I suggest approaching this issue from the other angle - which alternatives are worse than whitelist/blacklist in your opinion?