How dependable are distributed f fault/tolerant systems?