CBC News has an interesting article on Whitelist security vs. Blacklist security, and whether a change to a Whitelist security model would make more sense. I tend to favor the Whitelist approach but I can see some stumbling blocks that would need to be overcome before it would be a workable solution. LINK→