On Wed, 04 Oct 2006 22:22:21 +0000, Matt Whiting wrote:

If we assume a bug that causes a G1000 to fail due to bad data coming
from a sensor, for example, then it doesn't matter if we've a dozen
G1000s in the airplane. Dealing with bad design requires diversity as
well as redundancy.

I'd prefer redundancy at both the sensor and instrument level if I was
flying IFR across the pond.

Good point. But diversity still helps, lest a design flaw in the one
sensor design triggers a design flaw in the one instrument design.

- Andrew