Hacker News Reader

executing binary from a non-secured page seems like a no brainer.

If it was a secure page it would be a-okay, right?

At least you would know who it's from. Otherwise anyone could phish you or MITM and send you any executable they want.

You still know who it's from, just look at the signature: http://i.imgur.com/Icz56.png

If the https would not redirect you to the http, it would at the very least be marginally(!) better...