(01-09-2015, 02:02 PM)vypr Wrote: Stuff like that is human error when they develop the application. Programming languages aren't made with security in mind (besides any runtime-based languages, such as Java and the HotSpot VM). Anyone can make an insecure program in any language.

That may be true, but C makes it easier to do these mistakes. It is easier to not null-terminate a string in C, in another language this has been done reliably by the person creating the language (most of the time). There is a single point of failure and not thousands of them like in C. And there are many more examples for this. I don't want to say that C is totally not suited for security stuff, but it is much easier to make critical mistakes (buffer overflows, not-terminated strings, gets() and much more) than in other memory-safe languages.