back to article Schiaparelli probe crash caused by excessive spin, report concludes

The Schiaparelli probe suffered a botched landing on the Martian surface as it briefly spun out of control, confusing the computer systems onboard, an official report concluded today. As the parachute was deployed, the lander rotated at a faster acceleration than expected. It caused the “Guidance Navigation and Control” …

  1. TDog

    About 3.7 km close; is that enough for "very close"?

    1. Orv Silver badge

      Well, out of 56 million km I think it's pretty minor. ;)

      Looked at another way, 3.7 km is about 12,000 feet. When your airline flight descends through 12,000 feet you're generally pretty close to the airport.

      1. Anonymous Coward
        Anonymous Coward

        In your plane analogy, I guess you wouldn't say a pilot who crashed on landing made just a pretty minor mistake, after all he was close, right? Schiaparelli failed exactly the most critical test - being able to land safely on Mars - the very reason of its mission.

  2. Anonymous Coward
    Anonymous Coward

    Why don't they test them on Earth first?

    Drop a dummy load with the same shape/size/weight/balance from a plane over the desert, with any thrusters or parachutes adjusted/adapted to Earth's gravity and atmospheric density. Sure, it isn't an apples to apples test when compared to actually landing on Mars, but it would have caught a lot of the errors (like the infamous metric versus English unit conversion) that have tripped up previous Mars missions, and would stand a good chance of catching Schiaparelli's problem as well.

    1. Orv Silver badge

      Re: Why don't they test them on Earth first?

      The problem is if the parachute is the thing you're trying to test, altering it for Earth's much thicker atmosphere might invalidate the test. A thicker atmosphere will damp out rotations and oscillations a lot faster.

      1. cray74

        Re: Why don't they test them on Earth first?

        The problem is if the parachute is the thing you're trying to test, altering it for Earth's much thicker atmosphere might invalidate the test.

        Yep. Curiosity's record-setting supersonic parachute had numerous failures on Earth. It kept breaking in wind tunnels because the conditions differed from Mars. Curiosity's parachute obviously worked on Mars. Mars Rover 2020 also had some live testing failures in 2015.

      2. Tom 7

        Re: Why don't they test them on Earth first? A thicker atmosphere

        You could make a parachute that would be a pretty close approximation in terms of behaviour to that of the other one on Mars. And as it would be noticeably smaller and could be tested by firing it from a gun, lots of times for not a lot of money.

        1. Orv Silver badge

          Re: Why don't they test them on Earth first? A thicker atmosphere

          You could, but then you're not testing the same item you're using in production. And scale matters a lot in aerodynamics, because you can't scale down the air molecules. This is especially important with things designed to create drag, like parachutes, because they create turbulent flow and the scale that turbulence works on is pretty fixed.

  3. a_yank_lurker

    Testing, testing, testing...

    Are they following Slurp's mantra of 'We don't no stinking testers'? There is only one root cause, inadequate or incompetent testing.

    1. phuzz Silver badge
      Alien

      Re: Testing, testing, testing...

      They tested as much as was possible on Earth, but without an unlimited budget, at some point they had to stop testing and try a trial run, actually on (or rather, above) Mars.

      Something almost as important as testing, is proofreading what you've just written. Just saying...

  4. John Smith 19 Gold badge
    IT Angle

    Given this is a Pathfinder for the main event...

    Think of it as a "crash test dummy" for the main one.

    I'd say someone had not sanity checked the data streams. For example how it was possible to jump from 3.7Km above ground to -50m below ground instantly

    1. Richard 12 Silver badge

      Re: Given this is a Pathfinder for the main event...

      Yes, one would presume that the IMUs would fact-check each other and reject data that clearly "can't be right".

      However, choosing those limits is probably quite difficult.

      1. Anonymous Coward
        Anonymous Coward

        Re: Given this is a Pathfinder for the main event...

        However, choosing those limits is probably quite difficult.

        Rejecting negative altitudes wouldn't seem that difficult, nor would "enveloping" each parameter to exclude obvious outliers. The real problem is whether there's sufficient different data to inform a choice of which is most probably correct, and what to do next when the systems receive data that cannot be trusted.

