Bug#1009640: www.debian.org: https://www.debian.org/download starts download of iso-image right away
Package: www.debian.org
Severity: important
Hello,
while looking for a download of debian software i came to
https://www.debian.org/download
which right away started to download the current netinst.iso.
Please refrain from this, this might be a prominent link at the top of the
page (it already is) but the download must not start on itself.
It is unexpected and a waste of bandwidth and storage which some users
aren't even aware of. It seems to be also possible to weaponize this.
http://justhaifei1.blogspot.com/2015/10/watch-your-downloads-risk-of-auto.html
https://en.wikipedia.org/wiki/Drive-by_download
Cord
Reply to: