[throwawaylinux]

> if software can damage the hardware it's running on then that should be seen as a fault/bug

It is.

And I'm still waiting to hear how that absolutely fail-safe bridge is going to work...

[salawat]

Easy. You set your safety factor in excess of expected everyday load.

The fact is, Engineering has become the Art of specifying the worst (read: cheapest) implementation one can get away with.

[mdtusz]

Building in a high safety factor is not a failsafe. A failsafe requires that in the event of failure, the system goes into a safe state.