        Scientific exploration is always risky, but the loss of Schiaparelli still seems to have a ring of undue carelessness in a €230m project. Conflicting or palpably wrong data has been a control issue since men first started fitting sensors on machines. And it isn't as if there's plenty of precedents, particularly in aviation - the root cause of the loss of AF447 in 2009 was the inability of the automatic control systems to cope with sensor data conflicts. And modelling control systems on Earth should be amongst the easiest parts of the whole task - but as we all know, software testing is the dullest, least rewarding, most under-appreciated part of any code-related exercise.

        1. RPF

          Re: Given this is a Pathfinder for the main event...

          Sad to say, the root cause of the AF447 crash was extremely inept flying.

  5. DNTP

    As they say in school

    "If your barometric altimeter is in negative, you're not in Death Valley or the Netherlands, and not exploding into flaming pieces... odds are its not working correctly."

    1. Kernel

      Re: As they say in school

      "If your barometric altimeter is in negative, you're not in Death Valley or the Netherlands, and not exploding into flaming pieces... odds are it's not working you've not set the QNH correctly."

      FTFY

  6. Winkypop Silver badge

    "very close to [landing]"

    "gaping hole measuring 15 by 40 metres across"

    If being lower than the actual landing site is the result, then you are TOO close.

  7. Allan George Dyer
    Joke

    Several recommendations...

    "updating onboard software"

    Most people would think it's a bit late for that, but, if you want to try, you'll need a shovel, glue, and a trip to Mars.

    1. TReko
      Joke

      Re: Several recommendations...

      What they need is a spin doctor

  8. Alan J. Wylie

    Ariane 5

    lander rotated at a faster acceleration than expected

    Some similarities to the Ariane 5 Explosion, where an accelerometer value in a 64 bit floating point value overflowed when converted to a 16 bit signed integer.

  9. aks

    Optional

    Seems to me that Schiaparelli got dizzy.

    In IT, developers often don't think about such 'edge effects' including texts for overrun, underrun and divide by zero. Testers are needed who's job, and great delight is to break the system.

  10. Anonymous Coward
    Anonymous Coward

    Along with mass "To:" emailings ??

    Whenever I read of one of this hilarious snafus where someone manages to put a stupid number of email addresses in the "To:" field, I find myself wondering why there aren't mechanisms

    1) to alert the user if more than <x> addresses are in the "To" field

    2) to configure the server to prevent - or at least flag up - instances where an email is sent to more than <x> people ...

    similarly, there should have been something in the code to reject out of bounds readings.

    Now when I were a lad (30 years ago) we learned to buffer inputs from devices, and compare them over a period - maybe average out the last 10 readings. Why ? To avoid a spike triggering an action. I have to ask if there was something like this being used or not ?

  11. Stevie

    Bah!

    "Very close to a success" or as human beings say "fail". Why is is so difficult for Schiap Chaps to admit this? Someone fucked up.

    And as usual, that someone was a programmer, sorry, software architect, who in a move of staggering incompetence wrote a critical routine that had no "gibberish result" check.

    Nought out of ten. Go and read "Object Oriented Software Construction" and fucking well pay attention to the basic rule about unspecified results.

    1. Mark 85

      Re: Bah!

      Possible that the issue wasn't the programmer. He/she might have only been following directions and the person who wrote the specs for the program blew it. If they're high enough in the "corporate structure", blame will flow downhill.

    2. Jim Birch

      Re: Bah!

      "Nought out of ten. Go and read "Object Oriented Software Construction" and fucking well pay attention to the basic rule about unspecified results."

      Bah x2! When was the last time you pulled off a project this complex with zero screw ups that required patching? This is an incredibly complex project with what by normal standards a deficient test capability.

      Ego stroking won't improve anything. Any dickhead can do that. Running a witch hunts is known to increases future failures. You do the full and frank analysis, incorporate changes to systems and process and move forward. To do that, you need the right environment, ie. you need to put a bit of ego aside.

      1. Stevie

        Re: Bah!

        Complicated???

        What the fuck is complicated about defining the legal domain of an altitude calculation to be a POSITIVE INTEGER?

        Or in using a violation of that to start the process of taking measures to, you know, not plough into the Martian regolith at maximum wellie?

        We've known how to tell negative numbers from positive ones in code for a few years now, way before the commissioning of The Martian High-Cost, High-Speed Impacter.

        My original outraged comment stands.

  12. annodomini2
    Coffee/keyboard

    Still curious

    Send a rover there, normally they have a drill to cut into things, this has blasted a great big hole in the ground, revealing things, could make for some useful research.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like