Blacklist

A blacklist is a list of things that are blocked. The word literally means “black list”. If an entry is on it, it gets blocked, rejected, or deleted. Everything else is allowed through without anyone checking it individually. An email program, for instance, can automatically move messages from certain senders straight to the trash. The opposite principle is called a whitelist: there, only what is on the list is allowed, and everything else stays out.

Blocking as the internet’s default setting

Blocklists are one of the oldest and most common protection techniques on the net. They are cheap, fast, and easy to understand. A filter only has to check whether an entry appears in the list. That’s why blacklists are found in spam filters, antivirus scanners, firewalls, and parental control programs.

The big drawback: a blacklist only protects against what is already known. It knows exactly the dangers that someone entered beforehand. A new scam attempt with a fresh internet address slips through unhindered. Experts call this an arms race that defenders never fully win. Anyone who needs maximum security, for example in a power plant or a bank, therefore prefers to work with whitelists.

On top of that, there’s a political dimension. Whoever decides what goes on the list has power. In some countries, blocklists for websites are used for censorship. In companies, they cause disputes when harmless sites get blocked by mistake. Such false alarms are called false positives.

From list entry to block

Technically, a blacklist is usually a very long table. It contains, for example, internet addresses, email senders, file signatures, or forbidden words. When a request comes in, the system compares it against the table. If there’s a match, the block follows; otherwise, nothing happens. To make this fast even with millions of entries, developers use search methods that find an entry in fractions of a millisecond.

Maintaining the list is crucial. Many blacklists are maintained by central services and distributed several times a day. Antivirus scanners download such updates automatically. Some entries expire on their own after a while, so that innocent addresses don’t stay blocked forever.

With AI systems, the implementation looks a bit different. A language model generates text word by word and can’t simply be reined in with a word list. Operators therefore place filters both before and after the model. In front, the input is checked; behind, the output. Plain word lists are considered too crude for this: they block harmless sentences while letting problematic paraphrases through. That’s why dedicated review models are increasingly taking over this task.

Blacklists in news and products

You encounter this principle constantly in everyday life, often without the name attached. Your email account’s spam folder is partly based on it. Ad blockers in browsers work with huge lists of known ad servers. Parental controls on phones and school networks also use blocklists for websites.

In business news, the term has a second meaning. States maintain sanctions lists of companies and individuals with whom no business may be conducted. The US, for example, places chip manufacturers on such lists, which bans exports to them. For technology companies, this can cost billions, which is why such reports move stock prices.

Linguistically, the term is contested. Many companies today prefer to write blocklist, denylist, or block list. The same technique is meant. But in older software and in many manuals, you’ll still find the word blacklist.