🚀 go-pugleaf

google@sale-net.com.au (Peter) wrote:

>The user grabs a copy of my software from whereever. The first time it
>runs it says you need a trial key. Please follow the link (http). The
>link takes them to my system and passes the HARDWARE fingerprint to my
>cgi and asks the user for a valid email address. It then sends a trial
>key valid for 30 days or whatever back vai the mail. It also creates
>what i call an invoice page for that user and notifies him of this in
>the same email.

[etc]

Well, as you're posting this in a shareware group, I'm going to assume
you're talking about a shareware application. 

If that's the case, let me offer my opinion... You're welcome to
ignore it, of course.

The system you're describing is far too involved. I would think that a
software seller would want potential users to jump through as few
hoops as possible.

For starters, as a shareware buyer, I detest the idea of using
software that is license linked to my hardware. Especially as I change
my system configuration fairly often. At the shareware level, I would
find a different program rather than use a license like this.

Second, you're requiring your users to get no less than *three* keys
between when they first download the program and when they have a
final paid-for licensed copy. Unless you can find a bulletproof way to
do this behind the scenes without any user intervention, you're going
to turn off potential buyers with this. And if you remove any user
intervention, bear in mind that if the system fails even once, you've
practically guaranteed that trial user won't become a customer!

And finally, no matter how complex your licensing key scheme is, the
weak point is still in the actual executable itself. A cracker isn't
going to even notice your three-download key system - he's just going
to crack the actual program and bypass all your effort.


>in 90 days or just before a NEW key with an expire dateof some 20 
>years away is mailed with either an explanation or simply and 
>email saying due to our system crashing we have had to upgrade
>your key.....

Lying to your customer about why you're sending so many keys isn't
exactly good business practice. And the first one who doesn't install
your 'final' key by the drop dead date will see right through it.

>Look the system is not impossible to break 

And no level of complexity in the key delivery system will make it
harder for a cracker to break. You're simply introducing more ways for
your system to fail, and for you to lose potential customers.

>I want to go away fishing etc and needed a way to do the 
>above for a few weeks at a time.

For my shareware, I supplied the registration service with a list of
valid serial/key combinations, and they hand them out automatically as
users register the software. The user has a licensed copy within
minutes of registering, without any intervention by me. If I provided
a big enough list, I could go away for a decade and it would be
handled automatically by my service.