l Threat model like Java applet, but worse for privacy – node state: cache contents, neighbor list, IP addr, username, … – message itself l Integrity and privacy: std type-safety and namespace isolation l Resource attacks: resource-managing JVM [OSDI’00, ...]