Need to say more on std functions for string operations - mention inherently insecure gets() - limitations of strncpy()/strncat() - cause of strlcpy()/strlcat() - off-by one errors - CERT C coding standard ...