Bill Gates Says He's Sorry About Control-Alt-Delete (qz.com)
An anonymous reader quotes a report from Quartz: At the Bloomberg Global Business Forum today, Carlyle Group co-founder and CEO David Rubenstein asked Microsoft founder Bill Gates to account for one of the most baffling questions of the digital era: Why does it take three fingers to lock or log in to a PC, and why did Gates ever think that was a good idea? Grimacing slightly, Gates deflected responsibility for the crtl-alt-delete key command, saying, "clearly, the people involved should have put another key on to make that work." Rubenstein pressed him: does he regret the decision? "You can't go back and change the small things in your life without putting the other things at risk," Gates said. But: "Sure. If I could make one small edit I would make that a single key operation." Gates has made the confession before. In 2013, he blamed IBM for the issue, saying, "The guy who did the IBM keyboard design didn't want to give us our single button."
I'll control-alt-delete you (Weird Al)
I have a LONG list of things that I think Mr. Gates should be embarrassed about regarding Windows. The three finger salute is very, very low on my list.
Blaming IBM eh?
Looks like it's time for another volume of "What Happened".
"There is more worth loving than we have strength to love." - Brian Jay Stanley
I thought it was supposed to be a *good* thing to prevent people from accidentally restarting their machines by pressing the wrong button. From that perspective, it's a success.
The fact that windows now adds a whole bunch of other options to that command, like change password, log off, lock the computer, etc, is entirely their fault; there's nothing stopping them from adding *those* commands to another button, say an F10 or something, that allows you those options. So what is wrong with Ctl-alt-del again?
The reason they used that combo in the first place was for compatibility with legacy applications. In legacy Windows, CTRL+ALT+DEL was handled at a low level and could bring up task manager or restart the machine. Applications could not detect the keypress.
When they went to implement multi-user and logins, they realized they needed to ensure applications could not spoof the login screen to trick users into entering their credentials. A malicious application could potentially save and reuse these credentials especially if they were of a DIFFERENT user or an admin user.
What to do? Well if they had the user press a key combination that applications couldn't detect to log in, or even a key combination that would result in a different action if they were already logged in, a fake application would not be able to detect this keypress and spoof the actual login screen. Guess what, an existing key combination fit this criteria. They could have invented a new combination, of course, but chances are a legacy application might use this combination as a hotkey, and reserving it for login user would break that application.
I forgot to mention... I think the key combo stretches all the way back to MS-DOS, where CTRL+ALT+DEL would instantly reboot. I assume 16-bit Windows trapped this combination first of all so DOS wouldn't intercept it and reboot right away, and also so they could anticipate the user was having problems and offer to run Task Manager. But the key combo was first declared in DOS as a key press that could be used to soft reset the machine, but would not be pressed accidentally. CTRL+ALT+DEL makes perfect sense for that scenario. Then it just evolved organically.
"Sure. If I could make one small edit I would make that a single key operation."
On an Apple ][ we had a reset key. However it only would work in conjunction with the CTRL key.
Why? So you can not hit it by accident and cause a reboot.
Basically every Workstation, Mini Computer, uses a 2 or 3 key combo which REQUIRES BOTH HANDS, so it can not be triggered by accident.
Is ctrl/alt/del a good combo? No idea, never cared.
Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
The IBM PC was designed by observing the market leader (the Apple II with a Microsoft CP/M card) and copying all the good stuff while trying to avoid its problems. One of the problems of the Apple II was that reset was a simple key close to the return key. So it wasn't rare for you to type in stuff all night only to watch it all vanish due to a slightly misplaced finger. A popular add-on product for the Apple II was a little plastic cap for the reset key that you had to lift before you could press it. IBM selected three keys that were far enough apart than nobody would type by accident.
I thought the point of Ctrl-Alt-Del was that it generated a system-level interrupt that no other program would be allowed to supercede (I'm getting the exact terminology wrong here probably, but the point is), and only the operating system would be get a user to put in a password on the familiar login screen.
Otherwise, malicious or other programs might be able to spoof the login screen and capture a users credentials.
Good thinking, but it just led to some convoluted keyboard contortions as a result.
We had an instance where one of our customers only had one hand. Pretty difficult to do the three finger salute with one hand. They were resorting to putting things in their mouth to get the third key. I bought a cheap USB keyboard, took out the PCB, figured out what to short out to get CTRL-ALT-DEL, and put it in a box with a single button. Problem solved.
WIN+L will do that just fine.
"Nine times out of ten, starting a fire is not the best way to solve the problem." - my wife
You want another? Why is Alt-F4 still available to shut down programs and log off Windows. It's been there since Windows 1.0. Maybe then it made sense, but why now?
I use Alt-F4 all the time. If you're annoyed that it's still in windows you'll be really pissed off if you ever use a Linux desktop, they all seem to use it as well. Inertia, it's what's for dinner.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
The apology was for the choice to capture the historical "Reboot" key sequence and re-purpose it for logon. This was particularly annoying when we still had a mix of OSes in the workplace, and people got into the habit of walking up to any unknown "PC" and the first thing they do is give the 3-finger salute, rebooting the computer if it was running something other than the latest Microsoft product.
Almost as big a sin against computing as the 1994 introduction of the "Windows Key".
I do not deploy Linux. Ever.
That sounds suspiciously like something a retired time traveller would say...
-
Ctrl+Alt+Delete is a combination used for historical reasons.
It is the most secure way of doing a login because it triggered an "interrupt" in the system, like a signal that could not be caught by the program running in the foreground. So programs couldn't fake the login screen.
But it was an interrupt--and one that took three keys--because it was used in the old days to reboot a system with a hung program. You wouldn't WANT a computer to reboot when you pressed one key, because then a random mistaken keypress could lose hours of work. (This was before autosave, remember.)
The common way of doing this today on linux is still what, Alt+Sysrq+b? Or for killing X, Ctrl+Alt+Backspace? They're still a 3-key combinations.
It's been thirty+ years and we should just change system or keyboard designs, but it wasn't a mistake.
Real lawyers write in C++
99.9% of all Windows users would happily type in their password if an application popped up an authentic looking fake full screen windows login screen with the cursor flashing inside the password box. They're not going to press CtrlAltDel because it is already asking for their password.
Unless companies are educating users that they must always press CtrlAltDel even if the password cursor is blinking (which most won't bother) the whole CtrlAltDel requirement is just bullshit. Passing it off as a security thing is well and good but only nerds are going to understand this and maybe be aware enough to press it in the above example. I can honestly say that I'd probably be fooled by this type of trick if done on a busy day.