For single songs either iTunes or AmazonMP3 now that both are DRM free. I might buy an album here or there from those places as well. But most full CDs I get from various torrents or copy/DL from friends.
I don't mind paying for something I really like, I just wasn't going to buy music that was locked into one ecosystem.