How would you mess with parsers by inserting null bytes in your strings then? (Remember seeing that in a talk from moxie on x509 certificate parsing.)