There is some signed applet content on the web (I have not narrowed down exactly which it is, but it might be upnext.com) which modifies deployment.properties to set the sun.java2d.ddrawoffscreen=false system property. This breaks all unsigned applet content in the new Java Plug-In because this is not a known secure system property. We need to slightly revise the list of known secure system properties based on the Java 2D team's input.