Monday, July 27, 2009

Smashup at an Atom Smasher in Europe

Accidents at high-energy physics labs do not normally make the news. But when the lab is the European Union's crown jewel consortium CERN, and the accident puts their latest and greatest accelerator, the Large Hadron Collider, out of commission for up to a year, the incident is worthy of wider attention than it has gotten so far.

America used to dominate the field of experimental physics, as our first-out-of-the-gate development of nuclear weapons proved. But with the political collapse of the Superconducting Supercollider project, a Texas-based particle accelerator that was cancelled in 1993, the world leadership in high-energy experimental physics began to move to Europe, where last September the Large Hadron Collider was being put through its initial tests.

State-of-the-art particle accelerators are some of the most complex experimental systems ever built. The LHC resides in an underground tunnel 17 miles in circumference under the border between France and Switzerland. The basic idea is to shove atomic nuclei around a huge evacuated pipe with the aid of strong electromagnetic fields and the guidance of monstrous superconducting magnets that have to be submerged in tons of liquid helium. Such enterprises are of course very costly in comparison to more modest laboratory equipment, but a $5 billion expenditure these days when the U. S. Congress is cogitating about health-care programs costing 200 times that much doesn't seem like a lot of money. Nevertheless, you want to protect your investment even if it is only $5 billion, and that seems to be what got damaged the most in last fall's accident.

Superconducting magnets are used because once you get current running in them, no electrical power supply is needed for the magnet itself. To produce the tremendous magnetic fields needed with conventional magnets would require prohibitive amounts of power. But running a superconducting magnet is not a trivial task. The LHC's magnets have to be cooled down to about two degrees C above absolute zero, and only large amounts of liquid helium can do that. So CERN became the world's largest user of helium in its attempt to cool down all the magnets for their inaugural run of the LHC last September.

Nine days after the tests began, an electrical connection between two superconducting magnets apparently failed. In a normal magnet, this would not be that much of a big deal, since an open connection would just cause maybe a transient electrical discharge and then the whole thing would shut down. But with a superconducting magnet, a bad connection causes heat. Heat causes a superconductor to abandon its main desirable property, which is to be superconducting with no resistance. Once some resistance shows up, that generates more heat because the current cannot stop instantaneously in a large magnet. The heat boils off more helium, more of the magnet heats up and gets resistive, and you have a great big vicious circle called a "quench."

Being very large magnets, the LHC units quenched in a big way. The helium pressure was so high it blew all the way into the vacuum tunnel and spread insulation and trash everywhere. Since CERN policy is to clear the tunnel of personnel any time tests like this are going on, no one was injured. But successive press releases in the weeks and months after the accident cited longer and longer delays before the system could be up and running again. As of this writing (July 2009) repairs are still being made, and hopes now are that the LHC can go online again sometime this fall.

While the CERN managers are to be congratulated that this accident didn't hurt or kill anyone, having a multi-billion-dollar machine damage itself to the extent that it takes a year to fix is not exactly wise use of resources either. Any system as complex as the LHC will do unexpected things when first fired up, and CERN has decided to install fault detectors as part of the repair process that will give advance warning of a possible quench condition in the future. This is wise, prudent, and consistent with the highest engineering ethics principles. We just hope it will prevent such accidents in the future.

Which brings us to the larger question: what is all this billions of dollars of machinery and personnel good for? The holy grail of high-energy physics research right now is a thing called the Higgs boson, named after one of the six or seven theoretical physicists who thought of the concept in 1963 and 1964 (somebody had to be first, and it was Peter Higgs). According to the most widely accepted model of subatomic particles, called the Standard Model, the Higgs boson somehow gives mass to all elementary particles (such as electrons, I suppose) that have mass. No one knows how heavy this Higgs boson is, but guesses range from about the weight of a silver atom's nucleus on up. The problem with making really heavy particles like this in a particle accelerator like the LHC is, you need a lot of energy per particle. Current machines can get up to 120 billion electron-volts of energy (120 GeV) into a particle, and the LHC is supposed to reach values about ten times higher. When it finally works. So hopes are high that at long last the elusive Higgs boson will show its face, or tracks, or however they plan to catch one.

Fortunately, nobody has yet had to die for the chance to discover the Higgs boson. But a lot of people have put a lot of effort and money into looking for it, and now after the accident they're having to wait an extra year. Some may look at such work and criticize it on the basis that hey, people are starving in Rwanda and we're spending billions on chasing some pencil-pusher's pipe dream? But the fact that humankind can contemplate the universe and expend lots of energy searching for purely abstract products of the intellect such as the Higgs boson, is one of the things that distinguishes us from animals. I for one wish the CERN workers first safety, then success in their search. But being a Texan, I also wish we'd finished the Supercollider and made Higgs bosons first right here in Waxahachie.

Sources: Several news articles are available on the vicissitudes of the LHC accident. I used material from the U. S. LHC website http://blogs.uslhc.us/?p=393, an article in Discover Magazine online at http://blogs.discovermagazine.com/80beats/2009/02/10/until-next-fall-lhc-smashes-only-hopes-not-particles/, and one at the Big Science News blog at http://bigsciencenews.blogspot.com/2008/09/lhc-quench-stops-cern-re-start-delayed.html. For an instructive news video of what an unplanned superconducting-magnet quench looks like, see the YouTube version of a report on a hospital's MRI magnet that blew up at http://www.youtube.com/watch?v=1R7KsfosV-o.

Monday, July 20, 2009

The Third Pole of the Health-Care Debate

In the current debate over how health care in the U. S. should be funded, no one seems to be talking in a first-principles way about the moral underpinnings of the system. As I've said before, technology and engineering are so heavily involved in modern health care that I think engineers are disingenuous if they say they don't have a dog in this fight.

Sometimes situations can be clarified by going to extremes. I will pick three extremes which I think represent the poles of what we could do about health-care funding, and then see what conclusions we can draw about the moral bases of each.

The first pole is the extreme-libertarian solution: get government totally out of health care and let people figure it out on their own. This would mean shutting down Medicare and Medicaid, selling off all government-run hospitals, and letting the chips (and the patients) fall where they might. I think even the most extreme libertarians might blanch at ending such long-established practices as the licensing of doctors, but maybe not. One of my cousins is a libertarian, and he hasn't blanched in years. Surprisingly, this solution might not make much difference to those who are employed at firms that provide good health benefits. But for retired people who have come to rely on government-paid health care, there would be big problems, as well as for many who can't afford private care or insurance for it. This solution maximizes individual freedom from government actions, but if you're poor or retired or both and can't afford medical care, you would be out of luck. This shows the radical individualism of libertarian philosophy, and why it is inferior as a total guide to life.

The second pole is the extreme-socialist solution as is done in Cuba, for example: free health care for everybody. Of course "free" means the government pays for it all, and Except for the sick folks that documentary filmmaker Michael Moore took along with him to Cuba as an example of how much better their health-care system is than ours, I'm not aware of a huge surge of people who travel to Cuba for their marvelous medical institutions or services. The fact is that any government, especially Cuba's, has finite resources, and when resources are allocated by bureaucrats rather than markets, the results are often less than optimal, even if there are enough resources to begin with, which in the case of Cuba is doubtful. This solution removes a person's economic status from the equation, at least in theory, but requires rationing, waiting lines, and a pretty low average level of quality. Besides which, it seems that government-run health care systems tend to encourage a psychological dependency on the state which some think is mentally unhealthy in the long run. As with most "free" offers, free medical care often comes with political enslavement.

Most debates about the subject seem to be focused on just where between these two poles we ought to land. But I think that leaves out a critical factor, which I will dignify with the designation of my third pole. It's not easy to think of a name for this pole that will not evoke negative connotations. Perhaps "charity" in the older sense of "love" would cover it. Many private and public hospitals provide services to indigent patients whose costs they absorb, which means that everybody else who uses the hospital helps pay for it. Historically, the idea of caring for the sick without consideration of cost was a founding principle of many medical institutions with religious backgrounds. Many hospitals were staffed by nuns who took vows of poverty. And I think when this motivation is present, it forms the best of all foundations for individual careers and institutional principles. Would you rather be treated by a doctor who went into the business because he wanted to help people, or because he could make a pile of money? Yes, skill is part of the equation, but skill is more than mere technical proficiency. Being a quality of character, charity does not fit easily into economic calculations or political structures. But the first two poles either discount it totally or regard it as an unreliable and suspect motivation that is best ignored in favor of government-run solutions to the problem.

Many religious leaders, up to and including Jesus, made healing a vital part of their ministries. I do not have all the answers to our health-care problems, but I think we should consider making more room for and encouraging those who provide care in the neighborhood of the third pole—people and institutions who help patients because it is the right thing to do, not just because they can make money at it or because the government compels them to. If the debate can center more around this idea, I think the outcome, whatever measures it takes from the other two poles, will be better than otherwise.

Monday, July 13, 2009

Cyber-Security and North Korea: Worth Worrying About?

Beginning on July 4, numerous government and private websites in both South Korea and the U. S. succumbed temporarily to attacks by a shadowy entity suspected of connections with North Korea. Although the damage and disruption were temporary, this sort of thing may be a small wave of a big future for web-based warfare. But unlike conventional warfare, which has at least the restrictions of the Geneva Convention, cyber-warfare is so new that there are few international agreements about it, and even less agreement among those responsible in the U. S. as to what should be done to defend against it.

