世界之大，无奇不有

看了Martin Fowler这篇 CatastrophicFailover,我只有一个感觉：面对自然，人只能承认自己的渺小。

However this can be a problem.

A request may do something that causes a server to crash, perhaps by unwittingly exposing a bug in the server software. So when the failover kicks in, the deadly requests gets moved to another server which it can then bring down in turn. Get the timing just right and by the time the first server has rebooted, it will be ready to receive that request again.

(In case you're wondering, this is a true story.)

一个人，乃至一群人，永远不可能通过BDUF的方式搞定一个设计，因为一个设想的很好的东东，实际使用起来，往往会有完全意想不到的结果。所以也根本就不存在什么所有Enough Design这会事存在。

人的智慧有限，即使是一群人的智慧也很有限。看到事情好的一方面绝对不够。