Note that the cross-track position errors do not occur for LNAV (great circle) routes, but only for constant track and constant heading routes.  The ground speed errors are caused by airspeed errors and by GDAS along-track wind errors.  The airspeed errors are small (probably 1 kt or less) and are caused primarily by errors in the GDAS temperature data. The along-track wind error is probably at least several kts at any given location and time.  However, we only need the average wind error for each ~1-hour long leg along the route, and these leg average errors will generally be smaller.  I estimate that the overall along-track ground speed error using my model is about 1-2 kts.  That means that we must constrain the fit so that the difference between the model-predicted location and the best-fit location (in the along-track direction) is equivalent to a maximum ground speed error less than about 1-2 kts.  I also expect the ground speed errors to vary smoothly with time and location.  So, I put constraints on the GSEs in terms of peak value and smoothness during the route fitting process. 

For the constant track and constant heading navigation modes, the cross-track position errors are caused by a combination of cross-track GDAS wind errors and FMC lateral navigation bearing errors.  The lateral navigation errors are largely undocumented publicly, but I expect them to be a small fraction of a degree for the constant track modes. The lateral navigation errors in the constant heading modes are caused primarily by errors in the predicted cross-track winds, and they will be larger than the lateral navigation errors in the constant track modes.  In LNAV there are no cross-track position errors.

One benefit of this route fitting method is that it requires a very good, but not a perfect model.  It must predict the locations, based on the 7 route parameters and the GDAS 4-D wind and temperature data, with an accuracy of about 5-10 NM.  This is a significantly larger region than the location uncertainty (in one dimension) due to BTO reading noise.  Still, one can estimate the true locations with the full precision of the satellite data following the route fitting method described above, using the statistical metrics to separate the truly random portion of the residuals from the systematic, non-random model/GDAS errors.  When the synthesized locations are the True Route, the best-fit residuals will behave statistically identically with the BTO/BFO reading errors.

It is also possible to compute a single figure of merit for a given fit based on the 10-12 metrics described above.  I use Fisher’s chi-squared combination calculation that finds a single percentile value that is most consistent with the percentile values for each of the independent statistics being combined.  The percentile values represent the percentage of random trials which are no better than this fit result, assuming the null hypothesis.  In the MH370 case the null hypothesis is the same for each statistic – that the fitted route is the True Route.  The alternative hypothesis is that the route is not True for at least one of the statistics.  The expected value of all individual and combined percentiles is 50%; that is, half of the random trials will fit better, and half will fit worse.  We can use no other assumption than the route is True, because we have no idea what the values of the metrics should be when the route is not True.  We only know their expected values (and their standard deviations) for the case when the route is True. Thus, we expect the True Route will have an expected Fisher combined percentile value of 50% (with a standard deviation of 29%).  Non-True (i.e., incorrect) routes will have Fisher percentile values significantly less than 50%.  This is how incorrect routes are discriminated.  The route fitter objective function maximizes the Fisher percentile, so each trial is trying to match the expected values of the statistics for the True Route.

Two related activities have been carried out to validate the percentile calculations.  First, a simulated processor was coded which generated random BTO and BFO reading errors.  Then all the individual statistics and their percentile values were computed.  Finally, the combined Fisher percentile was computed.  Using 100,000 trials, the actual percentile values were found to be within 1% of their nominal values for all the individual and combined statistics.  In order to achieve this result, the statistics were segregated into four classes, each with is own Z statistic and probability density function.  The second validation experiment involved injecting random BTO and BFO reading errors into the route fitter program itself and verifying the correct combined percentiles were obtained.

It will be appreciated that this statistical fitting method, with a dozen or so metrics and with synthesized handshake locations, involves considerable computational time, so it is not ideal for identifying Regions of Interest (ROI).  The previous generation of route fitters using just BTO/BFO metrics is much more efficient for evaluating the very large number of combinations of route parameters in order to identify all ROI, which may then be refined and evaluated using the statistical fitting method for assessment and comparison.

So far, after a lengthy systematic search, we have identified quite a few ROI, and these are being evaluated with the new statistical method.  I have already demonstrated that one route in particular (LNAV at 180 degrees true bearing through BEDAX at LRC and at FL390, ending near 34.3S) is fully consistent with the True Route using the statistical method.  At the present time, numerous other ROI are being evaluated and compared. Preliminary results to date show them to be inferior fits, but this work is not yet completed.

The goal of this work was to develop a means to better discriminate among routes by using additional metrics, including PDA and numerous correlation coefficients, and to compensate for systematic errors in model-predicted locations so that the best-fit residuals may be directly compared with the known BTO/BFO reading errors.  Our initial results are promising.  It may actually be possible to demonstrate that there is only one route solution which is fully consistent with the satellite data.  More complete and detailed information will be provided once our assessments are finished.

Posted in Aviation | 287 Comments »

Insights from New MH370 Tracking Data

Cockpit flight displays while approaching IGARI

More precise tracking data has recently become available that gives new insights about how MH370 was flown just before the transponder was disabled near the waypoint IGARI. The data was broadcast by the aircraft and received by a Malaysian ATC receiver at Terengganu. It is similar to the data that has been previously available from the aircraft tracking site FlightRadar24, except that the spacing between data points is shorter, and the data are the raw values that were actually broadcast by the aircraft. As a result, more details about the flight can be extracted.

The new tracking data was transmitted by the aircraft’s Automatic Dependent Surveillance – Broadcast (ADS-B) system, which broadcasts the GPS-derived position and altitude, as well as other parameters, as often as about every one-half of a second. Because of the inherent accuracy of GPS, the ADS-B position is more accurate than the traditional radar systems, which derive the position from the timing and angular direction of received signals from the aircraft using a rotating antenna.

A file containing the ADS-B data for MH370 is available here.

Path Near IGARI

The figure below shows that the aircraft was on a track to pass over waypoint IGARI. However, before reaching IGARI, the aircraft began to turn towards waypoint BITOD. The radius of the turn indicates that the bank angle was around 15°. The start of the turn before reaching the waypoint and the bank angle are both consistent with the aircraft following an automated route in “LNAV” mode in which the flight computers were programmed to fly “direct” to IGARI and then to BITOD. (IGARI is a compulsory “flyby” waypoint.) This suggests that at the time the transponder was disabled after 17:20:34.55, the autopilot was still engaged and the aircraft was flying in accordance with the flight plan. (The Safety Investigation Report states that the Mode S symbol dropped off the radar display at 17:20:36, which is close in timing to the last ADS-B point.) This is evidence that the deviation from the flight plan occurred after the transponder was disabled.

