posted on Nov, 8 2017 @ 10:19 PM
This is crazy.
When you design software that controls a critical system, verifying that input data is valid is a no-brainer. Invalid data should cause the engine
control program to throw an exception all the way back to the central control software. And given the severity of this failure, the central control
shouldn't allow the critical system to come online.
What's even more surprising is that the installer wiped the data files and didn't try to replace them. It's a critical system, so any installation
failure should have rolled back any system changes it made while it was attempting to perform the upgrade.
At the very least a simple script that verifies everything is what and where it is supposed to be once the update completes is pretty simple.
Sounds like this is a problem on the manufacturers side. Airbus should have been able to perform an upgrade like this without relying on the