The major problem with Flickr's scheme is both academically trivial and something that Colin didn't (in any public forum) notice. Which says nothing about Colin, who is very smart, and everything about how ridiculous it is to try to build secure systems that depend on basic crypto primitives.
colin, did flickr ever reply to you about that?