Comparison with Military Radar Data

The radar data that we have after the transponder was disabled consists of “primary surveillance radar” (PSR) data from civilian and military sources. Although the civilian radar data sets from the Kota Bharu and Butterworth radar sites have become available through unofficial channels, the range of the civilian primary radar sites is much less than the military primary radar sites, so that after the transponder was disabled near IGARI, only military radar captured the turnback to Malaysia. (The range of the Kota Bharu ATC radar is nominally 60 NM. IGARI is about 90 NM from Kota Bharu, and therefore not visible to the Kota Bharu ATC radar.)

Unfortunately, after many requests, the raw military data of MH370 has never been released by the Malaysian authorities. What we do have are low resolution images from official reports that depict the path of the aircraft. We also have filtered speed and track data that has been digitized from graphical data presented in a report from Australian authorities. Neither of these data sets provides the level of resolution and accuracy that would allow us to independently study the details of the path after passing IGARI, including the details of the turnback.

The figure below shows the military radar data (fuzzy yellow line) that was officially released in a low-resolution image, and enlarged here to show the path near IGARI. In the image, the bulls-eye was labeled “Last secondary radar data 1722”. For reference, the waypoints IGARI and BITOD were added to the image, as well as the ADS-B data (red) and the IGARI-BITOD route leg (black). The box (orange) around IGARI represents the much smaller area shown in the previous image.

There are some obvious discrepancies between the military data shown above and the ADS-B data shown in the previous figure. For one, the military data shows the turn towards BITOD starting after passing over IGARI. This “flyover” of IGARI is not consistent with how an aircraft following an automated path during the cruise part of the flight would turn between waypoints. If this path was actually flown, it would suggest that the navigational mode was not LNAV near IGARI.

The location of the last ATC radar point (the bulls-eye) is also different in this image from what the ADS-B data suggests. The ADS-B data shows that the transponder was disabled when MH370 was abeam IGARI. However, the image above shows the last ATC radar point occurring after the turn towards BITOD was completed. This could be because what is shown was extrapolated from the final transponder reply in what is referred to as “coasting”.

The military data also shows an impossibly sharp turn to the left occurred. Despite numerous requests, Malaysian officials have never provided an explanation for the false depiction of this turn.

These discrepancies indicate that the military data near the turnback should be used with caution. It’s possible that the radar installation that captured the turnback was Western Hill on Penang Island, and the turnback was near the maximum range of the radar site. (IGARI is about 220 NM from Western Hill.) If so, the inaccuracies might be from limitations of the military radar coverage this area. As such, the path depicted in the image may have been extrapolated from missing or inaccurate data, and should be assigned an appropriate level of uncertainty.

Finally, shown in the figure are the “entry and exit waypoints” of the turn that were supplied by the military and used by Malaysian safety investigators to study how the aircraft was flown after IGARI. As described in the Safety Investigation Report, simulations performed by the Malaysian investigative team matched the timing and position of the entry and exit waypoints of the turn only when the aircraft was manually flown with a steep bank angle of around 35°. However, considering the suspected inaccuracies in the military data, the conclusion that the turnback was manually flown should be re-visited. For instance, if the turn was begun prior to the entry waypoint, it would be possible to reach the exit waypoint at the proper time with a bank angle of 25°, which is a selectable bank angle when either of the autopilot modes “Heading Select” or “Track Select” is chosen.

Timing of Events Near IGARI

According to the Safety Investigation Report, the final radio transmission from MH370 occurred at 17:19:30. The following list shows the timing of this event along with the timing of the last three ADS-B points:

17:19:30 Last radio transmission (“Good night Malaysian Three Seven Zero”)
17:20:33.61 Last ADS-B point with altitude reported
17:20:34.15 First ADS-B point with no altitude reported
17:20:34.55 Last ADS-B point, no altitude reported

In a Boeing 777, the transponder may be disabled in the cockpit with a mode selector switch located on the pedestal between the left and right seats. The selector switch for the transponder, shown below with the label (1), would be set to standby (STBY):

During the time that the transponder was operating with altitudes reported, it was either in the switch position designated “TA/RA” for full functionality, or “TA ONLY” to suppress Resolution Alerts, or “ALT ON” to suppress both Traffic and Resolution Advisories. (TAs and RAs are part of the aircraft’s traffic collision avoidance system.) In order to select STBY from one of these three positions, it’s required to pass the intermediary position labeled “ALT OFF”. In this position, the transponder is replying to interrogations and is transmitting ADS-B data. However, there is no altitude data included in the replies and broadcasts.

Looking at the final ADS-B messages, we see that the altitude is missing for the last two messages, spanning a time of less than one-half of a second. This could mean that the intermediate switch position ALT OFF was captured as the selector switch was rotated to the standby position.

The time interval between the last radio transmission from the crew and the first message with no altitude reporting is 64 seconds. If the diversion from the flight path was caused by a third party forcing their way into the cockpit and taking control, those events would have to have occurred in 64 seconds or less. It is very unlikely that this could have been achieved by a third party in such a short amount of time.


New tracking data that has only recently become available gives us new insights as to how MH370 was flown before it disappeared from ATC radar:

  • At the time the transponder was disabled near IGARI, the ADS-B data shows a path that is consistent with normal automated flight in LNAV mode following a programmed route from IGARI to BITOD.
  • Discrepancies near IGARI between the ADS-B data and the military radar data suggest that the radar data has inaccuracies possibly because of the range limits of the radar installation on Western Hill on Penang Island.
  • The Malaysian investigators’ conclusion that the turnback after IGARI was manually flown should be re-visited in light of the demonstrated limited accuracy of the military radar data near IGARI.
  • The final ADS-B points may have captured an intermediate switch position as the transponder’s selector switch was rotated towards the standby position.
  • After the last radio transmission from MH370, the maximum time available to disable the transponder and divert the aircraft was 64 seconds. That leaves an impractically small amount of time for a third party to enter the cockpit and take control.

