From Slashdot:

'This means you can write a 100% reliable exploit in pure Java. This exploit will work on all the platforms, all the architectures and all the browsers,' —
And the Java critics said total platform independence was impossible!

(yes I know that this is only affecting OS X Java, the quote was just too good to waste).