Retroibmwindowskeyboardshistory
Ctrl+Alt+Delete saved IBM's engineers from rebooting PCs with a screwdriver
David Bradley gave IBM's prototype PC a keyboard reset. A later Windows login use put those same three keys on the trusted path to your password.
A screwdriver was a perfectly serviceable reboot button on IBM’s lab machines. That sounds less convenient once the machine is on somebody’s desk, particularly if the screwdriver is already holding the case together.
David Bradley explained the workaround to Computer Collector’s Evan Koblentz. During early 1981, prototype hardware and software kept hanging. Bradley added a memory value and a jump to the reset vector so developers could restart without repeatedly cycling power.
The keyboard shortcut reduced the interruption each failure caused. A power cycle required switching off, waiting, and switching back on; Bradley’s account describes a warm reboot that could be requested from the keyboard. In a lab full of unfinished hardware and software, that difference came around again every time another experiment hung. A recovery feature had become part of the development equipment.
His choice of keys also economized on work. The BIOS already tracked modifier keys, and he chose Ctrl and Alt, which were newer and less used. As he put it, “Two of them had to be shift keys.”
Lemelson-MIT’s account describes the other consideration: the keys were difficult to hit together accidentally. Bradley expected programmers and engineers to use the shortcut. Accident resistance is rather relevant when the action discards whatever the machine was doing.
Bradley had responsibility for the ROM BIOS, according to Lemelson-MIT, as one of the twelve engineers who built the IBM PC. That put the workaround in the code handling the machine’s basic operation. The reset could use information the BIOS already maintained about the keys. Even the choice of Delete had a practical side: Lemelson-MIT notes its position across the keyboard from the modifiers, making an accidental restart harder.
The later Windows policy has an easily misread name: “Do not require CTRL+ALT+DEL.” Enabling it removes the requirement; disabling it requires the gesture before sign-in, with an exception for smart-card users. Microsoft’s documentation places the setting under Security Options and says changes take effect without a restart. A person reviewing a policy needs to read that negative carefully before saving it.
Microsoft describes the attack it addresses as malware presenting a convincing copy of the sign-in dialog. Somebody types a real password into the imitation, and the attacker can use that account’s privileges. Requiring the gesture gives Windows a trusted path before the password goes in. The documentation also identifies the accessibility tradeoff for people who have difficulty pressing the keys together, which helps explain why the option exists at all.
Our earlier Ballmer story follows what Windows put on the screen after the salute. The next recovery interface has the same problem as Bradley’s keyboard choice: making a dangerous action easy to find without making it easy to trigger accidentally.