We now have better ADS-B data for understanding how MH370 was flown up to the point that the transponder was disabled at 17:20:35. This complements the primary radar data from Kota Bharu that starts at 17:30:33. However, we are still missing the military radar data that would cover the 10-minute gap between these two data sets. That gap includes the left turn at the start of the diversion that put MH370 on a course back over Malaysia.

It is important for Malaysia to release this closely-held military radar data so that other investigators that are working to solve this mystery can perform independent analyses of how the aircraft was flown during the turn back to Malaysia. Whatever strategic reasons there might have originally been for withholding the military data are no longer relevant more than 5 years after the disappearance.

Fellow IG members Mike Exner and Don Thompson have provided valuable comments to this article.

Posted in Aviation | 630 Comments »

MH370 Family Member: Give Us the Truth

Narendran (Naren) KS, who lost his wife Chandrika on MH370, on Twitter says: Yes, give us the truth. Not too many people we know are convinced that 459 pages of the 2018 report is the sum total of all that is known regarding the disappearance of MH370. The following note accompanies his Tweet.


My family and friends in India send you their greetings.

Unlike previous years, I have been ambivalent about making this trip. I have searched hard to understand this. It is almost 5 years since I saw off my wife, Chandrika, and the last we heard from Malaysia Airlines flight MH370, the flight she boarded en route to Mongolia.

It has been a long haul dealing with loss and rebuilding a life, a task that remains incomplete. What became clear is that lately the cloud of sorrow and despair, the listlessness with life in general, and the restlessness with the MH370 search and investigation has become less intense.

What remains is the solidarity with the MH families, their loss and struggles to cope, to envision a future and reconstruct their lives. This only grows as each nuance in a shared language of loss, grief and reconstruction becomes more widely shared and understood.

5 years is a long time.

Among the MH families, the old have grown older. Some whose will to live was broken by irreconcilable loss believe they have nothing left to live for.

Among the young, some have by now moved on to pursue studies, take up jobs, moved home, find partners, have babies, … Somethings to cheer about and remind ourselves that winter is not the only season, each day isn’t always drab, and the sky isn’t only grey.

However, many among us continue to struggle while applying ourselves to the chores of daily existence. For all of us, knowing what happened to MH370 remains the key to unlock a part of our lives, our energies.

Our prayers have remained unchanged: Find the plane. Find the passengers. Give us answers to ‘what’, ‘why’, ‘how’ and if it comes to it, ‘who’.

Give us the truth.

Yes, give us the truth. Not too many people we know are convinced that 459 pages of the 2018 report is the sum total of all that is known regarding the disappearance of MH370. Those who know more but have chosen silence, if indeed there are some, will eventually die a thousand deaths each day, for guilt is a latecomer but an unforgiving squatter. It is the order of things and not what we would wish for them.

In this search for the truth, there isn’t a Malaysian truth, an Australian truth, a British truth or an American one. Or (even) an Indian and a Chinese one. There were 239 passengers from 14 countries. An international mix of nationalities. A Boeing 777, an American company’s product. The incident is believed to have occurred in the Indian Ocean, in international waters. The investigation is governed by the conventions written in by the International Civil Aviation Organization. Experts from across the world when consulted or otherwise, have weighed in with their analysis and recommendations regarding the search. It is an event that concerns, every airline, every passenger and perhaps almost every family across the world exposed to civil aviation.

To suggest as some do that it should be left to Malaysians to script the story and the end game does not cut ice. If anything, the fact that it was a Malaysian airline’s flight under Malaysian air traffic control and Malaysia’s leadership of the investigation places an unshakable burden of responsibility to the world at large….to persist, to mobilize the funds necessary, and to hunt for the credible evidence for further search that it never tires of reminding us as being a requirement. It also has responsibility to test the claims of those who proclaim new knowledge, new evidence and fresh coordinates, and offer a public, transparent well-argued refutation if indeed that is what will end misguided or false narratives.

The best tribute we can offer to those we have lost is through demonstrating the will to find credible answers, fix the issues and assure the world that more lives will not lost in future to similar incidents.

A new Malaysia under this new Government has been the source of new fledgling hope.

To those who have fallen silent travelling on MH370, we remain respectful and eternally indebted for the time they shared with us. To those who have offered silent support, those who have lent their voice and those who have sent their prayers, we remain grateful. We draw strength from your little acts of kindness, words of solidarity, and your quest for the truth – whichever corner of the earth you seek it from.

Questions have a way of persisting and even outliving you and me till satisfactorily answered. I go back to pick up the threads of my life in Chennai secure and with faith that one day we will know.

Thank you.

Posted in Aviation | 612 Comments »

MH370 Flight Around Penang

MH370 Path around Penang Island. (Click on image to enlarge.)


The civilian radar data for MH370 that became publicly available in April 2018 provides insights as to how MH370 was flown after the transponder was disabled around 17:20:31 UTC. After flying by waypoint IGARI and turning back, the aircraft passed to the north of Kota Bharu Airport, crossed the Malaysian peninsula in a southwest direction, passed to the south of Penang Island, turned to the northwest, and flew over the Malacca Strait. Here, we look more closely at the flight path as it flew towards, around, and away from Penang.

In order better understand the sequence of inputs to the flight control system, we created a simulation using the PMDG 777 model in Microsoft Flight Simulator. In particular, we studied whether the aircraft might have been flown with the pilot providing inputs to the autopilot, and what those inputs might have been.

Although we can calculate the groundspeed from the radar data, the altitude of this portion of the flight is not known. In the simulation, the flight segment near Penang was flown with the assumption of a level flight at FL340 and at Mach 0.84, and with representative meteorological data. These assumptions are consistent with the observed groundspeeds of around 510 knots. Within a reasonable range, the assumptions about altitude, Mach number, and atmospheric conditions do not materially change our observations and conclusions for this portion of the flight.


