The sum command-line utility, included in BSD and GNU Coreutils, lacks cryptographic security. To demonstrate this vulnerability, a developer created a tool that manipulates file contents to generate checksum collisions. This new utility allows users to easily set the sum hash of any file to an arbitrary, predetermined value.