First, the attacks. According to the Wall Street Journal, they were "relatively unsophisticated," but that doesn't mean they weren't effective. The distributed denial-of-service attacks were carried out by large numbers of computers which harbored a virus that ordered them to flood the targeted websites with requests for service. It takes time for website operators to notice what's going on, get a fix on where it's coming from, computationally speaking, and devise work-arounds to restore service to legitimate users. In the case of these attacks, the time involved was as long as three to four days during which service was interrupted or degraded to some degree. Besides several government-operated websites in North Korea, U. S. websites operated by the Defense Department, the Federal Aviation Administration, and private entities such as the New York Stock Exchange and Amazon.com were attacked.

Although positive identification in these types of attacks is difficult, the timing and other characteristics of the attacks makes it likely that North Korea is responsible. North Korean dictator Kim Jong Il is in poor health and has not made public his plans for a transfer of power. That makes the normally volatile country even more unstable and likely to pull malicious pranks such as nuclear-weapons tests and missile firings, which have also occurred in recent months. But when should we quit calling these web attacks pranks and take them more seriously?

Cyber-warfare is the ultimate in modern conflicts. It resembles conventional terrorist actions such as suicide bombings in that its effects are large in proportion to the resources required, its perpetrators wear no uniforms and can blend into the civilian populace easily, and identifying even so broad a category as the country of origin for a cyber-attack is difficult, let alone finding the people responsible. As far as I know, no one has died as a direct consequence of a cyber-attack, although as more and more life-critical systems from medical care to power grids depend on the Internet, this may soon change. Websites accessible to the general public are the easiest targets, but the harm caused by disabling them is generally limited to loss of revenue or public access, which is inconvenient but not life-threatening.

We can expect that attackers will grow in sophistication and focus as time goes on. There is already some concern that critical infrastructure systems that use the Internet are more vulnerable to attack than they should be. But if history is any guide, we will coast along in blissful ignorance until someone wreaks real harm—death or destruction of large amounts of real property—before steps are taken to remedy these vulnerabilities.

Conventional wars were fought over physical objectives such as territory, natural resources, or lives. As much as many terrorists would like to, no one has yet figured out a way to kill you by means of your own computer, unless you count grabbing your laptop and lamming you over the head with it. There is a cautionary lesson here for those who would like to integrate their own bodies with the web by direct implants of nerve-stimulating devices in the brain and so on. If a computer does something I don't like, I can always walk away. But if it's wired permanently to my brain and some hacker gets his hands on it, I won't have that option. There's a sci-fi movie for you, but one I wouldn't want to watch.

President Obama, to his credit, appears to be the most web-savvy occupant of the White House so far. But his plans to name a cyber-czar in charge of government internet security have hung in limbo as he searches for a suitable candidate. It's not like the President has nothing else to do, but this may be one of those cases where we will wish he'd paid a little more attention to a low-profile matter at the expense of one more town-hall meeting on health care, for example.

All the same, I hope that such a czar will wear his or her authority lightly. One of the strengths of the Internet, and the cyberworld as a whole, is the way that highly distributed expertise works very effectively most of the time to remedy problems as they occur. It is an example of engineering ethics at work that is quiet, not flashy, but worthy of our attention nonetheless. The great majority of computer and networking experts have a vision of the way things ought to be that is both moral and efficient, and tend to work most of the time in cooperation with each other to keep things running well. But the strength of such distributed expertise is also its weakness, in that it takes only a few malicious people who grab the controls to mess things up. Let's hope that we can mount organized defenses against such attacks in time to thwart them before they cause the kind of headlines that 9/11 received.

Sources: I used information from the following articles on the recent cyber-attacks: a piece by Donald Kirk of the Christian Science Monitor at http://www.csmonitor.com/2009/0708/p06s24-woap.html, and an article in the online edition of the Wall Street Journal by Siobhan Gorman and Evan Ramstad at http://online.wsj.com/article/SB124701806176209691.html.

Monday, July 06, 2009

Exclusive: Why the Austin Scaffolding Fell

On June 10 of this year, three construction workers died when a section of scaffolding collapsed at a construction site near the campus of the University of Texas at Austin. Because the accident resulted in deaths, personnel from the U. S. Occupational Safety and Health Administration began an investigation shortly thereafter. While it is the normal policy of OSHA not to divulge information on an investigation that is incomplete, leaks do occur. If you keep reading, you will be the beneficiary of one such leak. But first, some details about the accident.

Photographs published at the time showed that the scaffolding was a cantilevered box frame that extended several yards on either side of an elevator-type mechanism that allowed the whole thing to move up and down the side of the high-rise apartment complex under construction. Photos of units on the manufacturer's website show that the scaffolding can extend as far as 25 or 30 feet either side of the mast that supports it. The workers using the scaffolding walk along the frame to do whatever operations the construction job requires.

There's no particular mechanical-engineering magic to cantilevering. Like a branch of a tree that sticks out sideways, the box frame's unbalanced weight has to be supported by the central elevator. In particular, the bolts that keep the top of the box frame attached to the elevator unit are under tremendous tension, since the whole weight of the frame tends to pull the bolts away from the elevator. If these bolts aren't strong enough and fail, the scaffolding will fall away like a branch cracking off a dead tree. That is apparently what happened on June 10.

The following information is what the newspeople call an unconfirmed report from an anonymous source. But I believe it to be reliable. According to the source, the bolts used in the scaffolding that failed were not the required Grade 5 type. If you have ever bought bolts at a hardware store, you may have noticed little patterns of lines on the hexagonal bolt head. These are not just random forging marks. They indicate the quality of steel in the bolt, and in particular, the maximum stress the bolt can withstand. Grade 5 bolts have three embossed lines in a "Y" pattern on the bolt head, indicating that they can take up to 120,000 pounds per square inch of stress under certain defined conditions. Cheaper bolts with no head markings are available. For example, Grade 1 bolts have only about half the stress capacity of Grade 5.

Assuming my source is correct, how did the wrong bolts get there? To answer that question requires that we move from the realm of science to the realm of human behavior. The problem could lie anywhere from the manufacturer of the scaffolding, to the general contractor for the site, to the subcontractor who installed the scaffolding, to the subcontractor's employees who put it together, to someone else who might have lost the Grade 5 bolts and substituted others without knowing the danger it would cause. Presumably the OSHA investigators are also working on this angle of the problem, which will require extensive interviews and inquiries which may never reach a satisfactory conclusion. But this shows the vital importance of apparently minor details, such as three little lines on a bolt head, to the safety of construction workers who probably had nothing to do with the assembly of the scaffolding.

A subsequent news article in the Austin American-Statesman pointed out that Texas has one of the worst records in the U. S. for construction-related fatalities. Pay rates are low, some construction employers opt out of workers' compensation insurance, and since OSHA primarily investigates complaints lodged by workers, the workers have to be their own safety inspectors. Since many speak only Spanish and some are undocumented, their reluctance to undertake this role is understandable. Simply identifying the next of kin of the workers killed in this accident was a challenge to authorities, since their families lived in small towns in Mexico.

How can accidents like this be prevented in the future?

This incident shows how vital the "soft" technologies of training, inspection, and good management can be to safety improvements. Even if we give the benefit of the doubt to the contractor and subcontractors by assuming the use of the cheaper bolts was accidental, the accident reveals a grave deficiency in the way supplies are inventoried and assembly procedures are carried out. No human-operated process can be made 100% foolproof, but if certain bolts have to be Grade 5 in order for a scaffold to be assembled safely, there must be a way to make sure that only Grade 5 bolts go into the system. Simple things like matching spray-paint colors or other wordless guidelines can go far to prevent tragedies like this, especially where non-English speaking employees are involved.

Such measures come too late for the three workers who died when the less expensive bolts apparently failed. But I hope as more details emerge, the lessons of how to avoid this kind of accident won't be lost on those who are in a position to make sure their employees and subcontractors have a safe working environment.

Sources: My source for the bolt information is anonymous for the simple reason that I do not know his name. Published information on the scaffolding collapse can be found on the Austin American-Statesman website at http://www.statesman.com/search/content/news/stories/local/2009/06/17/0617construction.html. Information on the grades of bolts available can be found at http://www.engineershandbook.com/Tables/boltgrades.htm.

Monday, June 29, 2009

If We Fixed Cars In the U. S. the Way We Fix People

You would typically get auto insurance (including insurance for major repairs) as an employment benefit, and you'd never see the money. If you lost your job, you'd either have to buy very expensive insurance on the open market, or just hope your car didn't break down before you got another job.

If you had insurance, all you'd have to pay at the repair shop would be a small copayment of twenty or thirty dollars. The insurance would cover the rest.

Many people with a car problem would first have to take their car to their primary care mechanic (PCM), no matter what was wrong. If it was the brakes, your PCM would have to write you a referral to a brake specialist before you could get your brakes fixed. Of course, you could just pay for the repair yourself, but that would cost many thousands of dollars.

You could do minor repairs yourself, but for something major like a new starter, you couldn't just walk into the parts store and buy a new one. You'd first have to get a handwritten note from your PCM. Then you'd take the note to a special parts store that has college-trained salespeople licensed to sell the higher grades of auto parts, and buy the part from one of them.

Every auto repair shop would have huge filing cabinets with multicolored file tabs sticking out of them, one file for each car. All the important records on your car would be written by hand.

