Economic Mess Leaves Kluchars Wanting Blood(big Screwup For Mac

• Economic Mess Leaves Kluchars Wanting Blood(big Screwup For Mac Free
• Economic Mess Leaves Kluchars Wanting Blood(big Screwup For Mac Os
• Economic Mess Leaves Kluchars Wanting Blood(big Screwup For Mac Kids

If you want to be up on the latest developments emanating from this blog, be sure to watch the Scripting-News repository. We're using that space more and more. We're using that space more and more. Warren Buffet bet on an index fund over a managed fund, and he was right, he's winning the bet. It drops debris when it comes close to the sun and it leaves a trail of debris. I was born in Australia but grew up in England does l arginine reduce blood. Have you got any qualifications? Creme de la femme mac The Supreme. With its violent crimes, high unemployment, dwindling population and financial crisis,.

Please call back later It doesn’t end there. In pubs all over the land, football is the thing. Women are into it too, of course. But amongst men, both old and young, it tends to be the glue of social bonding, the tribal magnetism that keeps them all in cahoots. But what if you view supporting a particular team as basically atavistic?

What if you happen to be sick and tired of the sycophantic analysis of pigeon-brained and overpaid young men? What if you have crossed the Rubicon and admitted to yourself that England are actually crap? What university do you go to? But in the end, emotion is offset by the excitement of a more efficient camp, especially for a technologically-savvy coach like Kelly. Case in point: Kelly and his staff will have their practice filmed with high-definition cameras, downloaded and ready to watch as soon as the team steps off the NovaCare Complex practice fields, whereas there would normally be lag time for the footage to download at Lehigh.

Seconds matter to Kelly during the work day, so minutes would surely be agonizing for him. Have you got any?

Designers have been trying to flog this one for a few years now, but thankfully it hasn’t really caught on beyond the world of photo shoots and fashion bloggers. While a smart pair of shorts worn with a shirt is perfectly acceptable for high summer office attire, the shorts suit edges towards the try-hard (see above). And there is an undeniable whiff of the school uniform to the idea, transforming the wearer into the male equivalent of Britney Spears dressed as a schoolgirl and thus asking to be hit (at least) one more time. Oh go on, let’s make it twice. I came here to work One watchdog warned the Internal Revenue Service would have difficulty completing testing of systems required to implement the law, while another from the Government Accountability Office said he also foresaw difficulties in meeting an October 1 deadline. The first symptoms of EEE are fever (often 103º to 106ºF), stiff neck, headache, and lack of energy.

These symptoms show up three to ten days after a bite from an infected mosquito. Inflammation and swelling of the brain, called encephalitis, is the most dangerous and common serious complication. The disease generally worsens quickly, and some patients may go into a coma within a week.

Obama warned Damascus last year that any attempt to deploy or use chemical or biological weapons would cross a 'red line.' Psaki on Thursday said that line had been crossed 'a couple of months ago' and there were a range of options that Obama and his national security team were considering.

All those prices started changing dramatically at least a minute before 2 p.m. The gold buying looks to have started even earlier. The heavily traded SPDR gold ETF gained 15 percent between 1:56 p.m. And 2:00 p.m.

The Scotsman provides news, events and sport features from the Edinburgh area. For the best up to date information relating to Edinburgh and the surrounding areas visit us at The Scotsman regularly or bookmark this page. Real beauty page The Markit/JMMA Japan Manufacturing Purchasing Managers Index (PMI) rose to a seasonally adjusted 52.5 in September from 52.2 in the previous month, remaining above the 50 threshold that separates contraction from expansion for the seventh month. Sellers would also include private equity firm Carlyle which owns 18 percent after selling the bulk of itsholding to Eurazeo.

Carlyle took a 48 percent stake in 2008 whenthe whole of Moncler was valued at 220 million euros. Lorca says the bullfighting world has failed to adapt to the changes that have taken place in Spanish society. He blames globalization, Walt Disney films and cartoons that depict animals as human-like. He found this out himself one day when he spotted the bright orange flowers of the houseplant Begonia sutherlandii poking out of the soil beneath a skimmia in the family garden in Fife. 'I must have dropped the plant on my way to the compost and it rooted there, where the drainage was perfect and where it was protected from wind by a wall.' Prof Sir Bruce Keogh, NHS England medical director, has said hospitals need to be “more like Tesco” and place higher priority on the convenience of patients, by offering routine procedures seven days a week. How many are there in a book?

The executive branch appears to be moving with all deliberate speed to a more coherent policy towards Africa. Michael Froman, our U.S.

Trade Representative, led the U.S. Side in the recent annual (as required by the original legislation) Africa Growth and Opportunity Act Ministerial meetings, and President Obama laid down some benchmarks for the future with Africa during his recent trip to three countries. Froman also wants to use AGOA to actually help U.S. Workers and exports as much as he wants to see AGOA work for Africa. How long have you lived here? Bird-watching has quite the following in Nashville.

The Tennessee Ornithological Society launched in 1915 and is recognized today with a historical plaque near the property of its founding, 419 Union Street. The group, committed to the study and preservation of Tennessee birds, offers myriad resources on their web site, like links to recent sightings. And it points budding birders to specific locations in Nashville where viewing is good, like Radnor Lake, considered a top spot for spotting waterfowl. Magic story very thanks Georgian forces invaded South Ossetia 5 years ago, initiating an armed conflict that lasted only 5 days but that brought irreparable damage to the citizens of Georgia, South Ossetia, Abkhazia and Russia. The world is still discussing who is to blame for hundreds of deaths, thousands of injuries and severed relations between Georgia and Russia and whether it is still possible to mend what was once broken.

