alf
"By their very nature, fault-tolerant systems try to mask problems. Thus they can mask bugs or configuration problems while insidiously lowering their own fault-tolerance." http://research.google.com/archive/paxos_made_live.pdf