A flight simulation with the autopilot engaged was created in the following manner:

  1. In the Flight Management Computer (FMC), Penang Airport (WMKP) was set as the destination, and the procedure for an arrival to the ILS04 Runway via the BIDM1A standard terminal arrival route (STAR) was selected. The waypoints for this complete route would be BIDMO- PUKAR-ENDOR-MEKAT-KENDI-CF04-FF04-RW04. The final three waypoints are the final approach course fix, the final approach fix, and the runway threshold, in that order, for an ILS approach to Runway 04.
  2. Of these waypoints, all are deleted from the route except ENDOR and FF04. VAMPI is added after FF04.
  3. The aircraft approaches ENDOR with the autopilot engaged and LNAV selected. After passing ENDOR, the aircraft automatically turns towards FF04.
  4. About 2 NM before FF04, TRK SEL is chosen and the pilot turns the selection knob to steer towards OPOVI using the map in the navigational display (ND) as a guide. The aircraft passes FF04 about 0.4 NM to the right. (If the autopilot had remained in LNAV, the aircraft would not have flown exactly over FF04, as the aircraft would have “cut the corner” as it turned towards VAMPI.)
  5. After passing near OPOVI, TRK SEL of 300° is dialed with a maximum bank angle of 15°. This initiates a turn to the right at 15°. When the track of 300° is approached, the aircraft automatically rolls out of the turn and maintains this track.
  6. Once established on a track of 300°, LNAV mode is selected as the next mode.
  7. At this track angle, the aircraft path converges towards the route leg defined by the waypoints FF04-VAMPI. At about 30 NM from FF04, as the aircraft approaches this leg, the autopilot mode automatically changes from TRK SEL to LNAV, and the route leg is captured.
  8. The plane proceeds in LNAV mode past Pulau Perak and towards VAMPI on the path defined by FF04-VAMPI.

The next figure shows how the waypoints and route legs would appear in the navigation display (ND) in the cockpit after the aircraft had just passed ENDOR and with the route configured as ENDOR-FF04-VAMPI. The route (magenta line) shows the path the aircraft would have followed if the autopilot remained in LNAV mode as the aircraft rounded Penang Island. By comparing the preceding figure with the one below, it is clear that the autopilot changed to a different mode before FF04 and changed back to LNAV mode when the path converged on the LNAV route about 30 NM from FF04.

Navigational display after passing waypoint ENDOR.


There are some interesting observations about this path:

  1. The agreement between the simulated flight path and the civilian radar data is very good, including the intercept and capture of the route leg to the northwest and towards VAMPI. This suggests that this portion of the flight path was flown in autopilot, although it is nearly impossible to prove that the aircraft was not manually flown.
  2. The final civilian radar targets fall close to the path defined by FF04-VAMPI. This suggests that VAMPI was selected as a waypoint before reaching FF04, which further implies that there was an intention to fly northwest over the Malacca Strait and to intercept VAMPI even when the aircraft was near Penang. (The distance between FF04 and VAMPI is 166 NM.)
  3. While in the vicinity of Penang Island, the high measured speed, the implied high altitude, and the selection of VAMPI as a waypoint suggest that there was no true intention to land at Penang Airport.
  4. The selection of VAMPI as a waypoint while in the vicinity of Penang is consistent with the unverified military radar data that was shown to the MH370 family members at the Lido Hotel in Beijing on March 21, 2014. That radar data shows an aircraft that intercepted airway N571 at VAMPI.
  5. Although there was no true intention to land at Penang Airport, the flight path may have been chosen to deceive radar operators into believing there was an intention to land.

Possible Deception to Land at Penang

In the figure below, the flight path from MH370 is plotted together with two recent Air Hong Kong flights (both LD561) for the route Ho Chi Minh City to Penang. These flight paths are representative of arrivals to Penang from the northeast. The LD561 paths do not follow the BIDM1A approach route and bear little resemblance to MH370’s path. Likely, the flight crews received vectors from Butterworth Approach to intercept and establish the final approach on the localizer for Runway 04. One of the flights was established at the final approach course fix (CF04) and the other was established only 3 NM from threshold. In the both cases, the intercept with the final approach course required a turn less than 90°. On the other hand, if MH370 had intercepted the localizer, it would have required a turn of about 135°, which would have been a very sharp turn.

MH370 Path shown with two Air Hong Kong arrivals. (Click on image to enlarge.)

Airline pilot Juanda Ismail noticed that MH370’s crossing of the ILS approach occurs at a similar location and similar intercept angle to what would be flown in the course reversal procedure for ILS04. The procedure is shown in the figure below, and consists of an outbound leg to 7 NM from the threshold of the runway at a track of 222°, a 45° right turn to a track of 267°, a straight leg, a 180° left turn to a track of 87°, a straight leg, followed by a 45° left turn to intercept the inbound approach course on a track of 42°. In the figure above, this same course reversal procedure is represented by the black curve with the arrow.

Approach for ILS (DME LOC) for RW04. (Adapted from Jeppesen.)

In the course reversal procedure, the straight leg at 267° is similar to part of the path that MH370 flew. However, in comparing MH370’s path to the course reversal procedure, it is missing the outbound leg, the 180° turn, and the final intercept. As the altitude for capturing to the glide slope is 2500 ft at FF04 (shown as D7.8 IPG in the figure), clearly there was no intention on the part of the pilot to actually perform the procedure and to land. However, it is possible that by flying an element of the course reversal procedure, there was a deliberate attempt to deceive radar operators into believing that MH370 had an intention to land.

With waypoints ENDOR-FF04-VAMPI selected as the route, there is a question as to why the pilot chose to not remain in LNAV mode when approaching FF04, as this would have turned the aircraft and put it on a direct northwest path to VAMPI without the need for pilot intervention. One explanation is that once a turn to the northwest towards VAMPI occurred, it would be clear to the air traffic controllers at Butterworth that there was no intention to land. Entering TRK SEL mode and steering the plane towards OPOVI before tracking back towards the FF04-VAMPI leg delayed that discovery and also positioned the aircraft to initiate the turn further from Butterworth.

It is also noteworthy that once a northwest track was established, the aircraft was tracking to pass through the restricted area designated WMD-412A. This would be expected to draw the attention of the military air traffic controllers at Butterworth. The relationship between the military and civilian ATC is described in this section from the Factual Information released in March 2015:

Provision of approach control service (within lateral limits of Butterworth Control Zone: 5,500 ft. altitude – FL245. (elsewhere 2,500 ft. altitude – FL245). Air traffic to/from the civilian Penang International Airport (PIA) is provided by military ATCOs who have been licensed by the ATI Division develops and establishes the ANS safety standards and performs safety oversight and to ensure the provision of services to civil traffic. The rationale for such an arrangement is based on the military activities at Butterworth Military Airport (BMA) which is in close proximity to PIA, and other military activities carried out over the high seas in danger areas WMD 412A and WMD 413A (permanently established). Furthermore, the final approach segments of both the PIA and the BMA intersect. No major incident has been recorded with the present arrangement/delegation of authority.


