[hruzgar]

yeah kinda true. But if you had a whitelist (i know this would be very hard to maintain etc) instead of a blacklist, you could have the most secure network blocker ever created for consumers. Malware could still leak from some of the "safe" domains but it would definitely be A LOT safer than any conventional ip or dns blocking.