I would NOT trust a website with my private data if they wrote their app in C. Buffer overflow -> execute your own code -> write a function that pipes an entir

I would NOT trust a website with my private data if they wrote their app in C. Buffer overflow -> execute your own code -> write a function that pipes an entire database out to you. It really is a trivial problem given the buffer overflow, and programmers (myself included) generally suck at not putting buffered overflows into code. Plus there's the whole portability thing, which is entirely pissed away by C compilation (yes, arguably you can write generic C, but there are fundamental differences (file i/o, sockets, etc.) between different OS's, and restricting yourself is dumb) Pre-compilation of scripting languages isn't necessarily a bad thing though. And this guy is no C expert. He's just got a golden hammer. http://en.wikipedia.org/wiki/Golden_hammer http://en.wikipedia.org/wiki/Golden_hammer