>Don't think that you're escaping C or C++ just because you're using Ruby, or JavaScript, or Python, or Perl, or Tcl, or even Java. Don't think that you aren't

>Don't think that you're escaping C or C++ just because you're using Ruby, or JavaScript, or Python, or Perl, or Tcl, or even Java. Don't think that you aren't as vulnerable using a dynamic language as you are using C or C++ directly. Actually this is completely backwards. Think exactly that you are NOT AS vulnerable as using C or C++ directly. That it's C/C++ underneath has little importance. It FAR MORE difficult and FAR LESS common to reach runtime/interpreter bugs that to produce bugs of your own in the higher level language. >Furthermore, it is quite easy for dynamically typed languages to suffer from very serious security vulnerabilities. Of a different kind, that doesn't pertain to the current discussion.