Minor repairs would be made in small shops, but major repairs would take place in a few giant facilities in each metropolitan area, where hundreds of cars would be collected together for repairs. Getting an estimate for repairs at one of these mega-shops would be next to impossible. Instead, you just take your car in, wait till they fix it, and hope your insurance will pay for it.

Reading a repair bill would be an exercise in mystification. Even professional accountants couldn't explain why the repair shop would charge $674.92 for replacing a U-joint, the auto insurance would pay $407.17, and you would end up owing $103.37.

Mechanics would check for the most unlikely problems even when the issue was a simple one. You might take your car in because the wiper blades needed replacing, and the mechanic might do a stress test on the windshield and charge the insurance company $400.00 for it. But you could rest assured that your windshield wasn't about to shatter spontaneously, which happens maybe once in every 30 million passenger miles.

Auto mechanics would have to go to school for six to eight years after their BS degree and pay back hundreds of thousands of dollars in school loans before getting their license to fix cars. But they would earn almost as much as lawyers do, if they could keep ahead of their own soaring insurance premiums. If you didn't have a government-sanctioned auto repair license and you tried to fix anybody else's car, you could go to jail.

Gasoline additives would be a multi-billion-dollar business, funded with a combination of government support and private money. Universities would have special auto-repair branches and auto-repair research departments to develop new additives and repair techniques.

Mechanics could be hauled into court and made to pay millions for faulty repairs. Mechanical malpractice law would be a lucrative branch of the legal business.

Eventually, things would get so screwed up that the U. S. government would wade into the mess and take over large portions of it, promising to manage things better than the former private owners did. Of course, that's exactly what has happened with the U. S. auto industry already—so maybe it's time to wind up this little fantasy. . . .

Health care in the U. S. is a complex system that can be viewed as a technology. And it is fraught inside and out with ethical implications, so I think the current debate over what should be done about health care is fair game for an engineering ethics blog, broadly defined.

Of course, people aren't cars, and the analogy between car repair and health care breaks down if you examine it seriously. But sometimes casting a familiar situation in a new light will reveal problems in a way that more people can understand. For example, it is a fact that most people don't know they pay an average of $400 a month for health care—either as a deduction from their paycheck, or a contribution from their employer, or typically both. If you had to write a health-insurance check for $400 from your own pocket every month (as some self-employed people do), that single change would bring the reality of health-care costs home in a way that no number of TV ads will do. Most people do pay for their car repairs out of their own pocket. If we had the direct price information that would let us pay attention to the quality and price of health care in the same way we evaluate an auto mechanic's services, it would do a lot to reduce needless health-care expenses.

Eliminating the employer tax deduction for health-care costs, if done the right way, will be a step in this direction. But not if it is done just as a way to raise revenue and make a government-funded public insurance option more attractive.

As the debate develops, it seems to be coming down to a single question: Who can exert more effective discipline on the health-services sector: a set of government bureaucracies that will ration and regulate the system, or an enlightened public which is allowed to see the costs of health care directly and make their own judgments as to which insurance plan and caregiver is best for them? The latter option still has a role for government, possibly as the provider of last resort for insurance or services for those who can't afford them, and as a check on rampantly malicious behavior on the part of powerful institutions.

Either there will be major changes in the way health care is delivered in this country by later this fall, or there won't be. Sometimes no change is better than a bad change. After all, we could be worse off. Surveys indicate that most people are reasonably contented with their present state of health care. The trick will be to help the groups who are under-served without worsening the status of those who like what they have already—and not do something else awful like run the government into bankruptcy in the meantime.

Monday, June 22, 2009

Should You Worry About Oil Sands?

Gasoline prices have been going up in recent weeks, and one reason they haven't gone up more is oil sands in Canada. As Michael Levi, writing in the current issue of Slate, points out, not too long ago Canada took over from Saudi Arabia as the country supplying the most imported oil to the U. S. And a big factor in Canada's oil exports is their production of oil sands.

It turns out that under a large chunk of northeastern Alberta, Canada, the Athabasca oil sands deposit harbors the oil-sands equivalent of the rest of the world's conventional oil reserves combined. What are oil sands? Sometimes referred to as "bitumen," the hydrocarbons in oil sands are tar-like substances that are too thick to flow out of the formations they are found in, as conventional petroleum does. Instead, you have to dig the stuff out with conventional open-pit mining techniques and then process it to make what is called synthetic crude oil. From that point on, the stuff can be treated more or less like regular petroleum.

Because of the added complexity of extraction, oil sands have only recently been exploited commercially on a large scale, and they still form only a fraction of Canada's total oil output. (Venezuela also has a large oil-sands deposit, but the government of Venezuela is not as favorably disposed toward the U. S. as the Canadian government is, to say the least.) Oil sands have received some black environmental marks, both for the relatively large amount of greenhouse gases that result from producing a barrel of oil-sands petroleum compared to a barrel of conventional oil, and for the problems that used water and mine tailings cause.

So what is the right thing to do about oil sands? Do the environmental issues dominate and make us swear off them altogether? Or should we just arrange some very long-term contracts with Canadian produces and quit worrying about the shrinking oil reserves in the rest of the world?

As Levi points out, neither of these extreme alternatives is wise. While the production end of oil-sands operations does make more carbon dioxide, you still end up burning oil at the consumption end, so economies or conservation elsewhere in the system can make up for the additional burden at the production end. Pollution of water and destruction of land due to poor open-pit mining practices are concerns, but if I know our Canadian friends, they are on top of those issues and have found ways of dealing with them.

All the same, it would be the height of complacency to say along with the rich fool in the New Testament parable, "Soul, you have oil sands saved up for many years. Drive, drink, and be merry." I have said before that for reasons of national security, the U. S. ought to devise a long-term plan to move gradually and even profitably toward increased energy independence. With the global oil market the way it is, namely much like a pickup basketball game with no referee, we are taking chances with our economy by relying too much on unstable parts of the world for our energy supplies. Although some weird things go on in Canada, as a whole its government is a lot more reliable than, say, Iran's, so on balance it's a good thing that we are getting more oil from Canada than we get from Saudi Arabia or other Middle Eastern countries. However, the best outcome would be to move, deliberately and without serious damage to the economy, toward a situation where fossil fuels are gradually phased out in preference to an electricity-based energy economy, perhaps powered largely by nuclear plants. But that's just my opinion.

Nuclear has the dual advantage of not emitting any greenhouse gases and of using fuel that is not primarily found in politically unstable parts of the world. Nuclear plants use uranium, and some types can even produce more fuel than they consume. And it turns out that more than half of all the uranium produced in the world is mined in two countries: Canada and Australia, both of which we get along with pretty well.

The difficulty, as always, is how to implement such a plan in a democracy where short-term considerations tend to dominate political discussions. Somehow we can always agree to keep troops here or there for another few years, but we can't agree on a plan to reduce our dependence on oil so much that we wouldn't need to play global policeman so much. The new administration has made efforts in this direction, but with so many other irons in the fire, energy independence is going to take a back seat (to mix a few metaphors).

In the meantime, we can be grateful to our Canadian friends for developing oil sands in an environmentally responsible way. For the next few years we will need to buy oil from somewhere outside the U. S., and Canada looks like a nice place to get it from.

Sources: Michael Levi's article "Living on Canada's Oil" can be found in Slate at http://www.slate.com/id/2220878/. I also used material from the Wikipedia articles on oil sands and uranium.

Monday, June 15, 2009

Health Care as Systems Engineering

This summer promises a great debate over health care in the U. S. It is pretty sure to be great in the sense of historic or significant; what is not so clear is whether the outcome will be great either in the sense of good and positive, or in the ironic sense ("Great! That's just what I needed!"). One perspective that may help us judge the quality of the debate and the outcome is to view health care through the lens of systems engineering. But since health care deals with the most intimate aspects of human life, ethical considerations also show up at all levels, from individual decision-making to nationwide policy.

It is well known that the U. S. pays more per capita for health care than most other industrialized nations, but by many measures we are not that much more healthy than the other countries are. In other words, we're not getting what we're paying for, if we think that spending more health dollars per person will make everybody that much healthier. Viewed as a system with inputs (health care money and resources) and outputs (people treated by the system), our system does not work as efficiently as it could.

Over the last several weeks I have read of certain parts of the country where the health outcomes per Medicare dollar (which is an easy statistic to obtain) are much better than the national average (e. g. Green Bay, Wisconsin, where President Obama recently spoke on the issue), and other areas where they are much worse (e. g. McAllen, Texas, which a recent New Yorker article identified as in the second most expensive county in the country, measured in Medicare-dollar-per-patient terms). One reason for these identifications appears to be the idea that if we can just figure out what the good places are doing right, we can replicate these successes and do away with whatever bad or evil mischief is going on in the expensive places. How likely is that to succeed?

Atul Gawande, the author of the New Yorker piece, thinks the root problem in McAllen lies in the disconnected, revenue-driven nature of the medical culture there. He says many doctors view their practice as a way of making money, and if you want to practice medicine that way there are few barriers to stop you. By contrast, he cites places like the Mayo Clinic, where doctors on salary receive no incentives for ordering extra tests, and participate in meetings designed to improve patient care systematically by coordinating it to eliminate needless and duplicative tests, among other things. He admits, though, that discouraging the former behavior and encouraging the latter will be a long, tricky process.

