PC Floppy Copy Protection: Softguard Superlok
128 points
1 month ago
| 18 comments
| martypc.blogspot.com
| HN
OnlyMortal
28 days ago
[-]
I used to crack C64 disk games. They were mostly trivial because I wrote a disk sector editor that would disassemble blocks on demand.

One that comes to mind were Ocean’s copy protection that was hacked by a load of 1 into the accumulator and a return. They had a “bool IsValidDisk()” type of routine.

After cracking one of their games I could crack others in less than 2 minutes directly on a copied floppy.

reply
alfiedotwtf
28 days ago
[-]
Keeping the bad sectors in place was annoying because future handlers of the disk couldn’t copy it unless they too had a proper copy app. A NOP Slide solves all problems
reply
atlanta90210
27 days ago
[-]
Thank you for your service.
reply
skissane
28 days ago
[-]
Random (yet on-topic) question: does anyone know of any IBM PC(-compatible) games/apps which used deleted floppy sectors as part of their copy protection scheme? I can find examples for 8-bit platforms such as Atari, BBC Micro, Amstrad CPC - but not IBM PC, even though the original IBM PC floppy controller supported them.

For those who don’t know, deleted sectors are an obscure legacy feature which was part of IBM’s standard for floppies, and floppy disk controllers which aimed at IBM compatibility often supported it. Essentially, the floppy can contain two types of sectors, normal and “deleted”, with a flag byte in the sector header distinguishing the two, special commands to read/write the deleted sectors, and a setting on the controller to determine whether the normal read sector command skips deleted sectors or not. Very little software used it; copy protection was the main exception. The original use case was to support very primitive databases in which each database record was stored in a separate sector, and hence you could delete a record in-place by marking the sector as deleted.

Platforms which used off-the-shelf IBM-compatible floppy controllers generally supported them, e.g. IBM PC and compatibles, Ataris, Acorns, Amstrad CPC. Whereas platforms which rolled their own floppy controllers, such as Apple II, Macs, C64, generally didn’t.

reply
GloriousCow
27 days ago
[-]
EA's INTERLOCK protection (Marble Madness) uses deleted address marks.
reply
mannyv
28 days ago
[-]
I remember one trick was to burn a hole in the disk at a specific track/sector location then try to read it. If you got an I/O error then the disk was real.
reply
alfiedotwtf
28 days ago
[-]
If you used the lower interrupts rather than DOS’ 21h, you could set your own bad sectors so you could copy the disk exactly :)
reply
wiz21c
28 days ago
[-]
I confirm it was working at least for Microprose Soccer :-) Was way to easy to crack...

Unlike "Le Manoir de Mortevielle" or "Leisure Suit Larry" which I was never able to crack...

reply
peterfirefly
28 days ago
[-]
Perhaps this is a good place to ask if anyone has a copy of the manual for CopyWrite by Quaid Software?

The manual had a really good description of the floppy controller interface + various tricks one could use to copy protect floppies.

I know where to find several versions of the program. I am not interested in those. I am only interested in the manual.

reply
jakobdabo
28 days ago
[-]
I found two versions at https://archive.org, there's a PDF manual too.
reply
peterfirefly
28 days ago
[-]
You are right, there is a a copy with a manual now! It was uploaded 4 months ago and it sure wasn't there all the previous times I've looked.

Unfortunately, the manual doesn't quite match my memories. I recognize a lot of the text and layout so it is clearly something I have seen before, but the technical info isn't really there.

This manual is from May 1989. I read the manual a bit before that, perhaps in 1987, perhaps 1988.

So, does my memory play tricks on me or did they remove all that lovely tech info? All there's left in this version is Chapter 12 "Technical Terms" (which I recognize as something I have read a version of before).

I know I have read about using track reads to catch some of the copy protection tricks (like in the two MartyPC blog posts) and track writes (occasionally even track writes that are aborted at just the right time) to force the data on disk to be just the right kind of wrong.