The Voice of Russia host Dmitri Vostok was covering the news from Tskhinval in South Ossetia back in 2008 and is now reminiscing about his dramatic experience in an interview with his colleague. Are you a student? Increasingly digitised music means fewer CDs are passed out to radio stations and journalists, and an illegal copy of an unreleased single can become global property in minutes as an MP3: “It is so easy to share and distribute just by the click of a mouse button,” says Matt Grimes, senior lecturer in music industries at Birmingham City University. This makes leaked tracks easier to find too, no longer located in closed file sharing groups which existed online a decade ago when piracy was more inpenetrable, but on services like SoundCloud and YouTube.

David Price, director of piracy at NetNames says: “you’re no longer waiting for your favourite track to come on the radio, you can find it on Google”. Directory enquiries The new Ford Focus 1.0 litre EcoBoost is an ultra efficient version that will be the first petrol powered family car in Europe to offer 99/km Co2 emissions. It will be exempt from Vehicle Excise Duty and London Congestion Charge. The new Ford Focus will feature Ford ECOnetic Technology including ultra-low rolling resistance tyres, unique aerodynamics under the car and revised gearing to help deliver the company’s most fuel-efficient ever petrol-powered family car. Barb Samardzich, European Product Development vice president said “just a couple of years ago few would have thought that a medium-sized petrol car could break the 100g/km CO 2 barrier, Ford’s 1.0-litre EcoBoost engine has a habit of taking expectations of what a petrol engine can deliver and turning them upside down.”. Have you got a current driving licence? Once you select a goal, such as running a marathon, tap the “training” tab and a tiny calendar broken out by each day of the month appears at the top of your device.

Select a specific date to see how many miles or what workout you should complete that day. Rest-day tips may include things like motivational quotes, nutritional advice or pointers on running form. In total, Runkeeper added 36 training plans to its platform in the most recent update, 12 are free and 24 are paid. Gloomy tales I’ve seen a lot of this kid and I love him as a bowler. He is one of best young quicks in the world and is going to be a big star. He bowls with real pace and gets it moving around with a good technique that allows him to reverse it.

He has a great attitude and could be the star of the Ashes. England will have done their homework on him. David Saker knows him well and England will look to attack him. The key is not to give him any easy wickets, go after him and let the crowd get on his back. But I reckon he has the mettle to cope with whatever is thrown at him. History Google and app updates, sometime means worse.

The PC version of Chrome just updated and it’s horrible took me a minute to locate the open on other devices menu. Google music keeps getting worse,not better, add to my library when searching for new artists disappeared. Google Maps lost significant functionality. Gmail is the biggest let down for people with multiple accounts, the old pull down menus was so much cleaner.

On the other hand, drive got easier to use, and keep added location based features. I want to report a The move marked the second bond default by cash-strapped Detroit after Kevyn Orr, the former corporate bankruptcy attorney who has been running the city since March, announced on June 14 a moratorium on unsecured debt payments. Situated about one binocular field of view to the lower left of M44, stealthily moves an object which is now becoming prominent in the popular news. Comet ISON currently lies 260 million miles from our little world and may take another 45 days for it to brighten enough to be glimpsed through binoculars.

Democrats generally back raising more revenue through anoverhaul, while Republicans want to trim tax breaks so that taxrates can be cut. For the most part, both parties back reducingindividual and corporate taxes and simplifying the tax code. Who should parents and the public hold accountable for the collapse of test scores? Not the students and not the teachers, but state education officials. They make the rules that determine curriculum, standards, teacher qualifications and other factors that affect how schools function. They have changed the tests and the scoring repeatedly.

They hold the reins of power. Treasury market, the 10-year benchmark Treasurynote was up 19/32, its yield down at 2.6013 percentfrom 2.67 percent on Wednesday, when yields also eased inanticipation of a debt ceiling deal. Three years Like Hedda, Titania is a role that will require this 5ft 2in woman to conjure a haughty grandeur. And Titania is also a role that has given us one of the funniest scenes in Shakespeare, when the fairy queen falls in love with a donkey.

So how is David Walliams’s Bottom? Smith guffaws. ‘He’s got a lovely Bottom, an absolutely lovely Bottom,’ she says. ‘I’ve been giggling with my friends.

How funny – David’s giving his Bottom and I’m giving my Tit. He tweeted me at the start asking me if I’d learnt my lines and I tweeted back, “I’ll see your ass in the morning.” We’re getting all the jokes going.’. How do you know each other? Tunstall was transferred to Oflag VIB, where he was immediately sentenced to six more weeks in solitary. When he protested, he was told that this new sentence was for “insulting the Third Reich” after his recapture. The news prompted a wave of short-covering, sending theAussie to NZ$1.1347, from a low of NZ$1.1268.

Marketshad been shorting the Aussie on diverging interest rate outlooksbetween Australia and New Zealand. Francis arrives in Brazil as protests display discontent over dashed expectations in a country that during the past decade pulled millions out of poverty and was one of the brightest emerging economies. The new text says that 'mutual consent' is needed if aregional scheme is found to cover flights that do not depart orland within that region, or if the scheme is 'intended to coverany portion of those flights beyond the national airspaces ofthe States concerned.' In the meantime, all 13 finalists will be screened in Picturehouse cinemas nationwide, one before every main feature, and also on Virgin Media’s TiVo service – or of course you can watch them below, right now. And if you can make it to the end of Malcolm Roy Greenhill’s Brando-ing without trying ‘Brando face’ and ‘De Niro face’ for yourself, you’re a stronger person than I. Hello good day Short-term policies offer coverage periods of up to six or12 months, depending on state regulations, and applicants facestringent underwriting procedures.

