Quake Shareware, a CD-ROM just a little too full
Fabien Sanglard dissects the colossal failure of id Software's 1996 Quake shareware CD, a "try-before-you-buy" model that stored full game versions on disc. This article meticulously details how its underlying TestDrive DRM, reliant on security by obscurity, was hilariously cracked in just 39 days, ultimately costing id a warehouse full of unsellable discs. It's a fascinating look into early software distribution woes and the enduring cat-and-mouse game of copy protection.
The Lowdown
The article details id Software's ambitious yet ultimately flawed attempt to revolutionize game distribution with the Quake shareware CD in 1996. It reveals how a seemingly robust "try-before-you-buy" system, designed to let users unlock full games via a phone call, quickly crumbled under the scrutiny of hackers due to fundamental design flaws.
- In the mid-90s, CD-ROMs offered vast storage (640 MiB) that game developers struggled to fill, leading id Software to include encrypted full versions of their entire game catalog on the Quake shareware disc.
- The intended model involved users buying the $9.95 shareware CD, then calling a toll-free number to pay for an "unlock code" (SERIAL) that would activate the full games.
- This system, powered by TestDrive Corp.'s technology, used dynamically generated "challenge codes" (CHALLENGE) to prevent replay attacks and ensure unique unlocks.
- However, the hacker group GNOMON released
QCRACK.EXEjust 39 days after the CD's release, exposing that the "secret" unlock code could be generated locally from the challenge code. - The core flaw was "security by obscurity": the
FLOW.EXEprogram on the CD itself contained the logic to derive the SERIAL from the CHALLENGE, meaning the phone call was merely for payment verification, not actual cryptographic key exchange. - Further research uncovered numerous other flaws, including a typo that prevented paying customers from unlocking "Final DOOM," the presence of unencrypted plaintext versions of supposedly encrypted files, and easily decipherable library formats.
- The debacle left id Software with 150,000 unsellable CDs and highlighted the complexities of early software DRM and distribution.
This case study serves as a cautionary tale of over-reliance on obscurity in security and the pressures of development leading to exploitable vulnerabilities. It underscores how early attempts at digital rights management often created more friction for legitimate users than for determined crackers, resulting in costly lessons for pioneering software companies like id.