I'm generally not inclined to fully whitelist anyplace because even if everything it loads today is safe, who's to say what's going to be loaded after the site gets hacked. That said, I tried to go through and do some allowing of requests and scripts for places I recognized, including whitelisting the site in Ghostery to keep it from interfering. After adding 19 separate exceptions in uMatrix for both whole domains a…
Could someone enlighten me why a lot of sites don't only pull in google analytics, but also a handful of other analytics sites like scorecaredresearch or chartbeat?
The marketers buy the hype and want all of that. "If I take this pretty chart from here, and that table that from there, and these numbers from over here, I can make a really impressive report!"
And they want to make sure that they're collecting all the data they could possibly be collecting (because they never know when they might suddenly need the last 6 months data about something they never thought of), even though they don't know what queries they want to be able to make.
So they make the developers add all of them, end up with tons of data but very little information, and start talking about 'this big data thing' that could maybe give them answers even though they still don't know what questions they want to ask. And to use it, you just have to add this little snippet of javascript...