[maaku]

If you think C programs aren't vulnerable to XSS-like attacks, you need to take a security course.

[tptacek]

In the context he's talking about, C programs aren't vulnerable to "XSS-like attacks"; C programs rarely deal with content-controlled code.

[maaku]

Buffer overflows.