1. Purpose
This Acceptable Use Policy governs your use of Dobri Lab's interactive Linux terminal environments (Containers). These environments are provided for educational purposes only to help you learn Linux system administration, command-line tools, and cybersecurity concepts in a safe, isolated environment.
2. Permitted Use
You may use Containers for:
- Completing labs: practice exercises, graded challenges, and skill assessments
- Learning: experimenting with Linux commands, scripts, and configurations
- Personal practice: reinforcing concepts covered in labs
- Educational testing: testing configurations, troubleshooting, and debugging within your isolated environment
3. Prohibited Activities
The following activities are strictly prohibited and will result in immediate account termination.
3.1 Attacks on External Systems
- Port scanning, vulnerability scanning, or network reconnaissance of external hosts
- Denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks
- Brute-force attacks, password spraying, or credential stuffing
- Exploitation of vulnerabilities in third-party systems
- Phishing, social engineering, or malware distribution
- Any unauthorized access attempts to systems you do not own
3.2 Resource Abuse
- Cryptocurrency mining: using containers for Bitcoin, Ethereum, or any cryptocurrency mining
- Excessive CPU/memory usage: running computationally intensive tasks unrelated to labs
- Long-running processes: attempting to circumvent the 2-hour container timeout
- Storage abuse: uploading large files unrelated to lab completion
3.3 Platform Abuse
- Automated scraping: using bots or scripts to mass-complete labs or extract content
- Account sharing: sharing your login credentials or allowing others to use your account
- Multiple accounts: creating multiple accounts to bypass rate limits or abuse free tier
- Reverse engineering: attempting to extract, decompile, or reverse-engineer our platform code or grading logic
- Circumventing security: bypassing authentication, rate limiting, or container isolation mechanisms
3.4 Illegal or Harmful Content
- Storing or distributing malware, viruses, or exploit code intended for malicious use
- Hosting illegal content (child exploitation material, pirated software, etc.)
- Storing or transmitting content that violates intellectual property rights
- Using containers to facilitate illegal activities
3.5 Network Abuse
- Attempting to access other users' containers
- Spoofing IP addresses or MAC addresses
- Running unauthorized network services (web servers, proxies, VPNs) accessible from the internet
- Generating excessive network traffic unrelated to lab completion
4. Resource Limits
Container limits:
- CPU: 1-2 vCPUs (throttled if sustained over 80% usage)
- Memory: 2GB RAM (container killed if exceeded)
- Storage: 10GB ephemeral (deleted after session)
- Runtime: 2 hours maximum (auto-terminated)
- Network: outbound HTTP/HTTPS allowed, inbound connections blocked
Rate limits (free tier):
- Container spawns: 15 per hour, 100 per day
- Lab submissions: 20 per hour
- API requests: 100 per minute
Paid tier users have higher limits but are still subject to this AUP.
5. Monitoring & Enforcement
We monitor container usage to ensure compliance with this AUP and to maintain platform security and performance:
- Automated monitoring: real-time detection of prohibited activities
- Command logging: all commands executed in containers are logged for grading and security (retained for 30 days)
- Network monitoring: outbound connections are monitored for abuse detection
- Resource metrics: CPU, memory, and network usage tracked per container
6. Consequences of Violations
Violations of this AUP may result in:
First offense (minor):
- Warning email with details of violation
- Temporary suspension of container access (24-48 hours)
Severe or repeated violations:
- Immediate account termination (no refund)
- Permanent ban from platform (email, IP, payment method)
- Report to law enforcement (for illegal activities)
- Legal action to recover damages (for attacks causing financial harm)
Examples of immediate termination:
- Attacking external systems
- Cryptocurrency mining
- Malware distribution
- Illegal content storage
- Circumventing security controls
7. Reporting Violations
If you discover or suspect AUP violations by another user, or if you believe your account was compromised and used for prohibited activities, contact us immediately at abuse@dobrilab.com.
Include: your account email, suspected violator (if known), date/time of incident, description of violation.
8. Educational Use Clarification
Allowed: Learning how attacks work by practicing them within your own isolated container on test files/configurations we provide.
Not allowed: Using knowledge gained to attack systems outside your container, including our platform, other users' containers, or any external systems.
Example: You may practice SQL injection on our intentionally vulnerable lab database. You may not attempt SQL injection on our production authentication system or any third-party website.
9. Changes to This Policy
We may update this AUP to address new threats or platform changes. We will notify you of material changes via email or prominent notice. Continued use after changes constitutes acceptance.