I'd assume public VNC Java applets, therefore being able to access random people's machines.