Don users just whitelist absolutely everything, negating the effectiveness of the whitelist?
Users whitelist everything that they can see. i.e. anything that takes up screen real-estate. There are no pop-up prompts in whitetrash to whitelist domains that do not provide visible content to the screen. This means that whitetrash will block malicious sites that will try and serve you malware through invisble iframes, 1×1 pixel media files, and nasty bits of javascript – none of which advertise their presence by taking up screen real-estate and hence will not be whitelisted by the user. Won’t whitetrash break sites that serve content off different domains? E.g. Google’s webpage www.google.com serves all its images off images.google.com. Whitetrash wildcards the first label of all “www” domains. This means that if you add www.google.com, you automatically get *.google.com. Usually, with a small number of exceptions, if a website is serving content off a different domain (i.e. not a subdomain) it is either malware or an ad – neither of which you want.