Short-term insurance is oftenused by people between jobs who are trying to avoid costly COBRApolicies, which provide continued insurance after a workerleaves a company, and those waiting for workplace, Medicare,Medicaid and other benefits to kick in. Short-term policies alsoattract foreign students and workers who are in the UnitedStates legally but not covered by insurance from home. Another year A survey released this month of more than 2,000 adults from State Farm found that parents would rather talk with their children about almost anything else, including drugs, alcohol, religion and politics, than life insurance.

Still, talking with parents is how kids learn about life insurance, with daughters most likely to name their moms and sons most likely to name their dads as a top source, according to the survey. Not surprisingly, parenthood is the life event that’s most likely to inspire someone to take out life insurance – but despite that prompt, only about half of parents take out life insurance policies beyond what is provided by their employer, the survey says. Withdraw cash Irreversible damage from a heart attack can begin in 30 minutes. Most tissue death occurs in the first two to three hours, says co-author Hitinder Gurm, an associate professor at the University of Michigan. Artemis, which is still working to get its second boat readyand hopes join the competition later in the summer, has saidthat it would be forced out of the competition if the rulechanges were rolled back. Last year, Monsanto and other industry members spent $40 million to defeat a ballot initiative in California to require labeling of GMO food.

Similar initiatives are under way in several other U.S. States and at the federal level. The news has dominated the front pages in Norway and raised questions about the judicial system in the Gulf state, which lures large numbers of expatriates and tourists with a Western lifestyle but has little-publicized conservative laws on its books covering sex and alcohol. Of the other three beneficiaries, only Silverstein Properties recently gave to Cuomo.

Larry Silverstein and an affiliated corporation, WTC Development LLC, gave Cuomo a combined $25,000 on March 19. Thor Equities has given Cuomo four donations totaling $11,500, but none since July 2009.

Seems like a really nice feature. I've been thinking about something like this for a while.

I see some people are really annoyed that it isn't available for the Home version and I too am somewhat annoyed but in this case it is somewhat understandable since it depends on a feature that is (somewhat more reasonable) limited to Pro versions. The thing that annoys me more (hi MS guys, feel free to tell the relevant people about this) is how they have started to add ads to the login screen and my start menu - even in the Pro version! I'm on KDE now so I cannot verify this since the last few months, and probably shouldn't care but given that MS has become a lot nicer in a lot of areas it really should bug developers and PR people there that PMs or bean counters (sorry to all good accountants and PMs out there) are allowed to destroy all the work you put into making people love you.

Edit: minor edits for readability, clarification. Mine: - Clumsy installation process (unless you where in a position where you didn't have to rely on OEM crap, i.e. Unless you where an IT pro or enthusiast) - Performance. My builds would easily take 50% more time on the same hardware with Windows. Git was slower.

Node was slower. Until WSL getting access to standard tooling was kind of clumsy (respect for Cygwin, but still). Even after WSL it is still clumsy (who can tell my how to activate WSL without consulting duckduckgo?

I've done it twice and I still cannot say for sure). Package management: Used to be non-existent (except again cygwin). Now it is just clumsy (a mix of Windows Store, WSL apt-get and Chocolatey should get you most of the stuff you need.) - Licensing. I'm no die hard free software person, but many of the standard programs on Windows are directly user hostile (Acrobat Reader comes to mind). Until recently Windows also lacked basic desktop manager features like multiple desktops.

Not directly Microsofts fault, but if people like me are using Windows it is often because someone I work for demand it. Usually that also means having to deal with an IT department running Active Directory and all the 'interesting' consequences that has, even for someone who is part of said IT department like I've been. (Getting locked out from your files because an admin flipped a switch?

Someone swapped regional settings across a group of machines that I was responsible for and locked them, causing all POS systems to fail with no way to fix them? Having to wait for all kinds of scripts that run on logon?

Accept having basic parts of your user experience set by it department? Again this is not MS fault directly but back when I first experienced working with Windows in companies for some reason Active Directory seemed to attract people who wants to to those kinds of things and/or it has a power to make them want it. I see some people are really annoyed that it isn't available for the Home version and I too am somewhat annoyed but in this case it is somewhat understandable since it depends on a feature that is (somewhat more reasonable) limited to Pro versions. Hyper-V does function under the garb of 'Windows Hypervisor Platform' and 'Virtual Machine Platform' even under Windows 10 Home.

I have it installed and it provides the virtualisation capabilities for Device Guard and Core Isolation/Memory Integrity. Virtualbox from version 6 has been forced to fallback to Hyper-V when the latter is running, as it doesn't relinquish control to another virtualisation software. So there is no reason why MS cannot implement Windows Sandbox even on Home since the underlying tech actually functions on all Windows editions, provided hardware support is there. So there is no reason why MS cannot implement Windows Sandbox even on Home since the underlying tech actually functions on all Windows editions By that logic Microsoft could also allow Windows 10 Home to run Active Directory. The reason there's a Pro/Home split is a commercial decision not a technical one, so trying to view it through a technical lens is faulty. Regardless, if we want to talk about security features Windows 10 Home 'should' have, let's talk AppLocker one of the most powerful security tools available. My computer illiterate relatives aren't going to be dropping into Sandbox to test potentially dangerous executable, but AppLocker could be set and forget, blocking execution of dangerous items.

