The original Quake shareware CD-ROM, released in 1996, contained more than just the game itself. It also featured encrypted versions of id Software's entire back catalog, a feature that was intended to be unlocked via phone orders. However, this digital rights management scheme proved short-lived, as the encrypted games were cracked and made accessible to pirates just 39 days after the CD's release.
The Quake shareware CD-ROM offered a substantial amount of unused space, leading id Software to bundle locked versions of their previous titles. The plan was for consumers to call a hotline, pay for games over the phone, and then receive an unlock code, similar to how the shareware version of Quake itself could be upgraded to the full release. This method was considered innovative in an era predating widespread digital distribution and reliable internet connections.
The flaw in this system, as detailed by Fabien Sanglard, lay in the unlock program's logic. When a user called to unlock a game, they would provide a code number to a phone agent, who would then issue a serial number. This serial number was not a unique decryption key but rather a confirmation that payment had been made. The unlock program was capable of generating valid serial numbers independently. A cracked version of the software, like Qcrack.exe found in Quakecrk.zip, could create these valid serial numbers locally, thereby granting access to all bundled id Software titles without payment.
This technical vulnerability led to a significant issue. According to David Kushner's book Masters of Doom, id Software was left with approximately 150,000 unsold CDs in a warehouse as gamers exploited the shareware release to access full versions of games for free. Furthermore, the pirated experience was, in some instances, technically superior to the legitimate one. Sanglard discovered that a typo in the filename for Final Doom's unlock code (SKU.17) resulted in the unlock program failing to retrieve the correct documentation, meaning paying customers could not access the game via the unlock center, while illegitimate users could.
This incident highlights the challenges faced by game publishers in the mid-1990s regarding software distribution and piracy, long before modern digital storefronts and robust anti-tampering technologies became commonplace.