frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Quake Shareware, a CD-ROM just a little too full

https://fabiensanglard.net/quake_shareware_cd/index.html
67•shdon•1h ago

Comments

ranger_danger•45m ago
Is it really fair to call these such algorithms "security through obscurity"?

By that logic, wouldn't real symmetric crypto also be considered the same, since it's still just math that similarly swaps the data with other bytes, based on an "obscured" password or key?

_def•36m ago
The obscured part was pretending the unlocker needs external information
chungy•26m ago
I guess they could have done a public/private key pair in 1996, but doing that over a phone call was going to be painful. A simple password read over the phone and verified by the software was the best solution at the time.

Mind, this was also intended for a world where internet connectivity was not to be expected. The majority of PC owners were not online.

smackeyacky•22m ago
Which is true, so the distribution of the software cracker would have been fairly limited I would have thought.
ekelsen•15m ago
How would your scheme work? You use RSA to encrypt the entire thing? Or you use it to get a key for a block cipher and then use that?

I feel like either way, you'd need the key to be different for every CD, otherwise you could just share the shared key. But if the encryption of every CD is different, why not just share the block cipher key directly? They can have a list of CDs and the associated key(s).

What additional security or functionality does an RSA like step add here?

1970-01-01•25m ago
I think you right, however they left all the right clues to decrypt it in days. You really don't want to do that.
jonhohle•38m ago
It’s worth getting the Quake shareware disc for the NIN soundtrack. Official track names are now available following the vinyl release a few years ago. This is the only CD release of the soundtrack. Just don’t forget to skip track 1.
chungy•25m ago
Mind that every Quake release includes the same soundtrack, it's not just the shareware version ;)

There's millions of such CDs in the wild, both shareware and fully purchased copies.

doubled112•12m ago
The data track never sounds very good. A little too industrial for my tastes.
classichasclass•32m ago
Man, those CompUSA and Computer City pictures take me back. Spent too much time there (when the 7300 was my regular Mac, the CompUSA "Apple store" was my primary source of software). Probably still have some of those free Computer City floppies in a drawer somewhere.
netsharc•31m ago
Man, if I were id, I'd sue the hell out of Testdrive for selling me that broken security system...
fullstop•30m ago
Ha, I remember buying the shareware disk and unlocking every game on there. Plus you got the soundtrack which was pretty cool.
ekelsen•25m ago
Was there anyway to make this work unless every CD was burned with a different key used to do the encryption?
netsharc•15m ago
Maybe have n versions of the CD (maybe 16, or 32), so there are n decryption keys. When the buyer recites the code over the phone, the program run by the salesperson can identify which key is used based on the number.

The hacker groups would be a little frustrated trying to find all of the different CDs.

kg•12m ago
You would need some sort of hardware serial number system for PCs and a whole security infrastructure to verify that the serial number being used for the unlock wasn't faked. Then you could do per-PC unlocks. I'm not aware of anything like that being widespread back in the Quake days, though these days every computing device you own probably has a unique ID burned into ROM somewhere.
loeg•11m ago
Some sort of public key crypto scheme + including hard-to-change local device characteristics in the challenge.
bityard•12m ago
I did exactly this thing when I was a broke teenager. The files in my ID1 directory that I shuffle around from computer to computer to this day came from that disc 30 years ago. (I still have the disc, but not the case.)

I did, however, purchase Quake II and III when they were released. And many years later bought Quake on Steam. I think they got their money's worth from me after all.

(There were some who believed that making the shareware disc easily-crackable was an intentional stroke of genius. It got people who couldn't afford the full retail version to buy the game and expand its popularity. After all, $10 was a fairly ludicrous amount of money to pay for shareware game. Shareware CDs tended to be $5 on the high end, or free with most computer/gaming magazines.)

kolanos•8m ago
This screw up ended up costing id Software millions in sales. With the Doom franchise they only included the first episode in the shareware version. But to save a buck I guess they decided this was better than mailing a second CD with the full game on it. Then doubling down on that greed by putting their entire game library on the disc. This is right about the time John Romero and John Carmack parted ways, can't help but wonder if this debacle played a role.
logicallee•7m ago
how come the pictures in the store say Compu USA? I remember it as CompUSA and this image seems to show the same thing: https://en.wikipedia.org/wiki/File:CompUSA_Santa_Clara_2.jpg

is it an AI-generated image of 1990s CompUSA?

