Hacker News Reader

Assuming that the script you download is the same as the script that curl|bash downloads.

A neat attack, but probably unrealistic in the context of those downloads being on github.