Can an applet start another program on the client machine?

Ray Ye

Normally, an applet downloaded from remote site is regarded as "untrusted" program. It could not use any local client resources, i.e file I/O, opening connection with the network, etc.

Unless you modify the local security policy file to give permission to your applet, it can not do anything "harmful" to client's machine.