Tag Archive for Blue Screen of Death

Why CTRL + ALT + DELETE

Why CTRL + ALT + DELETEEvery PC user has given their computer the three-finger salute as it locked up – frequently at the most inopportune time. But why CTRL + ALT + DELETE? Turns out the three-finger salute was a 10-minute hack to make programmers life easier. The CTRL + ALT + DELETE was born at IBM (IBM) in the early 1980s.

IBM PCProject Acorn was the code name for the rush project to build IBM’s new personal computer – because Apple (AAPL) and RadioShack were already selling small stand-alone computers. David Bradley was part of the team working from the IBM offices in Boca Raton, FL on the IBM PC.

Mental Floss reports that the programmers’ working on the IBM PC had to manually restart the entire system whenever the computer encountered a coding glitch. This was a waste of time. Mr. Bradley told Mental Floss,  “Some days, you’d be rebooting every five minutes as you searched for the problem … The tedious tests made the coders want to pull their hair out.

IBM logoMr. Bradley worked on everything from writing input/output programs to troubleshooting wire-wrap boards on Project Acorn. In order to placate the programmers, Mr. Bradley created a hack. His hack was a keyboard shortcut that triggered a system reset without memory tests.

To Mr. Bradley CTRL + ALT + DELETE, was just another item to tick off his to-do list. He says. “It was five minutes, 10 minutes of activity, and then I moved on to the next of the 100 things that needed to get done.

The engineer chose the keys by location—with the DEL key across the keyboard from the other two, it seemed unlikely that all three would be accidentally pressed at the same time. Mr. Bradley never intended to make the shortcut available to customers, nor did he expect it to become a cultural icon. It was meant for his fellow coders, for whom every second counted.

Thank IBM for CTRL + ALT + DELETE

The IBM team managed to finish Acorn on schedule. In the fall of 1981, the IBM PC hit the market. It was a dull gray box beneath a green screen monitor. Marketers predicted that the company would sell less than 50,000 units a year. IBM execs thought that estimate was too optimistic. They were all wrong. Computing would never be the same.

Statista Percent of US households with a computer 1984 - 2016

As PC sales took off – few users were aware of Mr. Bradley’s shortcut hidden in their machines. That changed in the early 1990s when Microsoft’s (MSFT) Windows 3 took off. Now Microsoft’s Windows PCs were crashing and the infamous “blue screen of death” plagued Windows users. A quick fix to the BSOD spread by word of mouth (this was before the WWW) – CTRL + ALT + DELETE. Suddenly, Mr. Bradley’s quick hack was a big deal.

At an event celebrating the 20th anniversary of the IBM PC industry big-wigs gathered for a panel discussion. Mental Floss says that the first question to the panel bypassed Microsoft chairman Bill Gates and was for David Bradley. Mr. Bradley, who has always been surprised by how popular his CTRL + ALT + DELETE hack made him, was quick to deflect the glory. The programmer joked;

I have to share the credit, I may have invented it, but I think Bill made it famous.

rb-

Bill Gates has publicly admitted that CTRL + ALT + DELETE was a mistake – but the company he founded continues to use Mr. Bradley’s hack. In Windows 10  the keyboard combination starts Windows Security, which lets you lock the computer, switch to a different user, log off, start Task Manager, or shut down/reboot the computer.

Stay safe out there!

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Windows Terrible, Horrible, No Good Month

Windows Terrible, Horrible, No Good MonthRedmond’s Terrible, Horrible, No Good, Very Bad month continues. The WannaCry ransomware hit mostly Windows 7 machines, and now researchers from the Russian information security company Aladdin RD recently discovered a new bug that will slow down and crash Microsoft (MSFT) Windows Vista, Windows 7, and Windows 8 PCs, but does not seem to impact Windows 10 so far.

Microsoft logoIn a throwback to the Windows 95 and 98 era, Ars Technica reports that certain specially crafted filenames could make the operating system lock up or occasionally crash with a blue screen of death. Ars reports that the bug allows a malicious website to try to load an image file with the “$MFT” name in the directory path. Windows uses “$MFT” for special metadata files that are used by the NTFS file system. The effected systems do not handle this directory name correctly.

The file exists in the root directory of each NTFS volume, but the NTFS driver handles it in special ways. Ars explains that it’s hidden from view and inaccessible to most software. Attempts to open the file are normally blocked, but if the filename is used as if it were a directory name—for example, trying to open the file c:\$MFT\123—then the NTFS driver takes out a lock on the file and never releases it. Every subsequent operation sits around waiting for the lock to be released. Forever. This blocks all other attempts to get access to the file system, and so every program will start to hang, rendering the machine unusable until it is rebooted.

DDoSArs says that web pages that use the bad filename in an image source will provoke the bug and make the machine stop responding. Depending on what the machine is doing concurrently, it will sometimes blue screen. Either way, you’re going to need to reboot it to recover. Some browsers will block attempts to access these local resources, but Internet Explorer will try to open the bad file.

Ars couldn’t immediately cause the same thing to occur remotely (by sending IIS a request for a bad filename), but it wouldn’t immediately surprise us if certain configurations or trickery were enough to cause the same problem.

Windows Blue Screen of DeathThe Verge has successfully tested the bug on a Windows 7 PC with the default Internet Explorer browser. Using a filename with “c:\$MFT\123” in a website image, their test caused a machine to slow down to the point they had to reboot to get the PC working again.

A Microsoft spokesperson told Engadget that the company is looking into the matter and will give an update as soon as it can.
“Our engineers are currently reviewing the information. Microsoft has a customer commitment to investigate reported security issues and provide updates as soon as possible.”

The Redmond boys also had to release an emergency out-of-band update for the Malware Protection Engine aka Windows Defender. Two Google security researchers discovered the “crazy bad” flaw. They claimed it was “the worst Windows remote code exec in recent memory.” The TechNet article says the vulnerability they patched would allow remote code execution if the Microsoft Malware Protection Engine scans a specially crafted file (CVE-2017-0290). To MSFT’s credit, they did fix the bug and release the patch with a week of being notified.

rb-

Early reports are that this bug is an attack vector. However, this is a denial of service attack that will need a reboot. This new flaw could be bundled with other more dangerous malware to force the user to reboot allowing the attacking malware to get loaded.

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.