title: "getenv... function ... may be unsafe" - really?
body: <p>I'm using MSVC to compile some C code which uses standard-library functions, such as <code>getenv()</code>, <code>sprintf</code> and others, with <code>/W3</code> set for warnings. I'm told by MSVC that:</p>
  
  <blockquote>
    <p>'getenv': This function or variable may be unsafe. Consider using _dupenv_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS</p>
  </blockquote>
  
  <p>Questions:</p>
  
  <ul>
  <li>Why would this be unsafe, theoretically - as opposed to its use on other platforms?</li>
  <li>Is it unsafe on Windows in practice?</li>
  <li>Assuming I'm not writing security-oriented code - should I disable this warning or actually start aliasing a bunch of standard library functions?</li>
  </ul>