A Dropbox employee looking through your files for filenames with DVDRIP would be actively looking. Hashing a file and comparing it to a blacklist is automated scanning. I think a blacklist is a perfectly reasonable solution to this problem and is as minimally invasive as possible. How would you approach this problem differently?