Abstract: Compounds that inhibit KRas G12D. In particular, compounds that inhibit the activity of KRas G12D, pharmaceutical compositions comprising the compounds and methods of use therefor, and in particular, methods of treating cancer. The compounds have a general structure represented by Formula (I): or a pharmaceutically acceptable salt thereof.

Abstract: Active Directory (AD) configuration file management described herein provides technical solutions for technical problems facing management of Linux/Unix and other Unix-like open source operating systems that use configuration files to manage systems, resources, and settings. This configuration file management may use a network-internal AD Group Policy Object (GPO) to manage these configuration files, where the configuration file management may convert the configuration files into GPOs for deployment via the AD. The use of GPO-based configuration files via AD provides the ability to manage external Linux/Unix systems. When the configuration file management agent detects a change, the configuration file is replaced with a known good configuration file based on the criterion GPO or criterion configuration file. This provides persistence of the configuration GPO and the corresponding Linux/Unix system configuration, such as to implement and enforce information security.

Abstract: Security of a protected computer that is accessible via a public network is enhanced by eliminating or reducing open network ports on the protected computer. To reduce open network ports, the protected computer initiates a control connection to an enterprise controller. A request for service from a client device is made to the enterprise controller. If appropriate, the request is then forwarded by the enterprise controller to the protected computer over the control connection. If the request is accepted by the protected computer, the protected computer opens an additional connection to the enterprise controller to provide for streaming of input and output between the task performed on the protected computer and the enterprise controller. This input and output is forwarded by the enterprise controller to the client device and/or protected computer.

Abstract: An Active Directory Bridge (AD Bridge) provides the ability to register, represent, and manage external network resources on an internal network. The external network resources may include cloud resources, such as Internet of Things (IoT) devices, Software-as-a-Service applications (SaaS apps), cloud-hosted virtual machines (VMs), cloud-hosted computers, and other networked cloud resources. The external network resources may be unable to communicate directly with or join the internal network due to various network connection obstacles. The AD Bridge includes an AD Bridge Gateway, an AD Bridge Gatekeeper, and an AD Bridge Agent. The AD Bridge Agent resides on each external network resource, and provides the connection of the host external network resource through the AD Bridge Gatekeeper and through the AD Bridge Gateway to the internal network. The AD Bridge provides the ability to register, represent, and manage these external network resources on an internal network.

Abstract: An Active Directory Bridge (AD Bridge) provides the ability to register, represent, and manage external network resources on an internal network using Group Policy Objects (GPOs). The AD bridge provides the ability to create GPOs in native Active Directory, where the settings are managed within the GPO and can be associated with Active Directory Organizational Units. The AD bridge provides the ability to manage, monitor, and enforce these settings for external cloud resources by Group Policy. The GPOs may be read from the Domain Controller (e.g., Sysvol) by the AD bridge, then translated and delivered to the cloud resource being managed. As GPOs are updated and deployed, the settings are detected and delivered to the cloud resource. When the cloud resource settings are changed outside of the GPO, the AD bridge monitors and reacts to any changes, making Group Policy the enforcement mechanism for the cloud resources.

Abstract: An apparatus includes at least one processor executing a method for managing memory among a plurality of concurrently-running virtual machines, and a non-transitory memory device that stores a set of computer readable instructions for implementing and executing said memory management method. A memory optimization mechanism can reduce a memory usage of a virtual machine at a cost of increasing a central processing unit (CPU) usage. Information on a memory usage and a CPU usage of each virtual machine is periodically collected. When a first virtual machine exhibits high memory use, at least one second virtual machine with an extra CPU capacity is identified. A memory optimization mechanism is applied to the second virtual machine to reduce memory used by the second virtual machine, thereby providing a portion of freed memory that is then allocated to the first virtual machine.

Abstract: A modular bike lock includes a locking mechanism and a securement mechanism coupled with the locking mechanism. The securement mechanism wraps around at least a portion of a bicycle and includes a locking end configured to engage with the locking mechanism to lock the bike lock. The bike lock includes a wireless communications interface and a processor that receives, using the interface, a selection from a mobile device that indicates that the mobile device has selected to use the bike lock and communicates, using the interface, a unique identifier associated with the bike lock to the mobile device, the unique identifier enabling the mobile device to unlock the bike lock. The bike lock locks automatically in response to receiving the locking end within a portion of the locking mechanism without receiving an additional input from the mobile device. The bike lock is mountable on a support structure.

Abstract: A small, heavy duty, transportable building having pre-manufactured panel assemblies made out of magnesium oxide for the floor, wall and roof that are quickly fastened together, on site, using common metal screws. All building materials are inorganic for extreme mold and mildew resistance. Furthermore, the building panels are configured and fastened together for inherent insulative fire and flood resistant properties. Commercial metal strut forms an economic protective perimeter around the magnesium oxide surface panels, and offer a fastening means to adjoining panels. The uses of the building (bunker, enclosure, shelter, shed, little-house, etc. . . . ) are myriad and not intended to be limited in usefulness. In addition, the building configurations and square footage options are limitless, single wide building ways, storied if desired. The design also allows manufacturing of the panel assemblies with common, hand tools, power tools, and welding equipment. No crane is needed for building erection.

Abstract: A system for enabling an endpoint residing in an external network to perform resource operations on an internal resource, the system including a directory service managing authentication and authorization operations for the internal resource, a gatekeeper device residing in the external network, and a gateway device residing in an internal network. The gatekeeper device is configured to receive a resource operation request from the endpoint, the resource operation request is associated with a user and transmit the resource operation request to the gateway device. The gateway device is configured to receive the resource operation request from the gatekeeper device, authenticate with the directory service as the user, using credentials of the user, authorize the resource operation request with the directory service, and initiate the resource operation request with the internal resource.

