Hacker News Reader

but since you are curling a web URL straight to sh you will never know. which is the problem.

But it's not if you trust the url and curl has `--proto '=https' --tlsv1.2` as args

What about running a downloaded binary installer? What if the URL is HTTPS?