On Sat, 03 Dec 2011, Michael van Elst wrote:
So all systems panic at boot every 3 out of 10000 times?
[...]
The point being: 3 out of 10000 is too much.
If that changes from "panic" to "all systems reboot almost instantly, every 3 out of 10000 boots" then I would be fine with it. If you have a million new users, 300 of them would hit the bad case on their first boot, so it would have to be handled in a friendly way.
If you have one device and reboot every day, you would hit the bad case once every 9 years, on average. If you have an embedded device that the user turn on and off many times per day, it's likely that the user-accessible power switch would actually suspend the device rather than rebooting it, so it could go a very long time without hitting the double-reboot case.
--apb (Alan Barrett)