If cosy would release the actual SHA hash of the file, we could actually provide it through torrent. Without the hash from the creator it's usually too risky to download from "others". With a hash we can verify it's the original.