How Bluesky draws its logo on screenshots

https://timmarinin.net/2026/bluesky-screenshots/
97•gavide•1h ago•75 comments

Quake Shareware, a CD-ROM just a little too full

https://fabiensanglard.net/quake_shareware_cd/index.html
70•shdon•1h ago•22 comments

GPU Offload in Rust: Portable, Safe, and Fast

https://arxiv.org/abs/2608.13759
143•linggen•5h ago•30 comments

A Preview of DuckDB v2.0

https://duckdb.org/2026/08/17/duckdb-20-highlights
502•ibotty•9h ago•87 comments

Fairphone 6 and PostmarketOS working main camera

https://catcrafts.net/posts/fairphone-6-postmarketos-working-main-camera
41•pizzaiolo•1h ago•7 comments

AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira

https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug
301•galnagli•9h ago•123 comments

Incident with Github.com

https://www.githubstatus.com/incidents/zkxwbgr0cnmx
498•SpyCoder77•9h ago•875 comments

AI;DR (AI; Didn't Read)

https://www.rickmanelius.com/p/aidr-ai-didnt-read
505•mooreds•3h ago•310 comments

Olo (Color)

https://en.wikipedia.org/wiki/Olo_(color)
275•inigyou•5d ago•62 comments

Judge sets framework for Nine PBS to retrieve archival data

https://current.org/2026/08/judge-sets-framework-for-nine-pbs-to-retrieve-archival-data/
123•qingcharles•7h ago•47 comments

How to disable or avoid intrusive AI

https://www.librarian.net/notoai/
241•ColinWright•9h ago•137 comments

GPT 5.6 Sol is the best "vision" model OpenAI ever released

https://blog.roboflow.com/openai-gpt-5-6/
290•plurby•11h ago•150 comments

Sun Clock

https://sunclock.net/
154•Gecko4072•6h ago•50 comments

My friends all hate AI; I just joined an AI startup

https://www.fast.ai/posts/2026-08-18-returning-to-AI/
12•eamag•1h ago•8 comments

Intriguing stories in computer science

https://inventwithpython.com/blog/intriguing-stories-in-cs.html
20•gregsadetsky•5d ago•2 comments

Launch HN: Speko (YC S26) – OpenRouter for Voice AI

https://speko.ai/
86•abdik•7h ago•51 comments

Roboflow Playground: Try and Compare 30 Computer Vision Models

https://blog.roboflow.com/roboflow-playground/
38•Bluestein•5h ago•3 comments

How do functions like alloca allocate memory from the stack?

https://devblogs.microsoft.com/oldnewthing/20260817-40/?p=112617
10•ingve•2h ago•0 comments

GPT-5.6 Sol Pricing Cut by 50%

https://openrouter.ai/openai/gpt-5.6-sol
12•Topfi•2h ago•1 comments

A simple fix for LLM tail latency

https://engineering.myhoai.com/posts/a-simple-fix-for-llm-tail-latency/
29•oskrim•3d ago•13 comments

A particle made of force: physicists say they've found mysterious 'glueball'

https://www.nature.com/articles/d41586-026-02498-1
90•Brajeshwar•5d ago•7 comments

Ask HN: Alternatives to GitHub

470•dhruv3006•9h ago•298 comments

Colorado River plummets as lakes Powell and Mead drop to record lows

https://www.nytimes.com/2026/08/17/climate/lake-powell-record-low-colorado.html
31•johntfella•1h ago•38 comments

Qwen3.8 27B scores 52 on Artificial Analysis

https://artificialanalysis.ai/models/qwen3-8-27b
278•anana_•6h ago•123 comments

scScript for Linux

https://scapplications.com/
5•OptionOfT•1h ago•1 comments

An update on leaving Gmail for Fastmail

https://moddedbear.com/an-update-on-leaving-gmail-for-fastmail/
90•neogodless•6h ago•76 comments

The oldest bar in every state

https://www.businessinsider.com/oldest-bar-every-state
52•NaOH•4d ago•30 comments

How to put 170 atoms in an atom

https://signoregalilei.com/2026/08/02/how-to-put-170-atoms-in-an-atom/
98•surprisetalk•9h ago•22 comments

Some Virtues of Narrative Poetry

https://newversereview.substack.com/p/the-purpose-of-poetry-is-to-tell
4•samclemens•4d ago•0 comments

We Are Forking dotenvy into dotenv-ng

https://secretspec.dev/blog/we-are-forking-dotenvy-into-dotenv-ng/
35•linggen•5h ago•39 comments