The only thing Microsoft offers on Home is the highly self-serving 'Allow apps from the store only.' Which adds as many problems as it solves. By that logic Microsoft could also allow Windows 10 Home to run Active Directory. The reason there's a Pro/Home split is a commercial decision not a technical one, so trying to view it through a technical lens is faulty.

You misread the post. Eitland was saying that: 1) sandbox needs hyperv for technical reasons 2) hyperv is not in home for commercial reasons 3) therefore home can't have sandbox Santosh83 wasn't trying to view the entire thing through a technical lens.

Their post has an implicit understanding of the commercial argument when it comes to unlocking the full hyperv feature set. They were simply correcting the technical portion of someone else's argument.

Compatibility and familiarity most likely. Server cuts pretty much everything that wouldn't be used by a role such as remote desktop host, what you see left is what is actually used in real world cases.

In the particular case of links to Videos/Music the remote desktop host role would need to support them. I mean yeah they could dynamically add the links based on use case discovery of which roles that need them.

Or they could just include the default explorer profile and nobody really cares that the links are there as they are on every other Windows install. Now when it comes to things meatier than a few shortcuts they are much more willing to go modular. See nano server. Nowadays it's almost impossible to uninstall an app completely, because most of them creating files willy nilly.

And it's same on all known OSes. The side effect we see is system size growing in time. IMO running an app in a sandbox should be the default option. On Windows, I used to like sandboxie, which virtualized every write into single directory. Uninstall was easy as removing that dir.

This MS sandbox doesn't allow you to continually run an app in the sandbox, as all data get's destroyed on app close, so it's not sandboxie (or similar) replacement. Nowadays it's almost impossible to uninstall an app completely, because most of them creating files willy nilly.

This has always been the case on Windows. In fact if anything, nowadays it’s better than its ever been because thanks to the UAC and other controls Microsoft have put in place, developers aren’t so free to do whatever they like to the host machine.

But that’s remember a time before the UAC when it would often be common practice to reinstall the OS on a semi-regular basis (not something I personally engaged in but a great many of my peers used to). And it’s same on all known OSes It really isn’t. On platforms with a proper package manager you can query what files get installed where. A great many package managers even let you query a file system file and see which package installed it. Of course you still have the problem of the software writing files during its operation but that should be limited to $HOME (on POSIX systems) or any path that is writable by the owner / group of the user that application runs as (which should be limited even if it’s a system service). That has always been the case though. For as long as I've use Linux as a desktop my $HOME directory has been littered with dot-files and folders.

And as for Windows, things used to be so much worse. Since the UAC, Windows applications have been limited in where they can write to lest they annoy their users with frequent escalation prompts. Before the UAC developers often used to write files all over the place - it was a complete nightmare! In fact one of the primary purposes of the UAC - as I recall - was to reign developers in. Even the UAC aside, on Windows you now have the application data directory and permissions on the registry which both take some reliance off random files dumped anywhere.

Before then Windows was like the wild west. And we're not talking that long ago in terms of the history of Windows - Vista was released 11 years ago and it took a few years after that for developers to catch up. Plus with the trend of moving everything to the web, you're getting fewer native applications which can write those random files in seemingly random locations (that's one of the few good things about the move to web applications in my personal opinion). You'll always have problems with developers having their own opinions - that's inescapable. But things used to be so much worse.

Most of the reside in home dir, but stays there forever. Like various cache files, settings. And most of the time they are not confined to single dir.

I think you need to support that statement. I believe the vast majority of software on common Unix distros creates no files in $HOME1, and of those that do the majority use one folder in home2, which.should+ be used for configuration, and often you don't want it automatically uninstalled on software removal. The few I can think of that quote to multiple locations do so because the extra locations are shared folders.

For example, I would not want my downloads directory removed on uninstallation of Firefox. Most things in /bin, and /usr/bin. 2: other than what I outlined above, I can't think of any that use multiple directories. If it's truly a common as you say, you should be able to provide some examples.

You're contradicting yourself in your first and second paragraph. Those two paragraphs are talking about different OSs.

1st paragraph is talking about Windows, 2nd paragraph is talking about non-Windows systems with first-class package managers such as ArchLinux, Debian, CentOS, FreeBSD, etc. Those proper package managers still rely on the packager doing things correctly Sure, but the point is you can query what the package manager has done. There's plenty of linux packages that creates files during operation in their designated /var/log/xxx /var/db/xxx /etc/xxx /home/xxx/ directories that you're not able to query using the package manager. That's half true.

You can query that /var/db/xxx and /var/log/xxx has been created by the package manager and often the directories (and their contents) will be owned by the user which the daemon runs under. However I do agree with the point regarding your $HOME directory and actually made that point myself: Of course you still have the problem of the software writing files during its operation but that should be limited to $HOME (on POSIX systems) or any path that is writable by the owner / group of the user that application runs as (which should be limited even if it’s a system service). As an aside, you can also query what files a particular application has open. In fact there are a few ways to do this from querying the /proc/$PID directory through to tools like `lsof`.

I have plenty of files in /var/lib/ that are not owned by any package, same in /var/log/, /var/cache/, /etc/sysconfig/ and other directories - their parent directory is owned by a different package than the ones creating these files. Got any examples of that? You'd expect only docker to write to /var/lib/docker, mysql to write to /var/lib/mysql. Not discounted that I've overlooked something but a quick look in my /var/lib and it's easy to see what is managed by what. So I'm curious what instances you have of a package manager creating a directory and then a completely unrelated daemon writing to that directory. I'm not arguing that a decent package manager is a better than none - but they are solving all issues you claim they do. I'm not claiming they solve all the problems - in fact I literally identified a few problems they don't solve!

