Given the current whistle-blower situation I think it entirely plausible that FFB currently has people thinking about ways to selectively erase data. And I thi

Given the current whistle-blower situation I think it entirely plausible that FFB currently has people thinking about ways to selectively erase data. And I think it's entirely plausible that the people involved in doing so would not be the same people as would have to be dealing with an outage. Maybe I've dealt with both the military and super-large organisations too much, but yes, I do consider scenarios like this. As part of designing soft-real-time safety-critical systems I had to think of scenarios like this. I continue to be surprised that people didn't read exactly what was said ... I generally expect programmers to be more literal. Again, I guess I was wrong. I'm learning. I won't make that assumption again, and I'll be more careful about exactly what I say, and how I say it.