So pulling the battery becomes a crutch for the RIM software team. No need to do a more elegant watchdog timer or properly trap Java errors. Just pull the battery!
>We went to lunch afterward, and I remarked to Dennis that easily half the code I was writing in Multics was error recovery code. He said, "We left all that stuff out. If there's an error, we have this routine called panic, and when it is called, the machine crashes, and you holler down the hall, 'Hey, reboot it.'"[0]