  1. MH370’s flight path near Penang can be replicated with the autopilot engaged.
  2. The flight path near Penang is consistent with a navigation system that is fully operational.
  3. It is likely that waypoint VAMPI was entered in flight computers before crossing the approach path to runway ILS04, some 166 NM away.
  4. The flight path near Penang is consistent with the image of the military radar data in the Malacca Strait that was never officially released.
  5. It is very unlikely that there was an intention to land at Penang Airport.
  6. It is possible that the elements of the flight path near Penang were chosen to deceive radar operators into believing that the aircraft had an intention to land.


I gratefully acknowledge the helpful comments and suggestions offered by fellow IG members Don Thompson, Richard Godfrey, and Mike Exner.

Posted in Aviation | 458 Comments »

New MH370 Debris Suggests a High Speed Impact


Blaine Gibson holds new MH370 debris, accompanied by a fisherman who found the part in Madagascar

Today Blaine Gibson and other MH370 family members delivered to Malaysian authorities five new pieces of debris that are believed to be from the missing aircraft. The parts were found as a result of a campaign led by Blaine and the families to make the residents of Madagascar more aware of debris from MH370 that has drifted across the Indian Ocean and continues to land on the shores of East Africa.

Blaine has provided photographs and descriptions of the five parts, which are made available here in a zipped file. More recent high-resolution photographs are available here. The most recently discovered part (Part 5), pictured above, was found by a local fisherman this past August.

One piece of debris (Part 3) was identified by MH370 Independent Group (IG) member Don Thompson as a shattered piece of the interior floorboard of a Boeing 777. The part’s location in the B777 and the nature of the damage is consistent with a high speed impact, and therefore has probative value.

Fragment of floorboard of MH370

Identification of the Floorboard Piece

IG members Don Thompson and Mike Exner assisted Blaine in identifying the floorboard piece, and Don documented his findings in a report. An important clue was the piece contained a portion of a placard with the identifying characters WPPS61. Don was able to determine that the full placard number is BAC27WPPS61. This type of placard is affixed to high strength panels of material specification BMS4-20, which is used as flooring  material in passenger compartments of commercial aircraft, including the Boeing 777-200ER. Amazingly, Don was able to find a similar placard affixed to the floorboard of wreckage from MH17, which was also a Boeing 777-200ER. This leaves little doubt that the piece recovered from Madagascar is from MH370.

Portion of floorboard placard showing characters WPPS61


The new debris gives us additional insight about where and how the aircraft impacted the sea. In light of the past efforts to find the aircraft, there are three main possibilities that remain:

  1. The aircraft impacted the ocean relatively close to the 7th arc, but at a latitude further north than the area previously searched.
  2. The aircraft impacted the ocean at a latitude previously searched, but farther from the 7th arc than previously assumed.
  3. The aircraft debris field was in the subsea area previously scanned by sonar, but was either missed or misidentified.

Sources close to the previous search effort believe (3) is very unlikely, as there was a thorough review of the sonar data by multiple parties with high levels of experience, and because any “points of interest” were scanned multiple times to ensure the resolution was adequate to make a determination with a high level of confidence.

When considering the satellite data, the final two BFO values at 00:19 UTC are consistent with an aircraft at an increasingly high rate of descent. The new debris and some of the previously recovered debris also suggest that the aircraft impacted the ocean at high speed. That means that (2) is possible only if the aircraft first was in a rapid descent (producing the final BFO values), and then the pilot skillfully recovered from the rapid descent and glided some distance away from the 7th arc beyond the width of the subsea search, and then later the aircraft again descended at high speed and impacted the sea (producing the shattered debris). This sequence of dive-glide-dive is considered by many to be a very unlikely sequence of events, although it cannot be completed dismissed.

What is left is possibility (1). This suggests future subsea search efforts should proceed along the 7th arc, starting where the last search ended near 25S latitude, and continuing farther north. (In a previous blog post, I showed that an automated flight ending along the 7th arc at 22S latitude is possible.)

The part recovered in Madagascar in August 2018 was the latest in a series of finds that began with the discovery of the flaperon on Reunion Island in July 2015. Because of the wide range of discovery times, and because there is an undefinable delay between when a part arrives on a beach and when it is discovered, it is difficult to use the timing and location of debris discoveries to precisely pinpoint where to search for MH370.

Finally, the new debris finds illustrate the critical role of independent investigators in the search for MH370, and one investigator in particular. The local communications campaign to educate residents of Madagascar about debris washing ashore was spearheaded by Blaine Gibson with the help of some of the MH370 families. Blaine has also done a commendable job of developing a local network to help recover the debris after discovery. We have to wonder if additional debris is sitting on the shores of other countries like Tanzania, Kenya, and Somalia, where there were no similar campaigns to alert and organize the residents.

Links in this article:

Photographs and description of debris provided by Blaine Gibson

Additional high resolution photographs of debris

Identification of the piece of floorboard by Don Thompson

Reconstructed path ending near 22S latitude by Victor Iannello

Posted in Aviation | 842 Comments »

Ocean Infinity Finds Argentine Submarine, After Not Finding MH370

Sonar image of the debris field of the ARA San Juan (Armada Argentina).

About one year after its disappearance, one of Ocean Infinity’s (OI’s) autonomous underwater vehicles (AUVs) has detected the remains of the missing Argentine submarine, the ARA San Juan. From Ocean Infinity’s website:

Ocean Infinity, the seabed exploration company, confirms that it has found ARA San Juan, the Argentine Navy submarine which was lost on 15 November 2017.

In the early hours of 17 November, after two months of seabed search, Ocean Infinity located what has now been confirmed as the wreckage of the ARA San Juan. The submarine was found in a ravine in 920m of water, approximately 600 km east of Comodoro Rivadavia in the Atlantic Ocean.

Oliver Plunkett, Ocean Infinity’s CEO, said:

“Our thoughts are with the many families affected by this terrible tragedy. We sincerely hope that locating the resting place of the ARA San Juan will be of some comfort to them at what must be a profoundly difficult time. Furthermore, we hope our work will lead to their questions being answered and lessons learned which help to prevent anything similar from happening again.

