rsync and md4

[Mike Duvos]

Perry writes:

> I'm afraid you are totally wrong here. MD4 has been completely
> broken. I wouldn't trust it for anything. In fact, MD5 is no longer
> trustworthy, either -- it was broken recently. Stick to SHA.

Has MD5 been broken again?  Or are you referring to that little
collision problem which is unlikely to affect the security of the
typical real life application?