Re:Bill Gates Admits Ctrl-Alt-Delete was Mistake--Blames on IBM
by csense on Thursday September 26, 2013 @01:36PM
(#6452297)
Isn't the Ctrl-Alt-Delete to login supposed to be in order to prevent a malicious fullscreen app from faking the login screen and tricking the user into entering their login credentials? (Since Ctrl-Alt-Delete is a keystroke that is routed directly to an OS handler at a fairly low level, a mere application can't intercept it.)
There's actually a sound reason, I can't really think of another way to prevent this attack vector.
Re:Bill Gates Admits Ctrl-Alt-Delete was Mistake--Blames on IBM
by T-hawk on Thursday September 26, 2013 @01:56PM
(#6452433)
The article says that. The need for a uninterceptable interrupt to reach the OS login screen is obvious.
The mistake was making it a three-key chord rather than something simpler. Compare to the single home button on iOS devices, which also goes straight to the OS and can't be intercepted by user space programs.
There's actually a sound reason, I can't really think of another way to prevent this attack vector.
The mistake was making it a three-key chord rather than something simpler. Compare to the single home button on iOS devices, which also goes straight to the OS and can't be intercepted by user space programs.