I think a key element in the solution, if one can be found, lies in a careful study of incentives and disincentives. Although people can't always be relied upon to do the rational thing, most people will make choices they perceive to be in their own best interest. Of course, perception can be distorted through propaganda and so on, but especially where pocketbook matters are concerned, most people make fairly optimal decisions if given the opportunity to do so. One trouble with health care as it exists today is the same problem I have noticed with the college-textbook market: the people who pay for the goods or services (students or patients) are not the people making the decisions (professors or doctors). Although one doctor quoted by Gawande says allowing patients more of an economic stake in medical decision-making is like relying on "the sheep to negotiate with the wolves," it doesn't have to be that one-sided. If people were in economic control of their own health-care expenditures rather than having to rely on their employer (if they have a job in the first place), I think some way could be developed so that the Mayo-Clinic-type coordinated operations and their lower cost per patient could be packaged to be more appealing in an open market, compared to the multiple-stop-shopping of places like McAllen. The comparison is a little unfair, but think of shopping at Wal-Mart versus going to a third-world village market with its street of shoemakers and street of roasted-goat vendors. The streets full of private vendors are colorful and make for great vacation photos, but if all you want is a pair of shoes you'll go to Wal-Mart.

Of course, efficiency can be carried too far, and if we let even the Mayo Clinics coalesce into one giant monopolistic medical provider, the outcome is likely to be bad. But an appropriate level of market openness in which consumers could see economically efficient, good care for what it is, and choose it, would avoid the coercion and potential for debilitating bureaucracy that so many proposals involve.

Healing is a deeply ethical activity. The oldest known professional code of ethics—the Hippocratic Oath—deals with the ethics of medicine, and many religious leaders such as Jesus made healing an important part of their ministry. The problems Gawande and others have identified when healers start to put money over patient care merely demonstrate that the system, whatever form it takes, must have professionals in it whose philosophy or faith makes healing an end in itself, not primarily a means to wealth. Whatever happens to U. S. medical care after this summer's debate, I hope the designers do not lose sight of the fact that, like doctors themselves, they cannot fix the problem the way you would fix a balky lawnmower engine. All they can do is try to create an environment for people of good will to do even better than they are doing now.

Sources: Atul Gawande's article "The Cost Conundrum" appears in the June 1, 2009 issue of The New Yorker.

Monday, June 08, 2009

The Air France Crash: More Questions Than Answers

The crash of Air France flight 447 from Rio de Janeiro to Paris on the last day of May is bad news for a number of reasons. The deaths of all 228 people on board make it the worst air disaster since 2001. And while advancing technology has enabled investigators to recover a limited amount of flight data through a remote data link that was operating at the time of the crash, the deep waters where the plane went down may prevent the recovery of the "black box" containing voice and detailed data recordings.

What do we know today, eight days after the crash? There were thunderstorms in the area that night, and early speculation centered on the possibility of a lightning strike to the plane. Although lightning hits planes hundreds of times a year, relatively little damage usually occurs and most modern aircraft can be considered essentially (though not totally) lightning-proof. Evidently, there was a satellite or other radio-mediated data link which was continually feeding certain types of flight data to the ground. Examination of this data shows that the flight speeds during the last minute or so of the flight became "incoherent," followed by a loss of cabin pressure and failure of electrical systems. While this information will be helpful in deciphering what went wrong, it apparently lacks the detail that flight data recorders can preserve. One can imagine a day when such radio links will take the place of, or at least duplicate, the capabilities of flight data recorders so that mechanical recovery of the black box will no longer be so urgent. The black box is designed to emit a sonar signal for 30 days after the crash, so the underwater recovery crews gearing up to find it are operating under tremendous time pressure, not to mention the water pressure at depths exceeding 20,000 feet. The box may never be found.

Recent news reports have focused on the fact that the plane's Pitot tube, the device that measures airspeed, had not yet been replaced with a newer model as the plane's manufacturer Airbus recommended. A Pitot tube is a small tube that faces directly into the airstream. The difference in pressure between the air inside the tube (which is blocked off and registers what is called "stagnation pressure") and the ambient or "static" air pressure, is an indication of airspeed, which is the most important kind of speed to know about when you are trying to fly a plane. These days, when most parts of a flight except for landing and takeoff are under automatic control, the airspeed data from the Pitot tube forms part of an elaborate computer-controlled feedback loop that maintains constant speed, altitude, and other flight characteristics.

The old saw about computers regarding "garbage in, garbage out" goes double when a feedback loop is involved. If enough ice forms on a Pitot tube to plug up the entrance, the indicated airspeed goes way below what is actually the case, and either the automatic pilot guns the engines inappropriately or the real pilots may take incorrect action based on faulty airspeed data. This is exactly what happened to an Argentine DC-9 flight in 1999, which resulted in a spectacular crash, killing all aboard.

Although I have no independent information on this, I hope that modern aircraft such as the Air France A330 that crashed have more than one means of measuring speed: either a second Pitot tube (which of course would be just as likely to ice up as the first one), or other means such as radar altimeter and speed measurements or GPS-based airspeed indicators. But whether the autopilot takes all these other inputs into consideration, and whether the real pilots do too, I don't know. Clearly, if the Pitot tube was involved in this crash, the right thing to do in the circumstances wasn't done.

All flight-critical Pitot tubes have heaters to prevent icing, but evidently the one on Flight 447 was deficient or non-optimal in some way, or else Airbus wouldn't have recommended replacing it. Of course replacements can be recommended for all kinds of reasons, some of which have nothing to do with safety. All that will come out in the investigation report, which will take months or more to complete.

Despite this crash, the general trend in air safety has been a positive one. More people fly every year, and so the safety record per passenger mile is even better than the raw statistics on crashes would indicate. But this record can be maintained only through the painstaking work of investigators, engineers, regulators, inspectors, and the pilots and crews who actually do the work. Most of the time the system works well, and the silver lining in every accident is the fact that it carries with it potential answers to problems that need to be addressed to improve safety even further. I just hope they are able to recover the flight data recorders in order to develop a complete picture of what went wrong, and to teach us how similar situations can be avoided in the future.

We will revisit this accident when more information is available, and in the meantime, our sympathy is with the relatives and friends of those who lost loved ones in this tragedy.

Sources: I drew on reports from Fox News at http://www.foxnews.com/story/0,2933,525117,00.html and an Associated Press report obtained from Yahoo News at http://news.yahoo.com/s/ap/brazil_plane, as well as the Wikipedia article "Pitot tube."

Friday, May 29, 2009

Does the U. S. Need a Cyber Czar?

On Friday May 29, President Obama is scheduled to announce a plan to name a “cyber czar” whose responsibility will be to oversee computer security both in and outside the federal government. The term “czar” in Russian originally meant an emperor whose reign was maintained by the authority of God. Somehow I doubt that such overtones of meaning are intended by the PR people who put together these news releases and the members of the press who report them. But it is a good place to start asking whether the U. S. really needs such a czar for this increasingly important area of technology, and what the good and bad aspects of such an appointment might be.

From time to time we have discussed various cyberthreats in this blog, and so far, none of them have turned out to be the Armageddon of viruses or cyberattacks. The trend in recent years, however, is not reassuring. Back when email was a novelty engaged in by a few nerds and their friends, the worst motivation of those who wrote viruses or produced spamware was a kind of intellectual mischievousness: “Gee, can I really get away with this?” But eventually, people figured out there was serious money to be made, either quasi-legitimately via spamware advertising of kooky products, or illegally via shakedowns and blackmail threats (“If you don’t want your whole website to go down next Tuesday, leave $100,000 in unmarked bills in the trash can next to the entrance of the Kremlin tonight.”). And in the last year or two we’ve seen pretty definite evidence that nations are using cyberattacks as part of more conventional warfare, as when Russia evidently coordinated a cyberattack on Georgia’s government websites last August during its attack on contested territory between the two countries.

So the threats are real, no doubt about that. The question is, can we defend ourselves better against them if we have some centralized governmental authority taking some as-yet-undefined actions? That question has to be answered in the context of how things are done currently.

Like the Internet itself, the U. S. system (if you can call it that) of defense against cyberattacks consists of a not very organized, highly distributed network of specialty firms, companies who simply want to use the Internet legitimately without hindrance, and the various governmental entities who use computers, which is (I hope by now) all of them. Judging by various reports, the private firms seem to do a better job of security and upgrading, including defense against attacks, than the government does. But this may simply be an artifact of accessibility. Reporters can file requests under the Freedom of Information Act to obtain a wide variety of government records, but there is no such privilege with regard to the internal documents of private firms. So if (to take an example) Bank of America makes a big goof in purchasing vulnerable ATM machines that can be programmed to spurt out piles of twenty-dollar bills to a waiting kid on his tricycle, as long as they catch the problem and fix it before it hits the news wires, no one is the wiser. But let that happen in a government agency, and reporters can get all the documentation on it they want, usually.

That doesn’t mean the government is necessarily less competent in dealing with cyberattacks. One danger I can foresee is that of burdensome regulations in what is historically a very unregulated industry. If Microsoft had to prove to some government bureaucrat that its new software upgrade is bulletproof against cyberattacks before it could be released, we’d all still be running OS/2 on our PCs (except for those of us using Macs). But the advance reports indicate that the new cyber czar won’t have even the authority of a cabinet official, nor Presidential access of the highest level.

