The cockpit warning system sounded again, this time with a long ‘bong’ that no one present could recall having heard before. This was the ‘all engines out’ sound, an event that had never been simulated during training. Seconds later, most of the instrument panels in the cockpit went blank as the right-side engine also stopped and the 767 lost all power. … They immediately searched their emergency checklist for the section on flying the aircraft with both engines stopped, only to find that no such section existed.
— From the story of Air Canada Flight 143, dubbed the Gimli Glider, which ran out of fuel at 41,000 feet. The subsequent investigation revealed corporate failures and a chain of minor human errors which combined to defeat built-in safeguards. (via Andrew Pile)
