NoIdeaAtAll

Look, you're just another arrogant novice who runs around telling people how to be safe so you can convince yourself that you're safe. Maybe you'll grow out of that, or maybe you'll stay obnoxious forever. I doubt you want an actual answer, and I'm pretty certain you don't deserve one.

However, giving you the benefit of the doubt - There tens of thousands of programmers out there (myself included) who write software to analyze data. We don't make "apps" for users, and we don't download random PDFs or MP3s for input. Your view is so limited, you can't even imagine software that isn't a product or a tool for advertising, but trust me - a lot of software is written in other environments, and malicious users or malicious data is not a real concern.

Anyways, don't bother to reply. I'm sure you won't admit you're wrong, and I'm not interested in continuing this discussion.

> I think I cannot trust you with C.

You really don't get it, but your arrogance is overwhelming. I don't care who you trust.

> I mean no offense by this.

Yes you do.

Do you have any idea how much software is run behind a firewall? If someone is even able to run my software that means they have full access to a shell and compilers for multiple programming languages. As such, there are much easier ways to run malicious code than to exploit a buffer overflow in my C or C++...

So really, your argument only applies to public facing servers or web browsers. Unless you're writing one of those, I think your argument is weak.