[tptacek]

In the context he's talking about, C programs aren't vulnerable to "XSS-like attacks"; C programs rarely deal with content-controlled code.

[maaku]

Buffer overflows.