Java Security FAQ: Getting Properties

Here's an applet that tries to read five properties that it isn't allowed to read by default:

and here's the source.

Conclusion:

Applets can't read information that infringes on the user's privacy.