So if the new czar can’t do much, why should we bother? One aspect of the situation appears to pertain to public education. I suppose if the President talks about what you as an individual can do to improve computer security, a certain number of people will pay more attention, but it does seem like it might be a needless expenditure of political capital. On the other hand, if we are made aware of the cost of cyberattacks in terms of centrally analyzed statistics publicized by the government, that might motivate some changes.

This problem resembles environmental issues in that it is essentially a global, not strictly a national matter. The Internet knows no boundaries, and in fact many if not most cyberattacks on U. S. institutions come from abroad. That means a solution, or more likely a range of solutions, will have to have international aspects to it: international agreements, international coordination, and so on. And for this the federal government is probably the best choice.

In sum, let’s wait and see how czar-like the new czar acts. There is no need to worry that the designee will take over the universe, even the cyber-universe. And there is a lot of room for improvement both in the public and the private sector. But government can do only so much, and it will be interesting to see whether the person chosen makes a positive difference, or disappears after the next federal initiative grabs all the headlines.

Sources: An Associated Press article describing the results of a Presidential study of cyber security and related issues can be found on the Business Week website at http://www.businessweek.com/ap/financialnews/D98FEMQO1.htm. My blog “War Comes to the Internet” was posted on Sept. 8, 2008.

Monday, May 25, 2009

Ethics Education: How Can You Tell?

One reason I started this blog was to use it in a short (four-week) engineering ethics segment of a freshman course for engineering and technology majors. When you teach something, you obviously expect the lessons to make some kind of positive change in your students. You hope that they will be able to do or understand something that they couldn’t do, or didn’t understand, before you went to work on them. With technical subjects such as circuit theory or computer programming, it’s fairly easy to tell whether the students learn what you want them to learn. That’s what exams are for. But how can you tell whether ethics instruction has achieved its goal, which is to turn students into ethical engineers?

In an ideal world of infinite educational-evaluation resources, you would do a longitudinal study of two groups of students: one group who took engineering ethics, and a second matched cohort of students who took the same courses as the test group except for the engineering ethics parts. You would then follow every student, doing in-depth interviews and gathering third-party information about the ethical aspects of their work over their entire careers. And at the end of this process (which would take thirty-five years or so), you could write a paper saying we know for sure that X number of students who took Y ethics module thirty-five years ago were Z per cent more ethical than the control group of students who didn’t. Only, of course, Z might turn out to be negative. All it takes is one determined crook in your test sample to throw everything off.

And that ties in to something I learned last week. It’s not only universities that try to improve their students’ ethics with educational modules; companies and governments try it too. In particular, every employee of the state of Illinois has to take a brief online ethics module periodically, up to and including (I presume) the governor. You may have heard the name Rod Blagojevich in the news over the last six months or so. He is the (now ex-) governor of Illinois who was impeached for trying to sell the Senate seat vacated by now-President Obama. This was hardly ethical behavior under any standard, yet Blagojevich was following a tradition honored by numerous Illinois governors, of engaging in indictable behavior. If anyone was trying to evaluate the ethics education of Illinois employees and included the governor in their sample, they are going to have a lot of trouble showing that it helps.

But wait. Should one or two spectacularly bad apples spoil the barrel? That is, you are always going to have what are called “outliers.” If you are familiar with a Gaussian distribution, often called a “bell curve,” you know that it looks like a hill with gently sloping sides. If one of these distributions represents some measure of “ethicalness” (an ugly word, but I can’t think of a better one), then the peak of the hill represents the bulk of students who have what you might call typical or average ethics. Mother Teresa would be in the right-hand tail of the distribution, way off to one end, and the ex-governor would be somewhere in the left-hand tail.

You can make the argument that even though ethics education doesn’t prevent the occasional Blagojevich, if it moves the whole distribution to the right it makes the average person more ethical, which is worth something. But then you get into the utilitarian bind of evaluating the worth of ethics to society in general. Is it better that most people in a profession are a little more ethical even though some are still news-worthily unethical, or would it be better if somehow we could prevent only the worst ethical lapses and leave the rest alone? And all this assumes that there is some fail-safe way to evaluate ethics education other than the impossibly expensive and lengthy longitudinal study I described above, which is by no means clear.

All education involves some degree of faith, which is the certain knowledge of things we don’t see yet. Even if my students pass exams on digital logic or electromagnetics, I can’t say for sure what they’re going to do with those pieces of knowledge and ability. I can only trust that they will remember them and use them somehow in a good way. Experience has shown that the vast majority of our students do just that, although I can’t instantly pull up tons of documentation to prove it.

In the last several years, whenever the National Science Foundation funds programs to augment and encourage engineering ethics education, it insists that the outcomes of these programs be evaluated by some independent means. Their argument is that taxpayer money is being used for these programs, and the agency has to go back to Congress and show that the money did some good. Although the motive is laudable, I have questions about the method. The same person who told me about the online ethics course in Illinois is an expert in evaluating ethics education, which he admits is not a perfect process either. The preferred way is to administer a survey in which students answer questions about hypothetical ethical situations. As I say, it’s better than nothing. But it seems to me that the process of evaluating ethics education mainly to generate some paperwork to send back to Washington is motivated by the same spirit that causes the government of the state of Illinois to insist that all its employees take the online ethics module. In both cases, the ostensible motive seems to differ from the real motive.

Ostensibly, one is doing something that will genuinely improve (or measure) the ethics of the target population. But in reality, both the online ethics module and the ethics evaluation process serve mainly to shift responsibility for any possible bad outcomes. If another Rod Blagojevich shows up, Illinois government administrators can say, “Well, we did all we could—we made him take that ethics module.” And if despite all efforts, the next couple of decades turn up a few engineers who, despite taking NSF-evaluated engineering ethics education, go ahead and do something unethical anyway, the National Science Foundation can turn to Congress and say, “Well, we did all we could—we evaluated those programs with the best available evaluation instruments.”

Am I saying we should chuck all attempts at evaluation, or even ethics education? By no means. But let’s be realistic about what we’re trying to do, and not pretend that it’s capable of more than it can really do, which is simply to give us some reason to hope, but not to be certain, that we are making people more ethical.

Sources: Michael Loui, professor at the University of Illinois Urbana-Champaign, told me about these matters. I would point you to some information about Rod Blagojevich, but I think he’s already had more attention than he deserves. And my definition of faith is taken from the New Testament book of Hebrews, 11:1.

Monday, May 18, 2009

Crash of Flight 3407: The Human Factor

Last February 12, a Continental Airlines regional flight 3407, operated by Colgan Air, crashed short of the Buffalo, New York runway it was headed for, killing all 49 aboard and one person on the ground. At the time I wrote about it shortly afterward, speculation centered on how well the deicing systems were working, since icy conditions had been reported in the area. But after a three-day hearing on the crash held by the National Transportation Safety Board last week, it looks like human error may be the root cause of the crash.

Working with voice-recorder transcripts and flight data from the "black boxes" recovered from the crash, NTSB investigators painted a picture of the last minute or so of the flight which did not show pilot Marvin Renslow and his 24-year-old copilot Rebecca Shaw in a good light. During their final approach, when FAA regulations prohibit nonessential communications in the cockpit, the pair are heard chatting about careers and the co-pilot's lack of experience flying in icing conditions. Renslow himself had only three months of experience flying the particular Dash-8 involved in the crash, and had failed several flight simulator tests in the last few years. Besides these factors, fatigue may have further dulled the crew's responses. Shaw had joined the flight after commuting all night from her home in Seattle, where she lived with her parents. Her raising the plane's flaps without a command from the captain compounded the already critical situation the pilot found himself in when the plane lost airspeed and began to stall. Under these conditions an automatic system activates a "stick-shaker" intended to alert the pilot to the danger. The proper response is to move the stick forward to regain airspeed, but records indicate Renslow pulled it back. After stalling, the plane rolled and crashed.

The impressive and improving safety record of U. S. air travel says that on balance, nearly all pilots do the right thing in critical moments nearly all the time. But the fact that the safety record for smaller regional carriers such as Colgan is not as good as for the major carriers flying larger aircraft says there may be something about the difference in working conditions between long-range and regional carriers that bears watching, to say the least. A lot of the news coverage of the NTSB hearing centered on co-pilot Shaw's meager annual salary, which was less than $17,000 (not counting extra flying time). Deregulation of the airline industry plus the recent recession has brought intense competitive pressure to regional operators, who may be cutting corners and hiring inexperienced pilots with less-than-stellar records simply because they're cheaper. The Federal Aviation Administration has regulations about minimum standards for pilot training, performance, work hours, and rest breaks, but these things are human rules, and rules can be bent or broken without automatic penalties coming into play. At least, until something bad happens.

The loss of any life in an engineered system is a tragedy. But if the publicity surrounding the accident and its investigation result in corrective action, we can look forward to further improvements in safety procedures and their enforcement.

At last week's hearing, a NASA expert in cockpit communications acknowledged that more could be done to give pilots even earlier warning of potential stall conditions than the stick-shaker provides. This is a problem in what is called human-factors engineering: how to effectively interface a machine to a person so that the person has the right information at the right time in order to take the right action. By the time the stick-shaker went off, the pilot's options were very limited. If an earlier warning had been provided, the crew might have snapped out of their inattentive mood sooner and realized their difficulties in time to avert the accident. We will never know about this particular case, but if the investigation results in improved cockpit instrumentation that saves other inattentive crews from getting into the same fix, something good will have come from this crash.

