>Now granted it could be that I only had access to this because I was doing the scan from "inside the system" instead of outside via the web If 'inside the sys

>Now granted it could be that I only had access to this because I was doing the scan from "inside the system" instead of outside via the web If 'inside the system' means from a University internet connection, that it is very much a security hole, as anyone physiclly present could exploit it. (Or at best any person who the Univeristy allows on their network, which is much larger than the group of people who should be able to touch those settings)