We have received a huge amount of help from many parties who we would like to thank. We are particularly grateful to the Argentinian Navy whose constant support and encouragement was invaluable. In addition, the United Kingdom’s Royal Navy, via the UK Ambassador in Buenos Aires, made a very significant contribution. Numerous others, including the US Navy’s Supervisor of Salvage and Diving, have supported us with expert opinion and analysis. Finally, I would like to extend a special thank you to the whole Ocean Infinity team, especially those offshore as well as our project leaders Andy Sherrell and Nick Lambert, who have all worked tirelessly for this result.”

Ocean Infinity used five Autonomous Underwater Vehicles (AUVs) to carry out the search, which was conducted by a team of approximately 60 crew members on board Seabed Constructor. In addition, three officers of the Argentine Navy and four family members of the crew of the ARA San Juan joined Seabed Constructor to observe the search operation.

Ocean Infinity had committed to conduct the search operation for up to sixty days, and to take on the economic risk of the search, only receiving payment if the submarine was found.

Position Estimates from Acoustic Measurements

The debris field is centered at (-45.9499,-59.7730). Meanwhile, after analyzing the hydro-acoustic data from CTBTO sensors that was collected on Nov 15, 2017, the hot-spot was estimated to be centered at (-46.12,-59.69). That’s a distance of only 20 km, which is an impressive demonstration of the capabilities of the hydro-acoustic analysis.

There was a test explosion on Dec 1, 2017, that was used to calibrate and verify the position estimation model. The position error of the test explosion was 37 km. Therefore, the position error for the debris field was well within what was expected based on the test explosion.

An interesting description of the CTBTO’s hydro-acoustic analysis is presented here.

Implications for the Search of MH370

Unfortunately, the acoustics generated by the impact of MH370 on the ocean surface would not propagate along the “deep sound channel” (DSC) the way an underwater acoustic event does, so the impact likely was not detected by CTBTO sensors.

The San Juan’s debris field was detected earlier this month only after an AUV mission was conducted in a deep trench that was previously scanned from a higher altitude in September. The ability to skim about 100 meters above the challenging surface contour allowed the side scan sonar sensors in the AUV to collect data at the proper altitude to achieve the required image resolution. Because of its limited ability to glide above steep slopes, this resolution would have been very difficult to achieve using a “towfish”, which is a cable-towed underwater vehicle that is similarly equipped with side scan sonar sensors, but is much more limited in maneuverability than an AUV.

The initial seabed search for MH370 was conducted by the vessels Fugro Discovery, Fugro Equator, and GO Phoenix, each using a towfish. These vessels scanned about 120,000 square kilometers of seabed using this technology. Based on the failure of OI to detect the San Juan’s debris field until an AUV mission was conducted in a trench, we have to at least consider the possibility that that the debris field for MH370 was passed over in the initial search but was not detected due to challenging terrain.

In the coming weeks, we’ll learn more about what worked and didn’t work in the search for the San Juan. That knowledge should be applied to MH370 to determine if we can confidently eliminate all of the seabed that has been previously searched.

Update on November 18, 2018

The ATSB did provide statistics for estimating the confidence of detecting MH370 in the 120,000 square kilometers that were initially scanned primarily by towfish. Those statistics are presented in the figure below. About 97.4% of the total area had a detection confidence of 95%, based on the ability to detect a debris field with dimensions of 100 meters by 100 meters. About 2.1% of the area had a detection confidence of 70%, mostly due to difficult terrain, environmental conditions, or degraded data. About 0.5% of the area had no data. The aggregate probability to detect MH370 in the 120,000 square kilometers is therefore about 94%. Although this is high, it is not 100%.

Don Thompson and Mike Exner provided helpful comments for this article.

Area coverage statistics for the ATSB seabed search (ATSB).

Posted in Aviation | 282 Comments »

Crash Debris from Lion Air JT610 Provides Clues about MH370

Lion Air flight JT610, with 181 passengers and 8 crew, was climbing out of Jakarta on a flight to Pangkal Pinang (Indonesia) when control was lost at around 5,000 ft. Soon after, the Boeing 737-MAX 8 aircraft crashed into the Java Sea northeast of Jakarta. Although we don’t know the cause of the crash, there were some anomalies noted on the previous flight related to sensor disagreements for speed and altitude which required maintenance. Some suspect that these previous issues might have been related to the crash. Luckily, the flight data recorder (FDR), commonly known as a “black box”, was recovered, and the approximate location is known for the cockpit voice recorder (CVR), the other “black box”, so there is a good probability that the cause of the crash can be determined.

Investigators are now claiming they have recovered 69 hours of data from the FDR, which would be sufficient to analyze JT610 as well as the preceding flight which had the anomalous behavior.

The last ADS-B data that we have from Flightradar24 has the aircraft at an altitude of 425 ft, a groundspeed of about 360 knots, and a descent rate of 30,976 fpm. That translates to an approximate true airspeed of 472 knots and a descent angle of about 40 deg. That suggests the aircraft impacted the sea with very high energy. Similarly, the final BFO values for MH370 suggest a downward acceleration of about 0.7g over 8 seconds, reaching a descent rate of about 15,000 fpm. Unless a pilot was at the controls and skillfully recovered from this descent, MH370 also impacted the sea with high energy. Therefore, the debris produced from the JT610 crash gives us some indication of the types of debris probably produced from the crash of MH370.

Indonesia’s National Search and Rescue Agency (BASARNAS) is in charge of the rescue and recovery operation for JT610, which is in water about 100 feet deep, with efforts reportedly hampered by strong underwater currents and limited visibility. Already one volunteer diver has lost his life while recovering body parts.

The video at the top shows floating debris for JT610. If the objects shown are truly representative of the main field of floating debris, it is evidence that a high speed impact produces only small floating parts spread over a fairly limited area. Now admittedly, a B777 is considerably larger than a B737, and the floating debris field should be easier to find. However, the surface search for MH370 in the Southern Indian Ocean (SIO) from the air began weeks after the disappearance, and the dispersive effects of waves and currents in the SIO are strong. The combination of a dispersed field and small parts might explain the failure for the air search to detect floating objects along the 7th arc. The small size of the floating parts might also explain why satellite images along the 7th arc have not spotted aircraft debris.

