infosec

every security org I’ve been a part of in ~recent times (e.g. flatiron health, cash app, duolingo) have used allowlist and denylist — they’re simply better terms because they perfectly describe their functions

is that not common?

It's 2025 - please stop using the terms whitelisting and blacklisting. Yes, I know many of these terms were acceptable when you were growing up.

Using  them today shows you're unable to adapt to change, and in high-change environments like cyber, that's NOT a good look...

Jake Williams

every security org I’ve been a part of in ~recent times (e.g. flatiron health, cash app, duolingo) have used allowlist and denylist — they’re simply better terms because they perfectly describe their functions

is that not common?
https://x.com/malwarejake/status/1907416667052786110?s=46&t=dO0uo_CgV6MrB7N3NkVjDA

interested in privacy-preserving technology saltshaker.blog

What's the issue with whitelist/blacklist? Haven't heard the term denylist before (tho admittedly I'm not in the security space)

Working on /impact ||


Abundance Economy book: book.abundance.id

gotcha. thought the terms themselves had a racist history I wasn't aware of
curious if you know whether people in the black community had any input on this re: cash app. cuz seems to me a lot of this sort of speech policing is born within terminally online echo chambers & not really related to people's actual concerns

The historical context associating white with good and black with evil.

Cash App is pretty cognizant of this type of thing considering the black community is the core user base.

Pushback (a la Jake’s tweet) has definitely been less aggressive since woke culture started downtrending though