> Tells me what I already suspected: compare-by-hash can be an
> dangerous game (even if very uncertain).


does this tell you anything you already suspected?

http://www.usenix.org/event/usenix06...tml/index.html