What stops hostile code from hijacking these values?