Plus even those points I identified aside, there will always be edge cases for thing that package manager should have solved but failed to do so. Perhaps we should turn this discussion on it's head and discuss better ways to solve the problems people are describing? What would your solution be? Or are you ostensibly agreeing with my points but being contrary just for the sake of playing devils advocate? Pretty much all OSs, including windows, have ways to view which processes has a file open Isn't that literally what I just said? (plus I gave a few examples too). I've not used certbot so excuse the dumb question, but is certbot doing that during install (ie via the package manager) or during program execution (ie when the certbot ELF is launched)?

I shouldn't expect too much in /lib/systemd/system is installed outside of package managers but I agree it does happen and at least they're generally quite easy to identify which service file does what. Crontab is definitely one of those nasty things that can often get forgotten about though (and I speak from unfortunate experience there hah!) We're really drifting into the domain of Puppet and it's ilk now though. You're comment is very light on detail so it's hard to understand your issue properly but I've been running Linux as my primary desktop for more than 15 years and have managed literally hundreds of Linux servers too and never had a package manager hose my platform (big caveat: aside the notorious `filesystem` update on ArchLinux but that one is an extreme edge case scenario due to the rolling release nature of Arch. However even package was well documented on Arch's site beforehand as being a package that required manual steps to upgrade). It's true that Linux package managers used to be buggy and problematic in the 90s but those days have long since gone. And while I'm not discounting that a package upgrade could damage your system, the instances when they do are highly unusual rather than a typical problem users face with each and every upgrade. In fact Windows sysadmins have far more dread with running Windows updates than Linux admins do and yet Windows updates are only focused on Microsoft products rather than every piece of software on the system.

It's all up to packagers to author their packages right so they don't leave garbage on your machine that you have to manually clean up (or give up and reformat). Actually it's not. It's up to the application developers to do that. If you specify a package to install a file `x` to location `y` then the package manager will uninstall that file automatically too. You don't specifically need to tell the package manager to do that (or at least not with any of the packaging systems I've used). But if the application developer writes the application to spew out thousands of files into $HOME, that happens outside of the package manager. There isn't a whole lot you can do to stop that aside limit the directories which your application has permission to write to (either via chroot, containerisation, user/group permissions, SELinux, or other forms of ACL.

There's actually plenty of tools on Linux / UNIX to handle that problem). Uninstall was easy as removing that dir. File writes for application files are rarely the problem any more. The problem is that in order to function correctly (For some definition of correct, but say e.g. To associate file extensions, create shortcuts, start automatically, install a dependency such as a C runtime patch, whatever) the program needs to write to subsystems of the OS in a non-reversible way. It's also very HARD to do these things (create setups) because systems like Windows Installer aren't trivial to use.

Economic Mess Leaves Kluchars Wanting Blood(big Screwup For Mac Free

Every time a setup author makes a mistake there is a risk of stuff being left behind. Fundamentally, what you are doing is you are in state A when installing the program, creating state B. Then you continue to modify the system simply by using it or installing some more software creating state C. If you now uninstall the first software you don't have anything but a script undoing A-B, which run backwards can only do B-A, but you are in state C and you don't want to first run C-B because you want to keep the other parts of state C. So the uninstall script has to run in unknown territory (a file may have changed, a later dependency version may have been installed globally, a registry entry may not exist because they are NOT isolated per application etc) so the uninstall script just has to do what it can.

A sandbox could be a solution to this, where the sandbox contains diff views over some immutable base image. It probably is a lot easier to do (and do efficiently) with OS support. The app I use to do that is literally called AppCleaner, been using it for years it’s one of the first things I install. For example, the other day I moved Word to the trash, 5 seconds later I get the AppCleaner pop up letting me know it found an additional 2GB of shit that Word just littered around my machine that wouldn’t have gotten removed by just deleting the app. And unfortunately, that definitely hasn’t even been the worst offender I’ve run into, and at this point I’m very rarely not surprised by the amount of leftover crap that doesn’t get removed when deleting an app. Nowadays it's almost impossible to uninstall an app completely, because most of them creating files willy nilly. And it's same on all known OSes.

The side effect we see is system size growing in time. Unless I am mistaken, I don't think this is the case for iOS, Android, ChromeOS, FirefoxOS, and many game consoles. This is really just a problem with desktop and server operating systems, not with operating systems as a whole.

It's also getting bettwe with package managers, the Windows Store, and UAC. Frankly, the very concept of 'installing' an application is a ridiculous invention. Many systems of the past had self-contained applications that could just be dragged around between disks, copied, and deleted, seamlessly meshing with the files & folders desktop metaphor. Of course none of those systems enforced this behavior, which is something we could do today but, for the most part, don't. At least on Windows I have my pick of thousands of Portable Apps (and most Windows software can act as a portable app if you just extract it without installing it anyway, albeit still leaving junk in the registry).

You know what's a great feeling? Being able to reinstall your OS and just pointing a new toolbar at wherever you keep your portable apps and being good to go. Of course they could, but using that money they will go on to build another feature that you'll be able to use because you're already at the 'pro' level of their OS. The alternative is to convince some engineers to create this same feature in their spare time and contribute it for free as a Linux package. Then they can get email about all of the things it doesn't do, and fix bugs in their spare time on a feature that all they see are complaints for.

