VE does not use black or whitelists. It examines the content of the site. This is why it 'verifies' everything, even unnecessary ones. And about legit sites...you never know when it will be comprimised. Anyway, you can be redirected to a malicious fake site anytime...without VE it would be more difficult to make any difference.
If what you're saying is right, anyone could create a "verified" website, simply by adding so-called verified items to it.
Who thought it was a good idea to add lots of file hosting websites? Either you know the uploader (and know you're save) or you don't. Either way, verification adds absolutely nothing (security-wise), whichever way you look at it. Even if such a site were to become compromised, the resulting "loss" of verification would potentially only be useful to those who know it was verified before.
It could even be argued that verification lulls you into a false sense of security with file hosts, because it says exactly zero about the actual file.
http://www.sendspace.com/http://www.badongo.com/http://www.mediafire.com/http://www.filefactory.com/http://depositfiles.com/en/There are other examples, like software related sites.
http://www.majorgeeks.com/http://www.download.com/http://www.freedownloadscenter.com/http://www.codeproject.com/http://www.mozilla.com/And of course nobody is interested in reading faked news or listening to phony radio stations...
http://www.cnn.com/http://abcnews.go.com/http://www.live365.com/index.livehttp://www.gotradio.com/index.aspxThe biggest joke of them all.
http://www.google.com/If you want to add stuff like this, you might just as well add half the Internet. Or even more. After all, small sites are more likely to get compromised than CNN, ABC, the BBC or Google...
The program desperately needs an option to disable it (preferably completely close it), so you can run it only when you think there actually is some use in doing that.
Author