https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/
https://shattered.io/static/shattered.pdf
Venti is similarly corruptible, right? Since the checksum is over just the content. If you downloaded
https://shattered.io/static/shattered-1.pdf
and
https://shattered.io/static/shattered-2.pdf
, venti would lose the contents of one.