On 5/3/2010 12:55 PM, Chris Friesen wrote:

Arguably, the blowout preventer should have been able to survive the
loss of the rig.

Unless the blowout preventer itself was blown up by a bomb, it should
have been designed to fail safe.

"When a failsafe system fails, it fails by failing to fail safe."

from "Systemantics" by John Gall

see #27 at http://en.wikipedia.org/wiki/Systemantics

--
Morris Dovey
DeSoto Solar
DeSoto, Iowa USA
http://www.iedu.com/DeSoto/