On Mon, 2007-07-23 at 14:48 -0400, Andrew Sullivan wrote: > Right. But there's a big difference between this case and many > catastrophic problems, because it's entirely possible that the whole > reason you were using 2PC was to increase reliability in the face of > various disasters, including operator error. So you had _better_ > know which operator errors of this very feature are likely to cause > catastrophes. Fair enough. I'm not very opinionated about the referenced "feature/bug" discussion, I just wanted to add some context to the problem you mentioned (for the archives, if nothing else). The way you worded your reply would scare anyone away from using 2PC at all, and 2PC might be useful in Ben's case. Regards, Jeff Davis