Recently it came across me that some of the users might be abusing our platform not conform to our rules.
Basically what we run is a platform for students by students. We sell shell accounts and VPS for ultra low prices (e.g. 15 euro for 1 year vps).
We do have some basic rules to provide security and to make sure the platform is only used for educational purposes. However there were some rumors that some users do not really bother with some of the rules. Which might lead to compromising our system. We have scripts running on our main shell server to make sure users are not sharing files that are copy-righted. In the pas we have had users sharing music on fora, after which we got a visit from some not so happy people who wanted to drag us infront of the court. The scripts looks for files with certain extensions that might be copyrighted after which it automatically sends out an email to the user to ask if he is not infringing copyright on them.
On our VPS's this get's slightly more difficult, since we do not have access to them after we set them up. (internal)
One of the suggested solutions to make sure the same does not happen on the VPS is to set up a Deep packet inspection system to scan all files.
- I am wondering, how ethical is this ?
- Can one of the administrators keep track of what files are coming through (with or without having access to who it is using) without voiding privacy of the user?
- Should we do the same thing for the DPI and send automated mails (this would generate a huge amount of emails if it is done for each packet I think ) ?
- How much load would it generate for our system ?
- What is the best way to implement this ?
- What would you do ?