When letting the user put system into an invalid state is a desirable propertyayende.com2 pointskiyanwang8 years ago