Until they burn out and the repo goes dead for a while and then gets picked up by one of those users who wants the feature to exist, and they make some improvements and get into an argument with another user who forks it and now there are two of them, almost the same but with a few features that are unique to each one. Of course for most of the users they either don't care and load one at random, or they do care and find features from the 'other' system they want in the one that is being used. They send mail to the maintainers asking them to copy those features. Which adds more pain as the developers copy each other's features but they put their own special spin on them.

This burns out more developers and a third person comes out and writes their own syntactically incompatible version that is functionally identical to the two different 'legacy' versions. At this point I just pay the man his $100 and appreciate that the people working on the code are on it all day and can spend evenings with their family. I'm not much of a Windows user, but MSIX sounds great. Does it add a simple context menu entry to convert an installer? Bonus points for straight up Install and even more for Run. I see it's open source, so if it's missing it may be possible to make a distribution of it with those things implemented. Then one could install it and make it a default msi handler.

Edit: from what I see conversion is much more involved. Create a certificate and go through a wizard and fill out some forms. Correct me if the is a quick and easy convert option.

Otherwise it's a nice thing that needs more development to be useful for a generic user. System Integrity Protection would protect against many of the same threats that Windows Sandbox would (since it prevents applications from doing extreme damage to the system even with root), and by default it only lets you install software from developers registered with Apple (either inside or outside the Mac App Store). It'd be more secure out of the box than a Windows system, as if you have admin and are willing to click 'yes', you can let an application do anything on Windows (although most attacks can be prevented with the new features in Pro/Enterprise). Totally get that issue. It might be worth spending a day or weekend making a boot-disk for them that will wipe their current disk image, and install win10 pro with it set-up so you can remote admin it. That way for your parents they just have to buy the pc, put the usb in and reboot it, and then call you when it's back on so you can remote in and give it a key and finish configuring it for them.

I suppose even that might cause issues if you can't teach them or walk them through via facetime how to set the device to boot from the usb instead of the harddrive. I really doubt that, but I can't easily argue with an anecdote, so sure. It happened, probably 15 years ago.

Windows was famous for tons of installers bundling toolbars, but that's never been an epidemic on Mac. These days, Macs will not install unsigned software by default, and you can lock that down to App Store only with a single setting change, so they're certainly not getting bundled malicious toolbars from installing software. Since distributing malware is a quick way to get your developer signature revoked, and you're certainly not going to be installing toolbars from the App Store sandbox. That leaves manually installing malicious toolbars through the official extension store for whatever browser they use. All extension stores do their best to weed out malicious extensions these days, and it takes intentional effort to install extensions. It doesn't just happen while you're trying to do other things. Obviously, toolbars don't even exist on iPads, and software installers bundling random malware is obviously not a huge concern on Chromebooks.

A MacBook was not at the front of my list, so I don't know why you chose to singularly attack that option. Maybe you thought it was the easiest target? How would application signing not help? If the OS won't let the user install the malware, that's the end of the line. As I said in my original comment, I don't think Windows 10 is as fragile as earlier versions. A large part of this is the additional enforcement around application signing, even though it isn't as strong as what macOS does by default. In earlier versions of Windows, it absolutely did 'just happen' from a non-technical user's point of view.

Linux, macOS, and (to a slightly lesser extent) Windows 10 do not allow it to 'just happen'. if the OS won't let the user install the malware, that's the end of the line. Except there's no definitive, 100% foolproof way to identify something as malware v.

If you put a bunch of dialogs in front of something, the site will just include a for-dummies illustration of what to click to allow the install. This will especially be the case if doing so is a prerequisite for receiving the new emoji pack, or whatever else it is that the people have been promised on the other side of those clicks. We've been through this song and dance enough times that it's not a question of whether this will happen or whether users will fall for it. It's clear that it will and they will. Users do not read dialog boxes, they interpret them as noise and click through them. Operating systems can only protect the user from themselves up to a certain point, at least while retaining the ability to install third-party software.

My mom's computer(s) have been running Linux for probably 10 years now. This has kept her reasonably safe (especially as contrasted with my dad, who insists on Windows), but one time I went over to find some PDF injector-thing installed as a Chrome extension. From her POV, this 'just happened'. While using a less-targeted platform helps a lot, online malfeasance is not a platform-specific problem.

Pretending otherwise is kidding ourselves. Vigilance is always needed. some others include a Chromebook, I.e. A web browser with a keyboard.

an iPad I.e. A content consumption tool, not a general-purpose computer. a MacBook Fine if you can afford it.

or even installing a Linux distro and setting it up for them such that they don't need to use the CLI to accomplish the things they want to do. Possible, but tough.

As someone who switched from Windows to Linux many years ago, I still see every distribution to be 'leaking' the fact that it's a CLI-oriented ecosystem. They do that that especially when someone goes wrong. All are valid alternatives if you carefully consider your parents' needs and discover they're extremely limited.

But Windows would still be my first, default choice - because of a combination of its design and history, it's the cheapest commercial system that still lets you own your computing experience, and run professional software. Most Chromebooks have Android applications now. So it's more like a browser and a tablet on steroids. Many newer ones (even cheap) have Linux support. But of course as you said it's a game of trade offs. My father was using Windows years ago and because of constant service needs I set up Linux for him.

It was easier for me to service it remotely. It was better, but far from perfect. Later on I bought him a new computer that had a Windows license, so with upgrade to Windows 10 I thought that it would be ok. My father wanted Linux back after a month or so.

