Hacker News Reader

Just as anyone who can spoof DNS entries could swap some other theoretical Pow installer with a malicious one.

I'm not seeing how Pow's installation process is any less secure than, say, downloading a disk image from a random site.

Not if it's served over SSL.

This comment is a repeat, but that may not necessarily be true:

That has nothing to do with whether the installer is a shell script or a binary.