It'd be really nice if there were a place with authoritative original sha/md5 sums for the various ISOs, DMGs etc that are floating around.