With newer distribution and newer computer it was much better than previously. Now it's pretty alright. However I still think of something a bit more like ChromeOS. Then it would be quite maintaince free. Not Gallium, but a full distribution with same update model as ChromeOS. This is a legitimate concern for me, but almost no part of my mother's life takes place online. She did have a mac, but lost that and there is no money for a new one.

She also has an android phone, so the privacy argument applies here as well and is still very valid. Eventually I will get her on a mac or ubuntu laptop or something like that. In terms of usability I have to tip my hat to Google. ChromeOS is very easy to use so far. Probably until chromebook vendors start adding all sorts of their own shitty tools and accounts like Huawei has done with their phones. Secure and inexpensive as long as you don't mind paying with your privacy. There are obvious alternatives to ChromeOS that are just as secure and just as inexpensive (especially if you have some old hardware just laying around, or else you can just buy refurbished hardware - just about anything made in the last 10 years will do, if not more than that) - and not any less useful than a Chromebook.

And they can be updated for as long as the hardware keeps going - they won't suddenly become 'unsupported' after a mere five years. I am not misunderstanding you. Your entire comment was centered around a perceived unfairness regarding price: most expensive version of their OS. they charge hundreds and hundreds of dollars for. To be clear here, I'm not defending Windows. I agree with you that what they do is not constructive for their users.

I'm merely pointing out it's ironic for Mac users sit on their throne and decry Windows' practices while paying significantly more for non-upgradeable Mac hardware when if you really gave a shit about security and privacy, you'd buy reasonably priced PC hardware and install a linux distro. Last I checked, App Store is absolutely filled with advertisements that I didn't request. Why is it so significantly worse that Microsoft happens to place theirs within Explorer? I think both are rather frustrating when you already paid for the software and/or hardware. Are you seriously trying to claim that Macs are overpriced by hundreds of dollars by trying to compare them against an ATX desktop? Or do you have some more reasonable comparison in mind of Apple and non-Apple products that actually compete in the same market segment, and where the Dell/Lenovo/HP/whatever is significantly more upgradable? And do you have any reasonable complaints about the security and privacy of a modern Mac with the T2 chip, or are you saying that anyone who cares at all about security should run Linux and spend 30% of their time wrangling with SELinux policies?

Not a parent commenter, but I have some examples of upgradeability/repairability. Dell XPS line of laptops has upgradeable storage and screwed-in batteries. 15' variant has upgradeable RAM and wireless card.

The keyboard is attached with screws instead of being permanently fixed to chassis and costs significantly less to order and replace yourself should you find a need for it. Similarly in the worst case scenario, there are replacement motherboards on eBay for $550 or sometimes less which you could again order and replace yourself (or upgrade your base CPU option with). And both 13' and 15' Dells have a fingerprint sensor which is as snappy as Touch ID without being bundled with a thin strip of touchscreen and a $200 price hike.

That's because these laptops are designed to be serviced on-site by repairmen who are not always so bright. So I imagine, similar HP offerings are as robust.

Dell's and HP's phone support and warranty support are super awful, though, so this may be a factor for you. For me, the difference between a drink spill costing $600 (and I do it myself) on a $2500 Dell versus $1500 (and I have to lose my files/get a new system) on a $1600 MBP (both true stories) is significant and I'm not rich enough to go for latter. And while they are at it rethink the 'OS as a service' strategy. I don't get the often cited comment on how Microsoft transformed itself under Nutella. They just take the steps they are forced to make because a lot of developers ran to different platforms. I think MS-software to be less attractive than any time before.

Be that windows, their office suite or their cloud landscape, which mainly excels at being slow. And stronger competitors are not the reason for decisions that are mostly not consumer oriented. It seems to me that no matter what happens two classes of users are going to be created: those that can pay for security and those that cannot.

Ultimately Apple's pricing means all their users are first class - hence security as a bread-and-butter feature on their platforms. In MSFT's case they're going to have low and high cost consumers, so they segment those users into the two relevant classes. None of this is good, for anybody involved. IT security is like vaccines, it only works if everybody's got them. This one of my biggest issues with the current 'ads let us have free software' defense of the advertising craze.

Ads let us segregate users based on what features they can afford not to have, and unfortunately for most laypeople it's security and privacy that's on the chopping block. Typed from my iPad Pro.

I'm not speaking hypothetically, but from experience. I have a 4 year old 200gbp Android phone running Pie, took 10 minutes. I also have an iPhone 8, this is an Ok phone but is a worse experience than the 4 year old Android phone. Despite the cost being much higher, the screen is worse quality, for instance. My partner has a 6 and it is remarkably slower than both.

To the point where you sometimes just want to give up on whatever you were trying to do while waiting for a map or Spotify to load. Maybe your experience is different to ours, but I'm only reporting what I see from using all 3. At the risk of wading into the iPhone vs Android battle.: iPhone 8 vs Nexus 6 from 2014, back when Google marketed that series as reasonable Dev devices, not necessarily flagships.

326 ppi vs 493 ppi 750 x 1334 pixels vs 1440 x 2560 pixels IPS LCD vs AMOLED Somewhere there is a tongue in cheek meme comparing a sister phone, the Nexus 4, from 2012 against a 2016(?) iPhone and it's quite interesting how many features the Android phones had and were mildly credited for that when copied to iPhone were /world changers!!1/ Granted, Android phone manufacturers have wised up and besides things like the Nokia 6.1 you can't really get a good mid-range Android phone any more. It's mostly clustered around either the humble Moto E or the Note 9 price points. I imagine that people who buy a Mac, want to have a Mac and it's their choice to pay. Maybe I am wrong. But people who buy a PC, have no choice but pay the Microsoft tax for the pre-installed Windows on it.

