"black zones" where the orbiter would have failed before bailout was possible. These contingency aborts were added after the destruction of Challenger. Post-Challenger abort enhancements Before the Challenger disaster during STS-51-L, ascent abort options involving failure of more than one SSME were very limited. While failure of a single SSME was survivable throughout ascent, failure of a second SSME prior to about 350 seconds (the point at which the orbiter would have sufficient downrange velocity to reach a TAL site on just one engine) would mean an LOCV, since no bailout option existed. Studies showed that an ocean ditching was not survivable. Furthermore, the loss of a second SSME during an RTLS abort would have caused an LOCV except for the period of time just prior to MECO (during which the orbiter would be able to reach KSC by prolonging the burn time of the remaining engine), as would a triple SSME failure at any point during an RTLS abort. After the loss of Challenger in STS-51-L, numerous abort enhancements were added. With those enhancements, the loss of two SSMEs was now survivable for the crew throughout the entire ascent, and the vehicle could survive and land for large portions of the ascent. The struts attaching the orbiter to the external tank were strengthened to better endure a multiple SSME failure during SRB flight. Loss of three SSMEs was survivable for the crew for most of the ascent, although survival in the event of three failed SSMEs before T+90 seconds was unlikely because of design loads that would be exceeded on the forward orbiter/ET and SRB/ET attach points, and still problematic at any time during SRB flight because of controllability during staging. A particularly significant enhancement was bailout capability. Unlike the ejection seat in a fighter plane, the shuttle had an inflight crew escape system (ICES). The vehicle was put in a stable glide on autopilot, the hatch was blown, and the crew slid out a pole to clear the orbiter's left wing. They would then parachute to earth or the sea. While this at first appeared only usable under rare conditions, there were many failure modes where reaching an emergency landing site was not possible yet the vehicle was still intact and under control. Before the Challenger disaster, this almost happened on STS-51-F, when a single SSME failed at about T+345 seconds. The orbiter in that case was also