The Fascinating Story of Quake Shareware CD-ROM
id Software's 1996 shareware CD and its cracked protection system.
1The Golden Age of CD-ROMs
In the mid-90s, CD-ROM drives were luxury hardware for PC users, offering 640 MB capacity - three times that of contemporary hard drives. This technology enabled the spread of multimedia content like high-resolution images, VOC format audio, and 12 fps Video For Windows clips. For game developers, this vast storage space presented new opportunities for content delivery.
2id Software's Innovative Approach
Quake developer id Software adopted a shareware and full-version distribution model in 1996. After fitting the 22 MB Quake shareware version on CD, they came up with the idea to utilize remaining space by including their entire encrypted game catalog. This allowed players to call a number and provide credit card details to unlock games. The CD was released on August 30, 1996.
3TestDrive's Protection System
id Software used TestDrive Corp's software for protection. The system 'denatured' EXE files into .MJ3 format while encrypting original headers as .ST3 files. Users would submit GUI-generated CHALLENGE codes via phone to receive UNLOCK CODE (SERIAL). The system generated new CHALLENGE codes on each run to prevent replay attacks.
4GNOMON's Discovery
Hacker group GNOMON released QCRACK.EXE just 39 days after the CD's launch. The tool revealed that FLOW.EXE could generate SERIAL from CHALLENGE locally. They discovered that the phone-provided SERIAL was merely payment proof, with security relying entirely on obscurity. The system only checked if user-entered SERIAL matched locally-generated one.
5Distribution and Retail Network
Quake Shareware CD sold for $9.95 at hundreds of retail stores like CompUSA and Computer City. Packaging included a 'Shareware version' sticker and the 1-800-ID-GAMES number. eBay research showed SOURCE CODEs referenced retailers like BestBuy (12-BSTBY) and Electronic Boutique (38-EB).
6CD Content and User Experience
The CD contained Quake Shareware along with encrypted versions of id Software's other games like DOOM, HEXEN and HERETIC. Users could initiate the lock system via the QUAKE UNLOCK button. The professionally-designed GUI reflected id Software's signature sarcastic tone ('those who are too cheap'). It also warned users to back up games after unlocking.
7System Vulnerabilities
The protection's critical flaw was that SERIAL contained no encryption key. GNOMON bypassed security by discovering FLOW.EXE could generate SERIAL from CHALLENGE. Reverse-engineered in 2016 by rmolina, the process demonstrated that complex systems relying solely on security through obscurity remain fundamentally weak.
8A Milestone in Digital Distribution History
Quake Shareware CD became a significant case in early digital distribution attempts. Its well-intentioned but flawed protection system proved the inadequacy of 'security through obscurity' against piracy. This event provided the game industry with valuable lessons that drove development of more robust DRM solutions.
Original article: Hacker News — Quake Shareware CD-ROM'unun İlginç Hikayesi