Is it a bad thing to actually show the "nuts and bolts" of a buffer overflow? I was actually thinking as a part2 to this to show an outdated buffer overflow, the exact CVE# it went after, how it worked and how it was fixed. Kinda present it as a case study. I guess that wouldn't go over well here?