setting whitelist to false because blacklisting is easier to keep track of