I know you know and I always sort of knew too but it wasn’t until I saw this that I really knew. :P Falsehoods Programmers Believe About Names.

I agree, of course, that whitelisting is drastically better security than blacklisting in the general case.

Update: hippo beat me to it.