The current federal administration seems to be more interested in regulation than deregulation, and there may be areas where such a change is appropriate. One reason that co-pilot Shaw's low pay got so much attention was that it is such a contrast to the typical popular perception of airline pilots: distinguished-looking former military flyers with some dignified gray around their temples (nearly always men), good pay, and years of flying experience. Stereotypes are made to be broken, and my hat is off to any young woman who goes through the arduous process of becoming a commercial pilot, but in the bad old days of high airfares and closely regulated airlines, the companies could afford to hire the very best pilots available, and generally did. The case of Shaw may indicate that inexperienced crews are being pushed too fast into positions of great responsibility without adequate training, or even sleep.

As sad as this accident was, we are starting to see the feedback system of engineering work. I don't mean the stick-shaker; I mean the corrective process that learns from mistakes, errors, and tragedies, and does things to make them less likely in the future. This kind of work takes place out of the spotlight, in quiet offices and labs around the world, but it is the reason that air travel is as safe and reliable as it generally is. And as long as we pay attention to the rare cases when something goes wrong, and have the courage to fix problems—whether mechanical or human—it will keep on getting even safer.

Sources: Two good reports on last week's NTSB hearings may be found at http://www.chicagotribune.com/news/politics/sns-ap-us-plane-into-home,0,5946950.story and http://www.cbsnews.com/stories/2009/05/13/national/main5010745.shtml. My article "The Crash of Flight 3407: Better Deicing Needed?" appeared on Feb. 16, 2009.

Monday, May 11, 2009

An Orbital Service Call to Hubble

Today, if all goes well, the Space Shuttle will take off with a cadre of astronauts whose main job will be to act as glorified technicians. There's nothing wrong with doing a technician's job well, and although I have said critical things about the Space Shuttle and NASA in the past, this trip is more justifiable than most. The Hubble space telescope, launched in 1990, has already outlived its nominal lifetime, and with some judicious repairs, scientists hope it will run for at least another five years or so. But as a recent National Public Radio report describes, fixing Hubble is no ordinary service call.

Take the 111 screws, for example. I have enough trouble in an ordinary 1-G lab keeping track of small screws involved in my research projects. If I spend a day or so building something, I'm pretty sure that at least a few minutes will pass with me on my hands and knees on the floor, looking for a critical nut or bolt that jumped off the edge of the workbench. Well, it turns out there's an instrument box on Hubble that needs to be accessed for repairs, but the designers never meant for it to be fooled with anywhere but on the ground. Hence the 111 screws, which would form a toxic cloud of malicious orbiting metal if just released around the telescope. Never fear, though. NASA engineers under the direction of Jill McGuire devised a plate with 111 or so tiny plastic boxes that fit exactly over the screws. A hole in each box is just big enough for the screwdriver to go through, but when the screw comes loose the only drifting it can do is inside the box. A snap-on replacement cover is part of the repair kit, so the astronaut doesn't have to find all those screws and put them back on.

This is engineering of an extreme kind, and I suppose that in testing the extremes of repair operations in the vacuum and weightlessness of space, NASA may come up with something that we ordinary Jills and Jacks could use as well. Back in the days when NASA was searching for reasons to justify itself after the end of the Apollo moon program, you heard a lot about "spinoff technologies"—ideas that were originally developed for the space program and turned out to be useful for earthbound applications as well. I have the unconfirmed impression that Velcro may be in this category, but other than that, I can't think of anything that's made a huge difference to the economy. I'd like to have one of those sleek little vacuum-and-zero-G-adapted hand drills they're using for my own toolbox, but not if I had to pay $180,000 or whatever the equivalent cost would be.

The Hubble, as with most astronomy, is pure science, and science is its own justification, culturally. To do certain kinds of science, you end up developing some weird engineering, such as plates that capture 111 screws in the vacuum of space. Offhand, I can't think of any other circumstance in which you'd need a screw-capturer like that, but maybe tools developed for some other obscure task the astronauts will do up there, will turn out to have beneficial consequences down here. Even if it doesn't, just getting the astronauts up there safely and back is something that takes a lot more resources than developing the hundred or so tools they'll carry with them. But that would get us into the manned-versus-unmanned space flight argument, and hey, I'm on vacation. I'd rather not argue. Let's just hope the repair trip goes well and Hubble gives us another half-decade or so of fine science. By which time, I also hope, we're well on the way to replacing the outmoded Shuttle with something better.

Sources: A written form of the report about NASA tools carried on NPR can be found at http://www.npr.org/templates/story/story.php?storyId=103915475.

Monday, May 04, 2009

In Search of the Perfect Email Software

Email is as much a fact of life nowadays for most knowledge workers as opening the morning snail mail used to be. I don't know about you, but just dealing with email has lately gotten to be a time-sink and chore I don't look forward to. Anyone who can improve this situation will certainly do a lot of people a lot of good, and that's a good example of engineering ethics in my book. Part of the problem, no doubt, is my high expectations for what should happen to my email. In what follows I'm probably going to show off my ignorance and prejudices in a good strong light, but it may be worth it if something close to my ideal software ever turns up.

I'm one of those people who takes seriously the thought that months or years later after I get an email message I care about, I should be able to find it any time my computer is on, whether it's connected to the network or not. This means (unless I'm blessed with a total-recall photographic memory, which I'm not) that important emails (that is, ones I decide to keep) need to be sorted somehow and should physically reside somewhere on my laptop for access without a network connection.

Back when email was a novelty and getting three emails a day was a comparative blizzard, these requirements were easy to meet. Sorting email into files on my computer took maybe thirty seconds. But nowadays, if I skip reading my email for only twenty-four hours, when I check it again there's easily fifty or a hundred of the little jewels, only a few of which I am interested in. The rest is everything from notices about worker-training courses I don't need to offers to help princes get their money out of countries I've never been to, and worse.

I used to pride myself on doing what the older generation called "clearing my correspondence," which meant that every day, I checked out every email (at least by its source and subject line), either threw it away or filed it somewhere using the software filing routine, and got the inbox down to either zero or the two or three emails I hadn't decided what to do with yet. Filing consists of negotiating one of those multiple-level popup menus, most layers of which have so many items that I have to use the scroll function, which on no email program I've tried has a scroll bar, so I have to slide to the bottom of the visible list and stand on the mouse till the desired category comes into view, at which point I select it and sometimes have to do the whole thing over again at the next menu level (I have files within files within files, sort of like wheels within wheels). This means that filing a single email sometimes takes twenty or thirty seconds, and oh! the joy when the very next email in the list turns out to belong right where the previous one went—another thirty or forty seconds, because this time I'm mad and slip up and select "Nutcases" instead of "NosferatuTheorists"—well, in that case it wouldn't matter, but you know what I mean. So after a half hour or forty minutes of this kind of thing, I struggle back up the Sisyphean slope to a mostly empty email box, only to turn my back for a few hours and face a door-filling pile flooding in again, metaphorically speaking.

So how would the perfect email software help me? For one thing, I could use it on either of my two main computers. The way it is now, I can have part of what I want—files of old email without Internet access—only on my office computer. For some obscure reason known only to IT professionals, I can send emails with a computer-resident software like Thunderbird (or the old Eudora) only if I'm physically plugged in to my university server. If I'm anywhere else, I have to log into the internet-based software program the University runs (it's like Gmail in that respect), send an email, and copy it to myself in order to have a permanent copy that I'll later download into my Thunderbird resident software, but that adds to my already tedious task of sorting email.

Returning to the elusive purpose of describing the perfect email software, I'd better resort to bullets if I'm going to finish at all. It would:

--- Store all the email I decide to keep in an intuitive, use-frequency-based filing system (one that makes the more frequently used files easier to get at, and saves the four-layer menus for ones I access every three years or so)
--- Be accessible anywhere in the world, for sending as well as receiving, and would leave a permanent sorted record of sent emails on my machine as well as on some server somewhere
--- Would automatically figure out the procedure for getting off an email list and write the necessary messages once I put a sample undesirable email into a "get rid of this junk" file
--- Would use some kind of quasi-intelligent processing to figure out which email sources I'm really interested in and which I'm not, and would rank order these within some kind of time-based presentation, that is, most recent interesting ones first, older interesting ones later, and so on.
--- Would give me access to all emails I decided to keep, going back to the dawn of time (email time, anyway) with or without internet access

There, that'll do for starters. So far, I haven't been able to find the perfect software. None of the server-based systems will do (Gmail, Microsoft Outlook) because you have to be hooked to the Internet to find old emails, and some of them throw away old ones anyway, drat it. But the resident programs that store mail physically on your laptop can't be used to send mail except from the one server. That seems like a simple thing to fix, but maybe fixing it would violate the computer-science equivalent of the law of gravity, or something. And moving categories around so that the most frequently used folders are easy to get at doesn't sound hard. Note that I don't want to do it—I want the software to do it for me. Sure, I could reorganize my own files, but that would add a three-hour task every few months to my already excessive time spent on computer housekeeping, and I thought time saving was what software was all about. Hah.

And don't tell me to get a new email account to cut down on the junk email, either. That way folly lies, because it just trades a few months of quiet now for the heinous duty of checking more than one email account—forever. No, thanks.

Any suggestions?

