Obviously I already removed all media, banned all the users and prevented account creation. I have ip addresses and metadata of the users
Obviously I already removed all media, banned all the users and prevented account creation. I have ip addresses and metadata of the users
Probably should have given all of the evidence to the police instead of deleting some of it.
In most western jurisdictions platform operators are not liable for user content, (as long as they cooperate with the authorities) so nothing for you to worry about.
Next time, don’t do anything, no deleting, no blocking, contact the police and ask them what they would like you to do. Maybe they’d even would want to letting them keep posting for a while to gather more data on the offenders, but idk how they deal with selfhosted stuff tbh…
(this is not legal advice)
(Also I totally understand that you don’t want your other users seing that kind of stuff. I know nothing about the matrix moderation tools, so maybe the media is on the server db somewhere … might be relevant to figure that out)
Edit: this does not apply if you live in an authoritarian police state or third world country, like OP apparently does.
Horrible advice. Atrociously bad. Dont talk to the cops without consulting a lawyer.
“Hello police I have a server full of cp, oh get in the van? OK.”
@unexposedhazard @HelloRoot this
I would think very carefully before contacting the police. I am not suggesting that you should provide a safe harbor for people sharing CSAM, or obfuscate their crime. You absolutely should take action, but carefully weigh your options before calling the police.
While it may (possibly!) be true in your jurisdiction that platform operators are not liable for user content, police aren’t on “your side”. Even if you assume the highest standards of professionalism from them, they need to represent the interests of the victims (not you) and need to diligently investigate the crime. That means they need to confirm beyond reasonable doubt that you are not involved beyond operating the host.
Just because you self-disclose does not mean that you are innocent. You could’ve been actively participating and when threatened with blackmail you’ve decided to self-disclose to avert guilt.
Another consideration is what else I have on my server. I’m catch and release for pirate movies and TV these days so there’s only 100gb or so. I do have several hundred pirate audiobooks though. Deleting all that before handing my server over will look very suspicious.
With all of this in mind, the only course of action is to talk to a lawyer. A lawyer will know exactly what laws are relevant, and can guide you through the process of self-disclosure while minimising the imposition on you.
I would consult with a lawyer even now after the fact.
I mean…I get where you’re coming from, but fuck that!
I’d have deleted the entire matrix server entirely. Washed my hands of the entire thing.
Because you can go to the police, and say “There’s child porn on MY server”, and the cops MIGHT work with you to catch the people actually posting it.
OR
They might take the easy way. There’s a guy here, saying he’s hosting a server with child porn. Arrest him, because we know who he is, and call it a win in the media. Yes thats not how the law works…but it’s how lazy and corrupt cops work.
Cops are never your friend. I’d avoid any interactions with them that you can.
Yeah, I’d dban the drives and everything.
This is bad advice. Do not listen to this guy.
If you have a problem and call the police, now you have two problems. That’s not just cliche, it’s true.
Don’t call the cops, call a lawyer.
Or maybe not. …
Around here, OP would then automatically be a suspect for possession of the material. Possession is a crime. And that is far from funny. Better have a very good lawyer from minute 1.
deleted by creator
Legally, the platform isn’t liable for what the users do on it. But I wouldn’t want to test that in court.
That doesn’t count for this kind of crime.
It’s not even certain whether or not it applies at all for fediverse systems.