So, yes, it is reasonable to be angry when they put advertisement on the hardware that you paid on the OS that you paid together with the hardware. It is creepy, and belittling too.

Luckily IT professionals have yet the choice to install something else. Let's see how long it takes until we have no choice what software is allowed to run on devices that we buy. Sorry for the rant. Those cheap licenses are always used. They exploit the fact that these can be used to activate 10 copies of Windows. It's even worse than that though.

Economic Mess Leaves Kluchars Wanting Blood(big Screwup For Mac Os

One seller could keep track of this limit, but what happens is that a bunch of sellers source their keys from other similar sellers. So they don't even know how many times a key has been used. Last time I bought one of these 15€ keys for a friend, I had to write to the customer support over 10 times and shuffle through at least 6 different keys until one actually worked. On this note, because of the lack of virtualization support in Windows Home, in my small business we're encouraging everyone to get rid of Windows both at home and in the office. They've intentionally crippled Windows Home in a way which impacts us - we want to support devs doing work from home or on their own hardware. But when their OS can't run Docker, that gets harder. No way we're going to buy Pro licenses for people's home machines just because Microsoft decided to flip a bit in their build scripts and suck even more blood.

It is basically a virtual machine but note from the article: - 'One of the key enhancements we have made for Windows Sandbox is the ability to use a copy of the Windows 10 installed on your computer, instead of downloading a new VHD image as you would have to do with an ordinary virtual machine.' - 'we also allow Windows sandbox to use the same physical memory pages as the host for operating system binaries via a technology we refer to as “direct map”' - 'More recently, Microsoft has worked with our graphics ecosystem partners to integrate modern graphics virtualization capabilities directly into DirectX and WDDM, the driver model used by display drivers on Windows.'

(Note: it also works with OpenGL nowadays too) Maybe you can achieve your workflow needs from Home + free 3rd party virtualization software but if you don't see anything special I'd recommend reading the article more carefully. Not that I disagree with what you're saying per se, since it really is the simplest option, but as technologists we really need to get over this idea that people shouldn't be allowed to actually use a computer to do computer stuff. Mobile OSs got it pretty close to right: self-contained applications that are sandboxed by default. We need to embrace that concept in personal desktop computers, only without the stupid store (and that includes a package manager) and with complete disk portability of the applications. Basically, the way desktop computer OSs worked in the 90s, only with sandboxing by default.

'S Mode' (as opposed to Windows S which was briefly a separate SKU) in current builds of Windows 10 (Home/Pro/Enterprise) is now arbitrarily admin activatable/deactivatable. As your father's admin (assumedly in this example) you deactivate S Mode, install all the old apps, then reactivate S Mode.

Your father still gets access to the old apps, and can install new apps from the Windows Store 1 without your involvement as admin. You just have switch it out of S Mode if your father finds another old CD or floppy behind the couch to (re-)install. 1 I don't recall if S Mode currently allows sideloading non-Store but code-signed APPX/MSIX packages. I think it is supposed to? But I think my confusion is that it may differ (at least currently) between Windows Home in S Mode and Windows Enterprise in S Mode.

I - and I'm quite sure it's common practice - have been doing something similar using VMware, desktop integration and shared folders. It's nothing close to a native integration but it does the work - and I've been able to render 3D applications pretty well (not at a professional level of course). I've been wondering for a while what was preventing a virtual machine editor to step ahead in integration and let you run the hosts' applications in a safe, virtualized environment - I've had thoughts mixing a sort of overlayfs (no idea if that exists on Windows), RAM isolation, and chroot-like (again, no idea if that exists on Windows but there must be something similar, right?) Anyway, I'm really happy to see Microsoft stepping ahead. Most programs downloaded online are simply unsafe - sometimes just for privacy reasons! - and I often don't feel comfortable running them on my bare metal OS (not even talking of cracked software). When I first got back on using Windows after a long time on OSX then Linux (I'm not happy with recent Apple hardware, I'm missing a whole lot of entertainment/creation applications on Linux), I assumed Hyper-V would be the best option to have a reliable, built-in hypervisor on my system.

My goal was to setup 2 VMs: Linux CLI only do development, Windows 10 for untrusted software. It worked but the graphics integration of the windows VM sucked, and the Linux VM was extremely unreliable - I can't recall exactly what happened but crashes were common, especially in situations like sleep resume, drivers updates etc. I would like to finish this informative comment with a hope that this new 'sandbox' feature fixes most of the problems I used to experience with hyper-V.

Economic Mess Leaves Kluchars Wanting Blood(big Screwup For Mac Kids

I would also love to see the others - VMware and virtualbox - to implement such feature. Hopefully, this could bump the use of virtual machines at a personal level (agreeing on dman comment to, please!, make it a standard feature) and see better performances and painless integration in the future. I think enabling this for Windows Home users would potentially turn into a bit of a support nightmare. The requirements for Sandbox include turning virtualization on in BIOS, it also recommends 8GB of RAM and 4 CPU cores with hyperthreading.

Correct me if I'm wrong but most consumer laptops and desktops probably don't have a virtualization option in the BIOS and only a small percentage use 4 cores with hyperthreading. So it either won't work for a lot of Home users or even if it did run, performance wouldn't be great.