Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login

Sounds a bit like how ad-block plus handles the blocking based on lists to which you subscribe, just with certificate white/blacklists?


sort by: page size:

A blacklist approach to this is for sure a cat and mouse game. A better approach is to incrementally whitelist the domains you trust.

With the ability to whitelist domain to have full blocking.

Ahhh I see, so it's like a blacklist paired with a whitelist. I missed that sites not found on the first list would be unrestricted. Thanks for the explanation

Maybe + as a whitelist rather than a blacklist.

What would be interesting is that we move away from domain blacklists (e.g. adblocks, /etc/hosts, pi hole, etc.) to domain/ips whitelists (like firewalls).

Does this allow whitelisting as well as blacklisting? Chrome has offered both for a long time, and I remember being surprised to learn that FF didn't offer either. It's a welcome change!

Sounds functionally equivalent to a whitelist of domains you accept from?

I assume they would implement a white-list allowing "some non-intrusive adds" similar to Adblock.

I wonder if it would be possible to make a whitelist blocker instead of just blacklist? I mean, if a certain domain is in the whitelisted list, you show only responses from whitelisted subdomains. If not, you fall back to blacklist.

By possible I do not mean technically possible, but feasible in the resources required maintaining the list as well as good enough user experience.


Sorta. You can blacklist instead of whitelist. The blacklist could make you secure, while still resulting is this 500.

Maybe they use a whitelist instead of a blacklist? that would be a pretty ridiculous whitelist though.

Good point - can anyone with an account tell us if you can white/blacklist sites?

Author argues that blocking by blacklist is better than blocking everything. But most people use whitelist, Chrome has native support for it.

It can. Arguably however if you agree with the premise of the whitelist as beneficial and there is a fixed schedule of charges (ie no company is preferenced in charging) then to me it seems OK.

You can't have the whitelist without having ads/networks assessed to see if they meet the criteria. Even if you crowdsourced that [which probably wouldn't be objective enough] you'd need to administrate the whitelist and so you need some revenue to cover the overheads at least. Even automating it there's a cost in creating the code. It seems right to pass that cost on and the networks are the ones holding all the money.

You could have users pay for the whitelisting to avoid "misaligned incentives".

Indeed charging the companies for assessment gives an incentive to reject them so you can charge to assess them again ... 4) profit.


I've seen blocklist as a replacement for blacklist, but what do people use instead of whitelist?

No it isn't? It's entirely list based, it doesn't do anything without a domain being listed to block.

Even if a third-party list you've added blocks something you don't want to block, you have an overriding whitelist.


Maybe it will be possible to whitelist certain sites like Youtube, that would be useful. Even more useful if it did figure out that by itself.

>whitelists advertisers if they are not too shitty.

I don't have any source with me right now, but I've heard that they only whitelist advertisers that pay them (I recall some people comparing this to blackmail).


A whitelist sounds like it would be far easier to maintain, though each user would be on the hook for that.

No more cat-and-mouse that you'd have with the blacklisting approach, at least.

next

Legal | privacy