I double checked that it wasn't in the Copy II PC manuals I could find: the V6 manual from 1990 and the Copy II PC Option Board manual.

reply
ForOldHack
28 days ago
[-]
I was hanging out in the computer lab at school, playing the PC version of Rogue, when a exasperated teacher walked into the lab, saying that her students were getting annoyed at having to swap in the real floppy when it started... Well, let me fix that for you... Gathered all the floppies, started copying the original with CopyII PC, and handed out games that would not *ill you by the copy protected mafia. Later that day, the lady came in and reported no problems, and handed me the original disk. I wish I knew how many kids got into gaming after that.

Article from 11 days ago: https://news.ycombinator.com/item?id=41346124

Laugh-ability:

https://www.os2museum.com/wp/lotus-1-2-3-r3-copy-protection/

reply
rav
28 days ago
[-]
I thought this was going to be about the physical notch switch on some floppies to switch them between read-write and read-only modes... That thought alone brought back some deep childhood memories!
reply
codazoda
28 days ago
[-]
That reminded me of a couple “hacks” we did back then…

1. Cover the write protect notch on a 5 1/4” floppy with a sticker to enable writing.

2. Melt an extra hole in a 3.5” floppy with a cheap soldering iron to double its capacity to the 1.44MB that later became the standard.

reply
andrewshadura
28 days ago
[-]
In 5¼" disks, the uncovered notch meant R/W while stickers were used to prevent writing.
reply
amenghra
28 days ago
[-]
I think we used to punch holes in 5¼ floppies to enable writing to their backside?
reply
medmunds
28 days ago
[-]
Yep. An ordinary round hole punch worked, but you could also get a purpose built punch that made a nice rectangular notch, had a guide to get the position just right, and had more leverage making it easier to punch through the thick jacket. "Dual sided" floppies (with two factory cut notches) cost enough extra that the tool paid for itself pretty quickly, IIRC.

Of course, the floppy manufacturers warned that the cheaper single sided floppies had only been tested on the front side, and might have defects on the back. But I don't remember that ever being a real problem.

reply
shiroiushi
28 days ago
[-]
>Of course, the floppy manufacturers warned that the cheaper single sided floppies had only been tested on the front side, and might have defects on the back. But I don't remember that ever being a real problem.

I remember someone telling me that the floppy manufacturers were obviously lying, because C=64 computers normally wrote on one side (back, I think), while Apple ][ series computers wrote on the other side, so the disks had to be tested on both sides anyway so they could be used in either computer.

reply
m-a-r-c-e-l
28 days ago
[-]
There were a lot of commercial hole punchers at that time. See here for some photos e.g.

https://www.forum64.de/index.php?thread/38406-diskettenloche...

reply
wileydragonfly
28 days ago
[-]
We used a drill for #2 but the price difference disappeared pretty quickly iirc
reply
user3939382
28 days ago
[-]
The trick was to line up the write-protected one with one that already had the notch.
reply
tamimio
28 days ago
[-]
Yeah and when you put some tape on it and now you can write.. it felt like neo in the matrix!
reply
jmillikin
28 days ago
[-]
Previous article in the series: https://news.ycombinator.com/item?id=41346124
reply
progbits
28 days ago
[-]
That's for different protection scheme. But also a great read!
reply
jmillikin
28 days ago
[-]
Oh wow, I wasn't expecting two floppy disk copy protection articles in one week. Thanks for the correction!
reply
progbits
28 days ago
[-]
Another great article from the same author that I found when browsing their blog after the previous article:

https://martypc.blogspot.com/2023/06/hardware-validating-emu...

