infosec

every security org I’ve been a part of in ~recent times (e.g. flatiron health, cash app, duolingo) have used allowlist and denylist — they’re simply better terms because they perfectly describe their functions

is that not common?

It's 2025 - please stop using the terms whitelisting and blacklisting. Yes, I know many of these terms were acceptable when you were growing up.

Using  them today shows you're unable to adapt to change, and in high-change environments like cyber, that's NOT a good look...

Jake Williams

every security org I’ve been a part of in ~recent times (e.g. flatiron health, cash app, duolingo) have used allowlist and denylist — they’re simply better terms because they perfectly describe their functions

is that not common?
https://x.com/malwarejake/status/1907416667052786110?s=46&t=dO0uo_CgV6MrB7N3NkVjDA

security engineering and applied cryptography saltshaker.blog

Working on /impact ||


Abundance Economy book: book.abundance.id

The historical context associating white with good and black with evil.

Cash App is pretty cognizant of this type of thing considering the black community is the core user base.

Pushback (a la Jake’s tweet) has definitely been less aggressive since woke culture started downtrending though

What's the issue with whitelist/blacklist? Haven't heard the term denylist before (tho admittedly I'm not in the security space)

Most teams have changed, but not all. 

Also, some more ... 

master/slave db is now primary/secondary.
`master` git branch to now `main` git branch.