I’ve read each book they’ve published and enjoyed them all.
I've received checks with watermarks, temp-sensitive ink, you name it, and I almost never walk into a branch anymore. As long as the mobile app works, the image is the negotiable instrument, and I can't change what others give me.
To give an idea of the kinds of things you can do now:
- Keys or other secrets can only be decrypted (via KMS) by an EC2 instance if it is running an approved AMI.
- You could build a certificate authority (CA) which only issues a certificate to an instance running an approved AMI.
This is similar to the functionality that was available in Nitro Enclaves. However, enclaves came with restrictions (such as only being able to communicate through a vsock) that made them not a great fit for all use cases.It is known that the switches were set to "cut-off" because they were then later restored to "run", so it was not an electrical fault (i.e. switches pointing to run but reporting cut-off).
Pilot dialogue and engine telemetry confirms the cause of power loss was fuel cut-off.
The question I can't help but think is how did the pilot realize it was the cut-off switches?
I'm sure there's a warning message for them somewhere but in the few seconds of time when you're losing thrust right after rotate, and you're bombarded by a lot of warnings and errors on the screen and in the speakers: how likely are you to notice the fuel cut-off switches have been flipped?
Those switches are something you never, ever think about during operation because you're trained to only operate them when starting up and parking (and yes, in an emergency where you need to shut down the engine quick).
How long would it take for an average pilot to realize it's not one of the dozens of memory items pointing to more likely scenarios causing loss of thrust, ones that they've been training to check in case of an imminent emergency? And why didn't the first pilot who was recorded to notice the fuel cut-off didn't immediately flip the switches to "run" position first instead of asking the other pilot about it?
Note that in the checklist I am looking at the goal is to restart the engines rather than diagnose the failure and that involves these levers. I suspect you’d notice pretty quickly if they were not in the expected location.