Google has long maintained that "the algorithm" is what controls rankings, except for sites which are manually demoted for spamming, getting hacked, delivering spyware, and so on.
At the SMX conference it was revealed that Google uses white listing:
At the SMX conference it was revealed that Google uses white listing: