said by GOLFnSUN
:Unless a school using the tool has firewalls on the borders of its network designed to block unsolicited Internet traffic -- and a great many universities do not -- that Web server is going to be visible and accessible by anyone with a Web browser.
This part was left out of the story summary:
The toolkit allows an administrator to require a username and password for access to the Web server. The problem is that the person responsible for running the toolkit is never prompted create a username and password. What's more, while Apache includes a feature that can record when an outsider views the site, that logging is turned off by default in the MPAA's University Toolkit.
So, unless the admin is dumber than a pet rock, the data can be protected from everyone but the admin. So, where's the problem? Oh, I know - the admin may actually have the info to figure out which students on campus are doing something illegal. God forbid that ever happen.
You honestly believe ZERO info goes back to the industry? Better wake up