I always keep this in mind when building fault-tolerant systems: The major difference between a thing that might go wrong and a thing that cannot possibly go w

I always keep this in mind when building fault-tolerant systems: The major difference between a thing that might go wrong and a thing that cannot possibly go wrong is that when a thing that cannot possibly go wrong goes wrong it usually turns out to be impossible to get at or repair. And user interfaces: A common mistake that people make when trying to design something completely foolproof is to underestimate the ingenuity of complete fools.