For a few weeks Ed Felten has been posting excerpts and portions of his ongoing analysis of audio disk DRM systems, stemming from the Sony rootkit fiasco. Now he's published the accumulated findings in a lengthy PDF. The report, co-authored with J. Alex Halderman, also of Princeton CS, makes some strong claims.

First, the authors claim that the two DRM systems analyzed - MediaMax and XCP - are more complex than usually described. Secondly, they claim the systems suffer from "a diverse array of flaws" and that these flaws in turn lead to both security and privacy risks for consumers of the audio disks. I have not had time to read the report in depth; if one of you has, please give us a review?