I'm pretty sure the security hole in older versions of java (Debian ftw!) allows the malicious code to circumvent that.

Basically, I just want a list of everything I'd need to monitor to see if a careless skid was up to something and perhaps the names of some packages which do that. That's it. I want to check for myself.