Why there are so many problems in Computer Science?
I means, why buffer overflow? Why sql-injection? Why XSS?
The answer is simple: because we know computer science, but we don’t know “good” computer science.
“Teachers” usually teach the easiest way to do something not the “good” one.
Just an example, when you learn how to use argv in C Language, they always use something like strcpy(my_str,argv[1]) no one mention the use of getopt that is far more secure!
This is the biggest problem of Computer Science: we just learn how to do things not how to do them right.
