MD5 demonstrated to be unsafe


MD5 checksums have been a standard for authenticity of software for many years now, but it may not be completely safe. As a proof of concept, it was shown that binaries can spoof md5 checksums.
http://www.win.tue.nl/hashclash/SoftIntCodeSign/