Not that 3 hours of simulator training would have helped in either crash. The problem wasn't that the ipad course was inadequate training for the new procedures (as he said there were no major procedural differences), but that any mention of MCAS had been removed from the manual to avoid needing new or modified procedures.
Even worse, MCAS was designed to be near-impossible to override, using data from only one sensor, to avoid the need for procedural changes.
Another _unverified_ thing I heard was that initially MCAS would only be able to issue a single nose down command, and was later modified to be able to issue multiple.
1. https://www.seattletimes.com/seattle-news/times-watchdog/the...
IMO Boeing should be required to separate the military and civilian parts of the company and allow the military side to build civilian aircraft based on existing civilian models. I honestly think it's the only way to save the company, because right now airlines, regulators, pilots and passengers do not trust the current incarnation of Boeing. With their shady culture, we don't know what else is hiding in the airplane. Culture issues aren't solved overnight.
I fly a lot of miles and am the type of person who keeps the airlines in business, and I will not fly on a 737 MAX for the foreseeable future. My coworkers are in the same boat. I don't see the American carriers being able to return these planes to service before 2022. This is absolutely an existential threat to the US aviation industry, and I think the only solution is to split Boeing up.
At this point FAA should require minimum 2 sensors for something like MCAS which can crash they plane. This should be without regard to any prior certification of the planes.
My understanding is that it was never limited to one command.
Instead, all their failure analysis was based on the assumption the pilot would correctly identify the problem immediately after the first activation and follow the runaway stabilizer checklist (disabling all electric trim) before the second activation could occur.