I think the lesson is simpler: you can't trust MD5 on data. And programs are stored as data, so you can't trust them either. But the point is that you can't tr

I think the lesson is simpler: you can't trust MD5 on data. And programs are stored as data, so you can't trust them either. But the point is that you can't trust anything that you normally wouldn't consider to be programs either, like images and text files.