I default deny all, then selectively enable scripts to add missing functionality. It can be a pain to get Gawker sites to work, but the vast majority work perfectly after enabling first party scripts and maybe cloudfront.

I'd suggest a selective scriprlt blocker like umatrix (my recommendation) or noscript. Do note you will have to invest some time toggling & refreshing on some of the more complex sites until you figure out whatever web of cdns and auxiliary scripts is used to run their stuff

Not the GP, but I block all scripts by default with NoScript, then selectively enable them, starting with the first-party scripts. I've learned to identify likely tracking domains and have memorized several of the more widespread ones, so over time this technique has proven effective.

Why would you need to memorize them when you can just mark them explicitly untrusted?