>> (security-snipped) But to accomplish this it seems that one would have to have a language incapable of talking directly to the hardware<< Yes, and I would question the usefulness of such a VM. These days you would have to have CORBA or COM integration at a low level, and that wouldn't fit into their architecture (or at least their security claim) at all. John