News for hackers. Stuff that matters.
Re:Remove blacklist terminology · Issue #6475 · osquery/osquery by RhysU on Monday June 08, 2020 @08:53PM (#23462485)
What if we're whitelisting or blacklisting people for the privilege to attend an organized crime conference? Which is good? Which is bad?

Note that in this unsavory example there is zero ambiguity! The whitelisted will hang with other mobsters, clearly, plotting evil and mayhem all the while.

The terms have bupkis to do with good and bad.

Re:Remove blacklist terminology · Issue #6475 · osquery/osquery by jgwil2 on Monday June 08, 2020 @09:27PM (#23462682)
Okay, I guess if you're writing malware then you can feel free to carry on with whatever terminology you like. For the rest of us it is understood that a blacklist is untrusted and a whitelist is trusted, so why don't we just say that explicitly and do away with a culturally dependent metaphor that could offend or confuse?
Re:Remove blacklist terminology · Issue #6475 · osquery/osquery by RhysU on Tuesday June 09, 2020 @12:10AM (#23463560)
"Trust" is overloaded in a CS context thus adding to, not reducing, cognitive load.

https://en.m.wikipedia.org/wiki/Trusted_system

Where does this whitewashing (err, denywashing) stop?

Re:Remove blacklist terminology · Issue #6475 · osquery/osquery by atonse on Wednesday June 10, 2020 @03:33PM (#23481094)
No a blacklist and whitelist has nothing to do with trust.

Blacklist simply means “allow by default except for things in this list” whereas whitelist means “deny everything except for what’s in this list”