Probably should be a separate HN submission at some point.

reply
alfiedotwtf
28 days ago
[-]
Don’t worry.., give it a few hours and someone will repost the Imperial March Disk Drive
reply
alfiedotwtf
28 days ago
[-]
My favourite copy protection fail was Office 95 “Upgrade Edition” - when installing it would ask you to point to where your old/existing copy of Office was… funny thing was you could point it to the installer directory itself (i.e the thing you’re currently running to install it) and it would continue LOL
reply
bankcust08385
17 days ago
[-]
Early MS software with serials would work with 111-111111.
reply
codazoda
28 days ago
[-]
It’s not super related but all the talk about how easy the Sierra games were to crack reminded me of that time I built a crack for nearly all shareware of the era.

https://joeldare.com/that-time-i-built-a-crack-for-nearly-al...

reply
accrual
28 days ago
[-]
Finding your own software bundled or integrated with someone else's software (assuming those are the terms one desired) would be one of the ultimate feelings of flattery to me.
reply
alfiedotwtf
28 days ago
[-]
I wonder if one day we’ll ever get to see the identity of the greats like The Humble Guys and Razor 1911.

I imagine a documentary like the one for BBSes but for the cracking/cracktro scene would be k-rad

reply
wiz21c
28 days ago
[-]
ahh THG were certainly ruling the scene !!! Nostalgia..
reply
caf
27 days ago
[-]
"Lemmings cracked by Fabulous Furlough" will occupy memory synapses for the rest of my life.
reply
wiz21c
26 days ago
[-]
Bubba Magillicuty !!!

From the wikipedia page:

"THG was run by professional men, who were available each day "by 10:30" when FedEx, or UPS delivered. The other groups had to "wait until they got home" in the afternoons."

now I understand why they were faster :-)

reply
bankcust08385
17 days ago
[-]
Neverlock, Copy II PC Option Board Deluxe, and Greaseweazle.
reply
caf
27 days ago
[-]
It's hard to believe this was just incompetence - Sierra games were technically impressive for the time, making great use of graphics and sound. But what other explanation is there? If Sierra's goal was simply to prevent casual copying, they didn't have to bother with licensing Superlok at all, a simple bad CRC on one sector would have sufficed. It's all very odd.

Probably the simplest explanation is that management decreed that Superlok was to be used, and the developer tasked with it complied in the most minimal manner possible.

reply
justsomehnguy
28 days ago
[-]
> It's hard to believe this was just incompetence - Sierra games were technically impressive for the time, making great use of graphics and sound. But what other explanation is there? If Sierra's goal was simply to prevent casual copying, they didn't have to bother with licensing Superlok at all, a simple bad CRC on one sector would have sufficed. It's all very odd.

It's not odd at all, if you think again about this:

> Softguard Systems was founded by Joseph Diodati, Paul Sachse and Ken Williams in 1983

Obviously it's not Ken who implemented the copy protection.

(ofc if this that Ken at all)

reply
protocolture
28 days ago
[-]
Really interesting to me because my grandparents were OG software pirates. They used to share back and forth floppies with some of their US friends. I assumed that they got away with this because floppy copy protection just wasnt a thing, we had a family friend we relied on who had memorised the potion drinking code from Prince of Persia. But now it seems plausible that someone in this piracy ring was breaking copy protection code which is even cooler.
reply
snozolli
28 days ago
[-]
That brought back memories of playing off a backup and having to switch to the original for validation, and of some Amiga program that claimed to copy copy-protected disks. It thrashed the floppy drive like crazy and looked very, uh, sophisticated (as in lots of virtual indicator lights blinking away on-screen), but I was never convinced that it actually worked.
reply
sprior
28 days ago
[-]
Anyone else remember owning a Copy Option Board from Central Point Software?
reply
bankcust08385
17 days ago
[-]
Yep. I have a regular and a Deluxe one at present time. Also a greaseweazle.
reply
YZF
28 days ago
[-]
Brings back memories... There was quite an arms race between copy protections schemes, copy software, and people that cracked protected software. The cloud solved all this I guess (much later).
reply
pininja
28 days ago
[-]
I’d love to know how you make this kind of floppy visualization. Looks so cool, I want it framed!
reply
pininja
28 days ago
[-]
I was able to answer my own question by reading the comments on his blog. The author wrote it themselves: https://github.com/dbalsom/fluxfox
reply
BillLumbergh
28 days ago
[-]
Don't copy that floppy
reply