Hi, > For all they will know, Debian has been pwned :-/
Yeah. I tried hard to keep my previous mail in a civilized tone towards the intellectual entities who decided to deduce the purity of Debian ISOs from .exe files on the same server. (Quotation marks in the air are a warning sign towards myself that i am about to start a rant.) The only mitigation i can imagine is to put warning signs on pages like https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/ which say something like: - The browser warnings are known to be bogus. They appear because Google mistrusts especially our swedish mirrors. - Please fulfill the (standard) request not to download by a web browser. See first paragraphs of https://www.debian.org/CD/http-ftp/ . - If you have to use a web browser, you might be able to avoid the classification as malware by using a mirror server from the lower three quarters of https://www.debian.org/CD/http-ftp/ Have a nice day :) Thomas