I was once taught that blacklist based security is bad long-term strategy, but I keep seeing everyone talk about blacklisting IPs.

Maybe someone can explain this; I'm confused. It made a lot of sense to me when I attended a talk by a security consultant advising on the difficulty of balancing usability versus security. Even with that in mind, he said he always pushed clients toward whitelisting rather than blacklisting.

There was a very old (I think from the late 90s) cybersecurity blog someone in this community linked once about how blacklist based security was a terrible idea and went into …

bad cybersecurity ips security strategy