Hi guys, just posting in to say that the Java loophole is indeed a real threat.
Someone was observing a friends facebook and saw them post their phone number, then accessed their webcam, recorded them having a conversation with their brother, and then left a voicemail on my friends phone as the exact conversation they had as a recording.
Scary stuff, I suggest you all disable your Java.
I'm pretty sure they got the police involved.