Thread: Program Key

Hey,

I'm thinking of adding a registration part to one of my programs. Essentially the program would give a user a certain number, which they would forward to me, and then I would send them an actual activation number based off of the number the client gave me.

I'm just curious how to generate a computer-specific ID number (probably relating to hard drive or CPU).

I tried searching for some good C++ examples w/ the winapi and MFC, but I was unable to find any useful ones (most were written in other languages).

Any help on this subject will be greatly appreciated,

Thanks,

Matt

Are you prepared to deal with the "I upgraded my x and now your program doesn't work" support questions?

For each x your program detects and uses as part of the key?

I'm actually just trying to prevent people from using my program without permission. I'm only giving it to close friends, however, I don't want some generic "enter password to continue" input that will allow someone to use the program if anybody gives them a activation code.

I'm planning on giving this program to a friend, he'll give me a hardware number back (or another code that is specific to his computer), and then I can give him an activation code.

This is not a program that people are going to pay for, so I don't need to worry about upgrades for the program...

Originally Posted by guitarist809

This is not a program that people are going to pay for, so I don't need to worry about upgrades for the program...

Upgrades for the hardware, not for your program...

Seeing as most OS's turn off CPU serial number detection, that's probably not a good candidate for ID's.

Aside from that, Salem and maxorators points are both valid and relevant: If you use the hard-disk ID as a key, what happens when that user decides to change his/her hard disk for another one?

You could of course put an encrypted marker in each program saying "This program belongs to <name>" [with a high-grade checksum], that way, if someone leaks it, you know who did it - and it will also act as a preventative measure that the user knows that his/her name is encoded into the application and you can trace it back to the original recipient.

I personally would be PROUD if one of my personal (non-commercial) applications was to be distributed to such an extent that I can find it on the interweb, but that's me, not you.

--
Mats

Originally Posted by matsp

Seeing as most OS's turn off CPU serial number detection, that's probably not a good candidate for ID's.

Aside from that, Salem and maxorators points are both valid and relevant: If you use the hard-disk ID as a key, what happens when that user decides to change his/her hard disk for another one?

You could of course put an encrypted marker in each program saying "This program belongs to <name>" [with a high-grade checksum], that way, if someone leaks it, you know who did it - and it will also act as a preventative measure that the user knows that his/her name is encoded into the application and you can trace it back to the original recipient.

I personally would be PROUD if one of my personal (non-commercial) applications was to be distributed to such an extent that I can find it on the interweb, but that's me, not you.

--
Mats

That is an excellent idea! Thanks for the recommendation.

Thanks for the help,

Guitarist809

> That is an excellent idea! Thanks for the recommendation.
And if someone gets two copies, does a 'diff', sees that the only difference is say 32 bytes of apparent garbage, clears it on suspicion that it's just a tracking cookie, then you're back to square 1.

What I'm thinking of doing is adding a username to an online mysql database, having this program connect to it and if a user enters a certian key in the db, it checks for it and then erases it (after putting a "registered" file or something on the main users computer).

Reformatting = new key i guess =\

Then you would have to be ready for people screaming spyware. Or DRM.
In any case, people don't like systems like this. As long as it works without a hitch and you are ready to take some blame, go right ahead.
Just make sure to make the message clear - that it uses an internet connection for verification or such. Otherwise people get suspicious.

Originally Posted by guitarist809

I'm just curious how to generate a computer-specific ID number (probably relating to hard drive or CPU).

Look up GUIDs using the MAC address.

I think this is all pointless, most likely it will annoy some ligit users while only marginally delaying a pirate.

You will spend more time protecting the app than the pirate will breaking the protection.