Reply to post:

hopefully microsoft use a strong and secure hash to validate each chunk that's P2P'd, so that people can't generate their own update chunks and mangle them to product a using a hash collision!