There was a talk on blackhat or defcon about the abilities of these controllers, running mini java applications and other cool things. I remember it being said finding necessary SDK's were very difficult and sometimes secretive. Makes me wonder.
They say Java but it's basically C++. It's Java without strings and I'm not even sure it has normal 32-bit signed integers (heard somewhere that they didn't, but I can't find it right now). It's called Java Card by the way.