Abstract: A system for enabling an endpoint residing in an external network to perform resource operations on an internal resource, the system including a directory service managing authentication and authorization operations for the internal resource, a gatekeeper device residing in the external network, and a gateway device residing in an internal network. The gatekeeper device is configured to receive a resource operation request from the endpoint, the resource operation request is associated with a user and transmit the resource operation request to the gateway device. The gateway device is configured to receive the resource operation request from the gatekeeper device, authenticate with the directory service as the user, using credentials of the user, authorize the resource operation request with the directory service, and initiate the resource operation request with the internal resource.

Abstract: A modular bike lock includes a locking mechanism and a securement mechanism coupled with the locking mechanism. The securement mechanism wraps around at least a portion of a bicycle and includes a locking end configured to engage with the locking mechanism to lock the bike lock. The bike lock includes a wireless communications interface and a processor that receives, using the interface, a selection from a mobile device that indicates that the mobile device has selected to use the bike lock and communicates, using the interface, a unique identifier associated with the bike lock to the mobile device, the unique identifier enabling the mobile device to unlock the bike lock. The bike lock locks automatically in response to receiving the locking end within a portion of the locking mechanism without receiving an additional input from the mobile device. The bike lock is mountable on a support structure.

Abstract: A fare device having modular architecture includes a display module that controls inputs and outputs of a display of the device, a fare media reader module that sends and receives data from a fare media and processes fare transactions conducted using the fare media as payment, and an external communications module that communicates external data with one or more remote devices. A controller controls operation of the modules. A carrier board includes one or more mountings with which to communicatively couple each respective module with the at least one controller and a common communications interface coupled between the one or more mountings and the at least one controller such that each of the modules is communicatively coupled with the at least one controller. The interface includes a single communications protocol and each module has a translation element that translates a native communications protocol of a corresponding module to protocol.

Abstract: A method (and system) for managing memory among virtual machines in a system having a plurality of virtual machines, includes providing at least one memory optimization mechanism which can reduce memory usage of a virtual machine at a cost of increasing CPU usage. Information on memory usage and CPU usage of each virtual machine is periodically collected. In response to detecting that a first virtual machine exhibits a high level of memory use, at least one second virtual machine with extra CPU capacity is identified. The at least one memory optimization mechanism is applied to the at least one second virtual machine, to reduce memory used by the at least one second virtual machine, thereby providing a portion of freed memory. The portion of freed memory is then allocated to the first virtual machine.

Abstract: A fare device having modular architecture includes a display module that controls inputs and outputs of a display of the device, a fare media reader module that sends and receives data from a fare media and processes fare transactions conducted using the fare media as payment, and an external communications module that communicates external data with one or more remote devices. A controller controls operation of the modules. A carrier board includes one or more mountings with which to communicatively couple each respective module with the at least one controller and a common communications interface coupled between the one or more mountings and the at least one controller such that each of the modules is communicatively coupled with the at least one controller. The interface includes a single communications protocol and each module has a translation element that translates a native communications protocol of a corresponding module to protocol.

Abstract: An apparatus includes at least one processor executing a method for managing memory among a plurality of concurrently-running virtual machines, and a non-transitory memory device that stores a set of computer readable instructions for implementing and executing said memory management method. A memory optimization mechanism can reduce a memory usage of a virtual machine at a cost of increasing a central processing unit (CPU) usage. Information on a memory usage and a CPU usage of each virtual machine is periodically collected. When a first virtual machine exhibits high memory use, at least one second virtual machine with an extra CPU capacity is identified. A memory optimization mechanism is applied to the second virtual machine to reduce memory used by the second virtual machine, thereby providing a portion of freed memory that is then allocated to the first virtual machine.

Abstract: A method (and system) for managing memory among virtual machines in a system having a plurality of virtual machines, includes providing at least one memory optimization mechanism which can reduce memory usage of a virtual machine at a cost of increasing CPU usage. Information on memory usage and CPU usage of each virtual machine is periodically collected. In response to detecting that a first virtual machine exhibits a high level of memory use, at least one second virtual machine with extra CPU capacity is identified. The at least one memory optimization mechanism is applied to the at least one second virtual machine, to reduce memory used by the at least one second virtual machine, thereby providing a portion of freed memory. The portion of freed memory is then allocated to the first virtual machine.

Abstract: A method for executing native code in a distributed Java Virtual Machine (JVM) is disclosed herein. The method may include receiving, in a first thread executing in a remote execution container, a first native code-generated call, such as a Java Native Interface (JNI) call, to a second thread, the first call including a first array write request. The first call may be stored in an instruction cache and bundled with a second native code-generated call and sent to the second thread. The calls are unbundled and executed in the second thread. An opaque handle to an array returned by the second call is bundled with corresponding array data and returned to the first thread. The array data of the bundle is stored in a data cache and retrieved in response to requests for the array data addressed to the second thread. A corresponding computer program product is also disclosed.

Abstract: A method for providing control of Java resource runtime usage may include establishing communication with one or more Java virtual machines (JVMs) forming a hive via a hive communication channel where the hive comprises a plurality of JVMs configured to enable utilization of at least one shared resource, receiving, via the hive communication channel, environmental information indicative of hive activity relative to the at least one shared resource from at least one of the one or more JVMs, and adapting, via processing circuitry, operations associated with use of the at least one shared resource based on the environmental information.