[khedoros1]

If the binary you're downloading might have been modified, how do you know that the hash you're checking against hasn't been as well?