Package: www.debian.org Severity: important Hello,
while looking for a download of debian software i came to https://www.debian.org/download which right away started to download the current netinst.iso. Please refrain from this, this might be a prominent link at the top of the page (it already is) but the download must not start on itself. It is unexpected and a waste of bandwidth and storage which some users aren't even aware of. It seems to be also possible to weaponize this. http://justhaifei1.blogspot.com/2015/10/watch-your-downloads-risk-of-auto.html https://en.wikipedia.org/wiki/Drive-by_download Cord