Sources: If you want to know what "Sisyphean" means, check out the back story on the founder of Corinth at http://www.mythweb.com/encyc/entries/sisyphus.html—he was quite a tricky guy, it turns out, and well deserved the punishment meted to him by the gods. I think some of his descendants must be writing spamware today.

Monday, April 27, 2009

Poles Vault to Headlines: The Defective Light Pole Problem

Ordinarily, when I select an item for discussion in this blog, I try to choose one that has relevance beyond my local area. After all, I'm writing partly for readers around the world who follow this blog (both of them). So last month, when an athletic-field light pole toppled over at a high school in Hays County where I live, I thought it was odd, but not of sufficiently general interest to write about here. Now I've changed my mind.

As Eric Dexheimer of the Austin American-Statesman described in a front-page story on Sunday Apr. 26, at least eight light poles across the U. S. have collapsed in the last three years. All of these poles were designed by Whitco, a firm in Fort Worth, Texas which is now bankrupt. Fortunately, no one has been killed or injured in these pole failures, but a lot of school districts and towns are out a lot of money for smashed lighting fixtures, damaged gyms, and whatnot, and everyone who ever bought Whitco poles is now anxiously examining them. In many cases they're finding cracks and replacing them before anything worse happens. On Apr. 23, the U. S. Consumer Product Safety Commission announced it would investigate the pole failures, and has power to issue a safety recall if one is warranted. Dexheimer's own investigation revealed that the design of the poles was marginal in the extreme, and probably reduced the ability of the poles to withstand high winds. The thickness of metal at the base wasn't sufficient to take the huge stresses that result when wind blows against the large area of lighting fixtures at the top of the pole, and the poles developed cracks. The official investigation will probably confirm these findings.

What implications for engineering ethics does this story have? The parties involved are the engineers who designed the poles, the firm (Whitco) that employed the engineers, the organizations that supplied the materials (a Mexican steel mill) and fabricated the poles to Whitco specifications (another Fort Worth company still in business), the agencies that bought the poles (mostly school districts), and at least that portion of the general public which was within falling radius of the poles when they fell. Clearly, if the engineers knowingly chiseled on the pole specifications to save money, the fault lies with them. The American Society of Civil Engineers has a Code of Ethics which states (Canon 1 (b)) that "Engineers shall approve or seal only those design documents, reviewed or prepared by them, which are determined to be safe for public health and welfare in conformity with accepted engineering standards." The Code has no legal standing, but if the engineers who did the work were required to be licensed professional engineers, they could lose their licenses. However, since they worked for a private firm and not directly for a public agency, it's likely that no such requirement applies.

An added complication to the situation is that the firm selling the poles has gone bankrupt (although the name Whitco was bought by a separate company afterwards). Bankruptcy in the corporate world can be like death in the human world—it can remove the entity concerned from all worldly obligations. Of course, a good enough civil lawyer can find a way to extract blood from a turnip, or at least the turnip's heirs and assigns, but bankruptcy makes things even harder. After all the legal dust settles, it may turn out that the school districts and their insurance companies are without recourse, and have to swallow the expense of new poles on their own.

It remains to be seen what the Consumer Product Safety Commission will do. Their bread-and-butter issues usually run to things like toys with lead paint, not eighty-foot light poles sold to school districts. But the current administration is taking an expansive view of governmental authority, so it's not surprising that light poles will fall (so to speak) under the purview of the Commission from now on.

And that is not necessarily a bad thing. Somebody has to mind the henhouse, and foxes (that is, private companies) aren't too qualified. In some countries, anyone who calls himself or herself an engineer must have a governmentally-sanctioned professional license. But in the U. S., back when a movement toward licensing was gaining steam in the 1930s, private firms, worried about the chance that licensing would drive up the cost of engineering services, rushed to pliable state legislatures (is there any other kind?) and convinced them to write in "industrial exemptions," meaning that if you worked for a private firm as opposed to the government, you didn't have to have a professional engineer's license. And so the matter stands today.

It seems to work all right most of the time, except when it doesn't. And when a clear case of engineering incompetence shows up, as it appears to have done on playing fields all over the U. S., the only recourses are financial. If the engineers responsible are ever identified, and they hold P. E. licenses, they could lose them. But that wouldn't stop them from working as engineers, at least not in the U. S. Whether this is a good or a bad thing, I will leave to you to decide.

Sources: The online version of the Austin American-Statesman article can be found at http://www.statesman.com/search/content/news/stories/local/04/26/0426poles.html.

Monday, April 20, 2009

The EPA and Carbon Dioxide: What Next?

Sunday morning I was sitting at the breakfast table reading the paper. A headline caught my eye, and I told my wife that the U. S. Environmental Protection Agency just decided that carbon dioxide is a pollutant that endangers public health and welfare, which is the first step toward regulating it.

"Carbon dioxide?" she asked. "Don't we breathe that out?"

"That's all right," I said, "you'll still be able to breathe in as much as you like."

Bad jokes aside, with this finding the EPA is taking a giant step into an uncharted region of U. S. environmental regulation, a step bristling with enough ethical issues and questions to keep me writing for several columns. But I'll try to limit myself to this one for the time being.

It was President Richard Nixon who founded the Environmental Protection Agency in 1970, back when rivers in certain industrial areas routinely caught fire and everyone from Rachel Carson to Carl Sagan was forecasting various kinds of environmental doom. The spate of new regulations that the young agency promulgated raised enough furor among manufacturers to exceed my threshold of attention for political events, which was then very high. I remember wondering what the world was coming to if the federal government could tell you what you could and couldn't send up your own private smokestack. I even knew a few pioneering environmentalists back in my high-school days, in particular a young woman who thought that founding the EPA was the only good thing Richard Nixon ever did.

Gradually, corporate America was dragged, sometimes kicking and screaming, into a world of environmental regulations. Former industrial heroes such as Thomas Midgley (1889-1944), who was awarded and feted during his lifetime for discovering both tetraethyl lead to improve gasoline's octane rating, and chlorofluorocarbons ("Freon") for use in refrigeration systems, became post-mortem villains as first leaded gasoline, and then CFCs, fell under the ban of the EPA and other regulatory agencies worldwide. Now that some of the environmental dust has settled, most reasonable people would agree that some amount of environmental regulation is a good thing. We have seen what its absence does in areas of the former Soviet Union and elsewhere, and have witnessed the comebacks of species such as the bald eagle, whose existence was threatened by the pesticide DDT.

That being said, I should point out that regulation of carbon dioxide, should it ever take place (and it looks like either the EPA or Congress will do just that), is a different breed of cat, for several reasons.

First of all, there is the sheer scale of carbon dioxide emissions. Every time anybody anywhere burns a fossil fuel—coal, oil, or natural gas—they make carbon dioxide. DDT, CFCs, and even tetraethyl lead were special chemicals made for specific purposes, and after varying amounts of trouble, acceptable substitutes were found or other ways of achieving the same purposes were discovered. None of these chemicals was used as the primary energy source for the nation's transportation, electric utility, and manufacturing industries. In 2002, the U. S. derived over four-fifths of its energy from burning carbon-containing compounds, and that fraction hasn't changed much since then. If we stopped burning carbon tomorrow, we'd go back to the energy consumption rates of perhaps 1920, when the well-wired house had maybe four electric outlets in all and a family of five with one car was doing quite well to drive ten miles a day. Substitutes for carbon-based fuels—primarily nuclear energy, with wind, hydroelectric, and other renewables coming up far in the rear—are available, but not any time soon in the scale required.

Another fundamental difference between carbon dioxide regulation and everything else the EPA has done up to now is the nature of the science and other events on which the finding is based. I know I'm up against everybody from Al Gore on down when I say that the connection between global warming and anthropogenic emissions is less than crystal-clear. On the bus ride from scientific observations to the conclusion that humanity is committing collective suicide by continuing to burn carbon-based fuels, there are a number of places to get off. One can question whether the current trends are largely due to human activity versus natural causes. One can even question whether a moderate amount of global warming will in fact be the earth-stopping catastrophe that it is portrayed to be. There is no better way to gain the fascinated attention of a bored elite than by forecasting some giant disaster that requires expansive governmental intervention to fix. Few remember the popularity of Paul Ehrlich's 1968 book The Population Bomb, which forecasted a worldwide overpopulation nightmare that would come to its ghastly fruition somewhere about now. Instead, we're finding that industrial advancement in developing countries leads so rapidly to declining birthrates that the problem in many countries is not too many births, but too few. Mr. Gore's film "An Inconvenient Truth" may find itself in a similar situation some day.

For reasons that are more geopolitical than environmental, I would like to see the U. S. move away from fossil-fuel imports in a reasonable, coordinated fashion that doesn't smuggle in social engineering or class warfare under a guide of environmental protection. Maybe the EPA's carbon-dioxide finding is a step in that direction. I don't know. But for the reasons listed above and many others besides, it bears most careful watching in the coming months.

Sources: The EPA's news release about its finding is at http://yosemite.epa.gov/opa/admpress.nsf/0/0EF7DF675805295D8525759B00566924. The New York Times article I read at the breakfast table is at http://www.nytimes.com/2009/04/18/science/earth/18endanger.html. A useful chart developed by Lawrence Livermore Labs from which I obtained information about U. S. energy use can be found in the Wikipedia article "Energy Conservation" at http://en.wikipedia.org/wiki/File:USEnFlow02-quads.gif.

