Bug#1009640: www.debian.org: https://www.debian.org/download starts download of iso-image right away
Cord Beermann <[email protected]>
| Newsgroups | gmane.linux.debian.devel.www |
|---|---|
| Message-ID | <164985205445.3614544.16174959579546478404.reportbug__30781.6428526834$1649852670$gmane$org@nikolai.intern.cord.de> |
Package: www.debian.org Severity: important Hello, while looking for a download of debian software i came to https://www.debian.org/download which right away started to download the current netinst.iso. Please refrain from this, this might be a prominent link at the top of the page (it already is) but the download must not start on itself. It is unexpected and a waste of bandwidth and storage which some users aren't even aware of. It seems to be also possible to weaponize this. http://justhaifei1.blogspot.com/2015/10/watch-your-downloads-risk-of-auto.html https://en.wikipedia.org/wiki/Drive-by_download Cord