Despite the likelihood of small floating debris, the underwater searchers for MH370 expect to find a fairly substantial debris field (bigger than 100 m) and substantial, distinguishable objects such as the landing gear and engines, consistent with the debris field of Air France 447. This is also consistent with the parts of JT610 that have already been found on the seabed. For instance, the picture below shows an engine and part of the landing gear of JT610.

To locate parts on the seabed, BASARNAS is using a combination of technologies, such as multi-beam echo sounders (MBES), side-scan sonar (SSS), magnetometers, and remotely-operated vehicles (ROV). The SSS technology has been the workhorse for the subsea search of MH370, used in both the towed vehicles and the underwater drones.

The video below shows divers helping to retrieve debris from the seabed.

The debris recovered from the crash of JT610 helps explain why no MH370 floating debris was spotted by air and by satellite along the 7th arc, and why we remain hopeful that it will be detected on the seabed with sonar sensors once the correct search area is selected.

Update on November 13, 2018

Here’s a Wall Street Journal story that discusses the stall-protection system that likely led to the crash of JT610.

Boeing Withheld Information on 737 Model, According to Safety Experts and Others

Data related to a new flight-control feature suspected of playing a role in crash in Indonesia

By Andy Pasztor and Andrew Tangel
Nov. 12, 2018 11:16 p.m. ET

Boeing Co. withheld information about potential hazards associated with a new flight-control feature suspected of playing a role in last month’s fatal Lion Air jet crash, according to safety experts involved in the investigation, as well as midlevel FAA officials and airline pilots.

The automated stall-prevention system on Boeing 737 MAX 8 and MAX 9 models—intended to help cockpit crews avoid mistakenly raising a plane’s nose dangerously high—under unusual conditions can push it down unexpectedly and so strongly that flight crews can’t pull it back up. Such a scenario, Boeing told airlines in a world-wide safety bulletin roughly a week after the accident, can result in a steep dive or crash—even if pilots are manually flying the jetliner and don’t expect flight-control computers to kick in.

That warning came as a surprise to many pilots who fly the latest models for U.S carriers. Safety experts involved in and tracking the investigation said that at U.S. carriers, neither airline managers nor pilots had been told such a system had been added to the latest 737 variant—and therefore aviators typically weren’t prepared to cope with the possible risks.

“It’s pretty asinine for them to put a system on an airplane and not tell the pilots who are operating the airplane, especially when it deals with flight controls,” said Capt. Mike Michaelis, chairman of the safety committee for the Allied Pilots Association, which represents about 15,000 American Airlines pilots. “Why weren’t they trained on it?”

One Federal Aviation Administration manager familiar with the details said the new flight-control systems weren’t highlighted in any training materials or during lengthy discussions between carriers and regulators about phasing in the latest 737 derivatives.

Boeing declined to immediately answer specific questions Monday. “We are taking every measure to fully understand all aspects of this incident, working closely with the investigating team and all regulatory authorities involved,” the company said in a statement. “We are confident in the safety of the 737 MAX.”

On Monday, an FAA statement reiterated that the agency had mandated flight manual changes to emphasize proper pilot responses to the new flight-control systems. “The FAA will take further action if findings from the accident investigation warrant,” the statement noted, but declined to comment further.

Boeing marketed the MAX 8 partly by telling customers it wouldn’t need pilots to undergo additional simulator training beyond that already required for older versions, according to industry and government officials. One high-ranking Boeing official said the company had decided against disclosing more details to cockpit crews due to concerns about inundating average pilots with too much information—and significantly more technical data—than they needed or could digest.

Minutes after takeoff from Jakarta in good weather, Lion Air Flight 610 experienced problems with airspeed indicators and a related system that feeds data to computers about the angle of the nose. The crash killed all 189 people on board.

Investigators haven’t described the precise sequence of events that caused the twin-engine jet to plummet into the Java Sea at a steep angle and high speed. But Indonesian authorities already have called for stepped-up pilot training and suggested they are delving into design issues. In the U.S. at least, substantial training changes will have to wait until new flight simulators are delivered to carriers.

The focus of the probe is shifting away from its early emphasis on individual system malfunctions and suspected pilot mistakes, according to people tracking developments.

Instead, these people said, U.S. and Indonesian crash investigators increasingly are delving into the way the MAX 8’s automated flight-control systems interact with each other, and how rigorously the FAA and Boeing analyzed potential hazards in the event some of them malfunction and feed incorrect or unreliable data to the plane’s computers. Swiftly turning off the automated feature is the solution in such cases.

Earlier 737 versions have different stall-protection systems, that don’t automatically drive down the nose even when other functions of the plane’s autopilot are turned off.

Yet operation of those older systems was highlighted in training over the years, and pilots had to memorize steps to counteract potentially dangerous unintended consequences. MAX 8 training materials don’t include a requirement to memorize the steps to turn off the stall-protection system.

Stepped-up scrutiny of the latest 737 MAX features applies to more than 200 of the models that have been delivered to customers around the world, including Southwest Airlines , American Airlines and United Airlines. Boeing’s 737 factory near Seattle currently churns out 52 planes a month.

“We’re pissed that Boeing didn’t tell the companies and the pilots didn’t get notice obviously, as well,” said Capt. Jon Weaks, president of Southwest Airlines Co.’s pilot union. “But what we need now is…to make sure there is nothing else Boeing has not told the companies or the pilots.”

Like Mr. Weaks, some FAA managers and industry officials aren’t satisfied with what they contend is Boeing’s belated candor.

Boeing is working on a software fix, according to industry and government officials, that would likely mitigate risks. On Saturday, the company went further than before in spelling out dangers pilots can face if they misinterpret or respond too slowly to counter automated commands.

In a message sent to all 737 operators, and reviewed by The Wall Street Journal, the Chicago plane maker explained in painstaking detail the engineering principles and operational parameters behind the latest automation.

That message was more detailed than the bulletin Boeing voluntarily issued earlier, alerting pilots about the potential hazard—and touching off debate over the stall-prevention system’s design. Within hours, the FAA followed up with its emergency directive mandating changes in flight manuals.

Such interim efforts “are very appropriate in the near term to increase pilot awareness,” said John Cox, a former 737 pilot and ex-crash investigator for North America’s largest pilots union who now consults on safety for carriers and business aviation.

Boeing’s latest communications with airlines prompted American’s union to alert its members. “This is the first description you, as 737 pilots, have seen,” the union pointedly told pilots in a memo, referring to the 737 MAX stall-prevention system. Noting the system wasn’t mentioned in American Airlines’ or Boeing manuals, the union memo added: “It will be soon.”

The ultimate way to counteract dangerous automated nose-down commands is basically the same for old and new systems, though checklists and procedures for the 737 MAX 8 entail more steps and take more time. Investigators and safety experts are convinced that as the emergency worsened, the Lion Air crew had barely seconds in which they could have diagnosed the problem and taken action to save the aircraft.

Shortly before the plane crashed, according to local Indonesian media reports, one of the pilots told air-traffic controllers about difficulties controlling the plane.

Posted in Aviation | 333 Comments »

French Investigation into MH370 Extends to US

Ghyslain Wattrelos, who lost family members traveling on MH370

The article that follows, translated from French, appeared on the website 20 Minutes with AFP:

While all other countries have stopped investigating, France is not giving up. The investigators in charge of the case of the disappearance of flight MH370 of Malaysia Airlines hope to soon go to the United States where crucial investigations must move forward, Ghyslain Wattrelos, who lost four family members in the disaster, announced Thursday.

On March 8, 2014, 239 people disappeared after taking off from Kuala Lumpur aboard a Boeing bound for Beijing. Other than some debris that seem to belong to it were recovered in the Indian Ocean, no trace of the 239 passengers has ever been found. Ghyslain Wattrelos has notably lost his wife and two of his children in the plane’s disappearance.

On Thursday, he was received with his lawyer Marie Dosé by the judge of instruction in charge of the judicial inquiry opened in France, to take stock of the investigations and the avenues to explore by the investigators.

Questions for the FBI and Boeing

Among the priorities that mobilize the investigators, a trip to the United States is “back on the agenda”.  A previous trip was cancelled in September, even though it was part of an international rogatory commission launched in October 2017, they announced at a press conference Thursday. According to Dosé, this trip had to be canceled, as the US authorities opposed “confidentiality clauses” and then the “industrial secret” of the manufacturer Boeing.

“We are a little angry and now we want to say stop, it is time that the United States really cooperate on this issue,” responded Ghyslain Wattrelos. “It is necessary to go there because there are three entities that hold important information for understanding what happened on this flight,” he continued. Starting with Boeing and the FBI, even if the investigators seem to have obtained assurances from the intelligence agency that they could be received, he said.

A hacking of Satcom?

But attention is now also focused on a third entity, a company uncovered by investigators. The challenge, according to Ghyslain Wattrelos, is whether it sells software capable of reprogramming or even hacking the Satcom, the antenna that communicates to the Inmarsat satellite signal from the aircraft. “The essential trail is the Inmarsat data. Either they are wrong or they have been hacked,” he says. However, these satellite data are essential to better understand the trajectory of the aircraft.”

The release of the Malaysian investigation report in July had dampened Ghyslain Wattrelos’ hopes, but since then French investigators have suggested new theories to explore. In particular, the investigators found “inconsistencies” in the Malaysian investigation’s official report, and the presence of “curious” passengers,  whom “we should continue to investigate”. Among them is a Malaysian traveler with a troubling profile: he was seated under the Satcom module, and proved to be an expert in aeronautics, according to Ghyslain Wattrelos and his lawyer.

[End of story]

It’s not clear what additional information the French investigators expect to obtain while in the US. Boeing has cooperated with the Annex 13 investigation team, and is unlikely to provide private French investigators with data that has not already been made public. Meanwhile, the FBI is unlikely to release information on matters related to ongoing or past investigations.

The mysterious “third entity” referred to by Mr Wattrelos that might be selling software capable of maliciously altering SATCOM data is also unknown, although there are a handful of companies in the US and Canada that supply hardware and software for designing, building, and testing parts of the Inmarsat network.

Independent investigators that are studying this mystery are at an impasse. Although the overwhelming consensus is that MH370 did indeed crash in the Southern Indian Ocean, the considerable efforts of official and private investigators have not succeeded in locating the debris field on the seabed. The data we have, notably the satellite data, is imprecise, so additional data is needed to reconstruct the trajectory of the plane.

There is always the chance that during Mr Wattrelos’ visit to the US, some new evidence or insights will be uncovered that help us to better understand the disappearance and to find the plane.

More likely, the existence of helpful new information will be found in Malaysia.

Update on October 23, 2018

The following article, translated from French, was published in the L’Essor, which is the [unofficial, self-described] French journal for the military police.

MH370: Gendarmes waiting for a green light for a trip to the United States

The investigators of the research section (SR) of the Gendarmerie Air Transport (GTA) are waiting for the green light from US authorities to travel to the United States related to the case of the disappearance of the flight MH370 Malaysia airlines, more than four years ago.

The SR of the GTA is responsible for the judicial inquiry, opened in France, on the death of 239 people, including four French, aboard the Boeing who disappeared on March 8, 2014 after taking off from Kuala Lumpur for Beijing. Debris likely to belong to the aircraft have been discovered in the Indian Ocean but no trace of the 239 passengers has ever been found.

The gendarmes work within the framework of an international rogatory commission launched in October 2017 by the French justice. A trip to the United States, scheduled for September, had to be canceled and French investigators are waiting for the green light from the US authorities.

The investigators want to check overseas if a US company sells software capable of reprogramming or even hacking the Satcom. This system is used by airlines to transmit messages about the state of the aircraft in flight and its communications.

[End of story]

This story, if true, suggests that the French judiciary system, and in turn the military police that are assigned to the case, are seriously considering whether the Inmarsat data was corrupted by a malicious intrusion into the SATCOM onboard MH370. Considering that the Inmarsat data is consistent with the aircraft crashing in the SIO near the 7th arc, and that the timing and location of the recovered parts from the aircraft also suggest that the aircraft crashed in the SIO, to doubt the Inmarsat data implies doubting the veracity of the recovered parts. This is the first time a government investigative body is known to be seriously considering a hack of the SATCOM combined with planting of debris.

To say the least, most private investigators believe there are more productive avenues to pursue. However, an honest, competent investigation of any type is to be welcomed, and there is always the chance some new evidence or insights will be uncovered that help us to better understand the disappearance and to find the plane.

Posted in Aviation | 351 Comments »