Comment Comment by anonymousiam proper SEU mitigation goes far beyond ECC. Satellites fly higher than the A320, and they (at least the ones I know about) use Triple Modular Redundancy: https://en.wikipedia.org/wiki/Triple_modular_redundancyhttps://en.wikipedia.org/wiki/Single-event_upsetFor manned spaceflight, NASA ups N from 3 to 5.Other mitigations include completely disabling all CPU caches (with a big performance hit), and continuously refreshing the ECC RAM in background.There are also a bunch of hardware mitigations to prevent "latch up" of the digital circuits. parent anonymousiam 11 months ago
https://en.wikipedia.org/wiki/Single-event_upset
For manned spaceflight, NASA ups N from 3 to 5.
Other mitigations include completely disabling all CPU caches (with a big performance hit), and continuously refreshing the ECC RAM in background.
There are also a bunch of hardware mitigations to prevent "latch up" of the digital circuits.