Welcome to Online MBA Guide Readers: A special welcome to readers of the Online MBA Guide who may have found us. I recently learned that this blog was included on a list of 50 best business ethics blogs by the editors of that blog (see the article at http://www.onlinembaguide.net/50-best-business-ethics-blogs). True, we're No. 50, but at least we're on the list!

Monday, April 13, 2009

The Ethics of Consumption: Electric Carving Knives

Most engineering ethics concentrates on the production end of things: how engineers can engage ethically in making products or services. When the general consuming public appears in an ethical analysis, it is usually assumed that they know little or nothing about the technical or even ethical issues involved. Like babies in their parents' arms, the public is thought to be largely dependent on the kindness and forethought of wiser engineers to protect them from harm. But consumers are not always passive recipients of what engineers design for them. As consumers, they have both rights and responsibilities. You hear a lot about consumers' rights but not so much about their responsibilities. And one of those responsibilities may be to avoid buying things that are simply silly or wasteful.

All this is brought to mind by Easter dinner, or rather, one little incident during Easter dinner yesterday. In helping my wife prepare the meal, I got out our electric carving knife and sliced the pork roast.

We received the carving knife as a wedding present 31 years ago. The handle is two-toned plastic—white on top, avocado on the bottom (avocado was a very popular color in the late 1970s), with a red safety catch and knife-release buttons. The knife is a two-part affair consisting of hollow-ground serrated knife blades that connect at the tip with a sliding joint and insert in the handle at the other end. Inside the handle is a 120-V motor (you have to plug it in—today's models would no doubt be battery-powered). When you squeeze the trigger, the motor sets the two halves of the knife sliding back and forth in a reciprocal motion that makes cutting through the toughest meat a breeze, as I'm sure the TV ad said.

It is a General Electric product, model 02EK15, manufactured in Bridgeport, Connecticut. Anyone familiar with New England knows that for much of the twentieth century, Bridgeport was a reasonably prosperous center of appliance manufacturing. Much of the mid-century domestic bounty of irons, washing machines, toasters, and electric carving knives poured from the well-paid hands of factory workers in and around Bridgeport. Of course, the invasion of cheaper imports changed all that, and Bridgeport is now in the news, if ever, primarily as a bad example of a pathologically sick city whose employment base collapsed decades ago.

To some people, the very idea of an electric carving knife smacks of decadence and extravagance. After all, if a piece of roast is so tough the only way you can cut it is with an electric-powered tool, it's too tough to serve to company anyway. And in the fate of Bridgeport they see a just end to a debauched consumer culture that went over the top with ridiculous objects like electric carving knives.

But to others, an electric carving knife could serve as a symbol of a lot that was right about America. Who else was making electric carving knives in 1978? Maybe nobody, and if so, we were first in the world with electric carving knives. You're not going to win a war with electric carving knives, but the kind of economy that gave rise to them was so powerful that when President Reagan threatened the Soviet Union with Star Wars, it set off a chain of events that ultimately marked the downfall of Communism there and in Eastern Europe. After 1990, people in East Germany who could afford an electric carving knife could jolly well go ahead and buy one.

I'm not a party of either camp. I just like to use the knife occasionally when there's a lot of carving to do fast. For all I know, there may be industrial models of electric carving knives that save thousands of dollars a year in commercial kitchens. And since General Electric built this one so well (and we use it so seldom), I'm not going to be in the market for a new one any time soon. This one still works just fine.

The economy worldwide is currently in a funk, and we are hearing advice that it is our privilege, maybe even our patriotic duty, to go out there and spend money, even borrowing it if necessary, and get more of those things that make it such a good deal to be a consumer today. I suppose I could go out and find a newer electric carving knife, cordless, maybe even one with a wireless remote control and Internet access built in and a camera chip so people around the world can get a carving-knife-eye view of our Easter pork roast. But you know, I believe in buying things only when I can see a good use for them. If everybody had my purchasing habits, we'd have a depression so deep that it would make this current slump look like happy days are here again. Fortunately for the economy, for every believer in relative simplicity like me, there are several spendthrifts who have to get the latest things just as they come out, so whenever money starts flowing again, there will be people around to spend it on the 2009 version of electric carving knives.

And so I don't think we can get very far, at least in a free-market economy, with a general theory of consumption ethics. It's so individualized, for one thing, that it is hard to say anything ethics-wise that would apply to most consumers. I'll go along sticking to my ethic of relative simplicity, and my 31-year-old electric carving knife, but I'm sure the slack will be taken up by some of you folks who can't wait to see your pot roast on YouTube next Easter.

Sources: It appears that the direct descendant of my carving knife is still out there: Black & Decker, for example, still makes a model EK700K, and it's not even battery-powered yet (see e. g. http://www.bizrate.com/electricknives/oid1017775940.html) Whether the "EK" in the model number indicates that B&D bought the product line from GE somewhere along the line is anybody's guess. And for an interesting view of how domestic consumer products were developed in the controlled economy of East Germany in the 1950s, see Karin Zachmann's "A Socialist Consumption Junction: Debating the Mechanization of Housework in East Germany, 1956-1957" in Technology & Culture, vol. 43, pp. 73-99 (Jan. 2002).

Monday, April 06, 2009

Google Earth's Street View: Public Boon or Privacy Invasion?

Google Earth is, simply put, an attempt to put the earth online in maps and photographs. Lately they have been adding "street views" taken by camera-equipped cars that roam the streets taking 360-degree photographs for display to anyone who types in the correct address, or latitude and longitude, or any number of other ways to indicate location that Google can figure out. While distributing scenic views of public places is nothing new, the novelty of Google's approach is the sheer scale of what they're doing combined with extreme ease of accessibility.

Some folks in the English town of Broughton thought it all a bit much when the Street View car showed up on their roads recently. As the online Times of London explained, resident Paul Jacobs saw the vehicle from an upstairs window, got mad, ran down to the street, and stopped the car. Residents were already anxious about a number of burglaries in the prosperous area, and this was the last straw for several of them, who formed a human chain and blocked further access to their town. The Street View driver eventually turned around and left, and so Broughton is one of the shrinking number of places that you can't see up close and personal on Google Earth.

I just checked to see if my own little side court in this midsize Texas town had been visited by Google Earth, and indeed it has. I can't tell exactly when, because I don't put a big sign out in the front yard every day with the day's date on it. But from certain vehicles parked in driveways I can tell it's within the last two years, and maybe more recently than that.

Would I have objected like Mr. Jacobs if I'd been here when the truck came by? Being natively technology-friendly, probably not. I might have gone out to talk with the driver, but only to ask for technical details about the camera.

I first heard about the anti-Google-Earth mob on a radio talk show focused on privacy issues. Although Google has a way for individuals (or nations, for that matter) to request that certain images be blurred or removed, this is an "opt-out" process, which builds in a bias toward display that an "opt-in" process would not have (if you had to ask Google specifically to put your street on their system, they wouldn't display nearly as many streets). What are the ethical issues involved here?

The first step in analyzing an ethical problem is to figure out who is involved. In the case of Mr. Jacobs, for instance, the concerned parties are him and his neighbors; Google; and the rest of the world. Already we've got a problem, in that rarely do ethical issues go straight from a small, local population to literally everyone on earth who has a computer with network access. I say rarely, but it's becoming more common these days as computer worms produced by small but influential outlaw groups affect millions or billions of people. Fortunately, what Google Earth is trying to do appears to be more benign, but that may be only because people of ill will haven't figured out how to take advantage of it yet.

Clearly, if what Google Earth presented was live pictures, there would be a much bigger problem. It frankly doesn't bother me much that a photo of my house taken some time in the last two years is online, but if it was live and burglars could just watch until they were sure no one was home, it would be a different matter altogether. Nevertheless, the potential now exists for someone (or something, in the case of automated malware) from any part of the world to use that information for inimical purposes, and there's nothing I can do about it until after it happens.

And that may be the best thing to do in such cases. I do not generally subscribe to the "precautionary principle," which says no new technology should be adopted until it is proven to be safe. It may be the best thing just to wait and see if anyone actually uses Google Earth's street-view feature in the commission of a crime, and then deal with the problems that arise. That's not too fair to the people who will be victims of the crime, but somebody has to go first, I guess. And to stray a little bit into the field of utilitarian ethics (a place I don't like to spend much time in), there is the advantage individuals get from being able to use Google Earth to, for instance, check out motels without going there, as I did a couple of weeks ago. So maybe this kind of good for a great number of people is worth the minor risks taken by, well, almost an equal number of people. That's the problem with utilitarianism, the math quickly gets out of hand.

As the same talk-show host pointed out, the Google Earth system is one more way of packaging ordinary people as a product. Far more likely than burglars, advertisers (or their software) will spend a lot of time studying street views. You can tell a lot about a person from looking at their house: income level, types of cars they drive, whether they need a new lawnmower, and so on. This is a use that isn't clearly objectionable, but isn't exactly what I had in mind, either.

So, as with so many other new technologies, we will wait and see what happens. I don't think Google Earth's photo cars will run into too many privacy-hungry mobs in Texas, but I'd be careful around Massachusetts and Vermont.

Sources: The online Times of London story appeared on Apr. 3 at http://technology.timesonline.co.uk/tol/news/tech_and_web/article6022902.ece. The radio talk show was hosted by Dr. Katherine Albrecht (http://www.katherinealbrecht.com/), whose work has appeared elsewhere in this blog as the head of a group concerned about RFID usage in supermarkets.