Engineering
Why Fail-Safe Design Uses Both Redundancy and Diversity
Quick fact
In aerospace, the Boeing 777 uses triple-redundant fly-by-wire systems with three different processor architectures and two different software languages to protect against both hardware and software common-mode failures.
Why this is interesting
Imagine a plane with two identical engines, both made by the same manufacturer with the same design. If they fail for the same reason, you have no engine left. How do engineers guard against that scenario?