Abstract: An authorization system includes an authorization node, a storage device and a reference monitor. The authorization node executes an authorization policy, and the storage device stores an authorization state associated with the authorization policy. Requests for access to a secured resource are received at the reference monitor, and the reference monitor queries the authorization node, which uses the authorization policy to determine whether to grant access to the secured resource based on a rule having at least one access condition. The rule, executed as part of the authorization policy on the authorization node, is configured to update all the entries in the authorization state for which an update condition is met.

Abstract: A method for rejecting an unintentional palm touch is disclosed. In at least some embodiments, a touch is detected by a touch-sensitive surface associated with a display. Characteristics of the touch may be used to generate a set of parameters related to the touch. In an embodiment, firmware is used to determine a reliability value for the touch. The reliability value and the location of the touch is provided to a software module. The software module uses the reliability value and an activity context to determine a confidence level of the touch. In an embodiment, the confidence level may include an evaluation of changes in the reliability value over time. If the confidence level for the touch is too low, it may be rejected.

Abstract: Identification and Surfacing of related pieces of content, such as user-provided content, enables users of a merchant website to more easily find related items. A server associated with the website may receive, from a user, an image that illustrates items offered for sale on the site. The site may then enable this and other users to annotate the image by, for example, associating the illustrated items with hyperlinks to respective item detail pages. When a user views this page, the site may surface the most related other user-uploaded images that also illustrate items. To determine the most related images, the website may analyze, for each of the other images, the similarity between the items illustrated in the image and the items illustrated in the currently-displayed image. The website may also analyze the tags applied to the items and the images themselves, as well as multiple other types of criteria.

Abstract: A handheld electronic book device is configured with dual displays. The device includes a first display for presenting visible representations of textual or graphic content related to the electronic book. The device also includes a second display positioned alongside the first display. The second display includes a plurality of graphic elements that correspond to portions of the first display. Also, the second display is responsive to user input to one of the graphic elements to perform an action on the content that is shown in the portion of the first display that corresponds to the one element.

Abstract: The techniques disclosed herein allow a user to synchronize the playing and displaying of digital content on an electronic device. The device may render a first portion of digital content so it may be displayed. The device may also play a segment of the digital content as audio using text to speech software. The device may also render a second portion of digital content for display depending on whether the position of the last word read is greater than the last position in the first portion of digital content.

Abstract: The present disclosure provides a method of statistical application in an OLTP environment to reduce the intensive computational load of invoking SQL statements for statistical calculations. The method introduces a time element into statistical records, and use the time element to determine the time status of previously computed statistical records. Upon receiving a query for a statistical record, the system first searches for an existing copy of the statistical record, and checks the time status of the statistical record if found. The system sends the statistical record to the inquirer if the record exists and is unexpired, and invokes an SQL statement to compute the statistical record only if the record does not exist or has expired. The statistical records may be placed in statistical table in a database and/or a cache of an application server. The disclosed strategy may also increase attack resistance of the system.

Abstract: Phishing detection, prevention, and notification is described. In an embodiment, a messaging application facilitates communication via a messaging user interface, and receives a communication, such as an email message, from a domain. A phishing detection module detects a phishing attack in the communication by determining that the domain is similar to a known phishing domain, or by detecting suspicious network properties of the domain. In another embodiment, a Web browsing application receives content, such as data for a Web page, from a network-based resource, such as a Web site or domain. The Web browsing application initiates a display of the content, and a phishing detection module detects a phishing attack in the content by determining that a domain of the network-based resource is similar to a known phishing domain, or that an address of the network-based resource from which the content is received has suspicious network properties.

Abstract: Described herein are containers having a bottom portion, a bottom sifter, a dial sifter, and a removable cover having pins. A bottom sifter and a dial sifter are rotatably engaged, and both have at least one sifting hole for sifting materials with a powder-like consistency. Either the surface of the bottom sifter facing the dial sifter or the surface of the dial sifter facing the bottom sifter may have at least one raised portion, and the remaining surface may have at least one recessed depression. The dial sifter may have one or more cavities to engage the pins in the cover, thereby rotating the dial with the rotation of the cover. The dial sifter may be a bottom fill sifter.

Abstract: Methods and apparatus for evaluating decision trees on a GPU are described. In an embodiment, the structure of a decision tree is converted into a 2D “tree” array with each row representing a node in the tree. Each row comprises details of any child nodes and the parameters which are required to perform the binary test at the node. A pixel shader can then be used to evaluate the decision tree in parallel for each input data point in an input array by navigating through rows in the 2D tree array. For each row, data is read from the input array dependent upon the parameters in the row and the shader moves to another row dependent upon the result of the binary test. On reaching a row which represents a leaf node, the pixel shader outputs evaluation results, such as a leaf node index or a probability distribution over classes.

Abstract: An approach is described for maintaining multiple presence objects associated with a single entity. The different presence objects correspond to different respective aspects of the entity's presence. Each presence object includes subscriber information and permission information associated therewith. The subscriber information identifies the subscribers that subscribe to receive notifications for a particular presence object. The permission information identifies the users who are entitled to receive notifications for the particular presence object. By virtue of the use of multiple objects, the entity can control access to its presence information with a high degree of granularity.

Abstract: Techniques described enable an entity, such as a company employing an e-commerce website, to leverage user-provided content, such as customer reviews of an item, to better customers' shopping experiences. To do so, customer reviews pertaining to an item may be examined to determine if the reviews contain links to other items. These links within the customer reviews may then be aggregated and sorted (e.g., ranked) according to certain criteria. The links may be sorted based on a number of times that the links are used in the reviews and/or on ratings of the items associated with the links. One or more of the links may then be displayed on the website. For instance, these links may appear on an item review page adjacent the customer reviews. Customers navigating to the item review page may then peruse the customer reviews as well as the displayed links that customers have used within the reviews.

Abstract: A system for multi-modal mapping of images is described. Embodiments are described where the image mapping system is used for visualizing high dynamic range images such as medical images, satellite images, high dynamic range photographs and the like and also for compressing such images. In examples, high bit-depth images are tone-mapped for display on equipment of lower bit-depth without loss of detail. In embodiments, the image mapping system computes statistics describing an input image and fits a multi-modal model to those statistics efficiently. In embodiments, the multi-modal model is a Gaussian mixture model and a plurality of sigmoid functions corresponding to the multi-modal model are obtained. In an embodiment the sigmoid functions are added to form a tone-mapping function which is used to transform a high bit-depth image such as 16 or 12 bits per pixel to a low bit-depth image such as 8 bits per pixel.

Abstract: Crowd source editing of digital images to reduce errors in a digital images includes receiving a proposed modification to a content portion of a digital image. A determination is made as the whether the occurrence of the proposed modification to the content portions meets a modification threshold. Accordingly, the proposed modification to the content portion of the digital image is adopted when the occurrence of the specific modification meets the modification threshold.

Abstract: A system and method for preventing fraud in an online transaction is shown. Requests for financial transactions between on-line account holders are detected as well as relationships between the accounts. A fraud value related to a likelihood that a fraud is occurring in the transactions is determined based on the relationship. An indication of a likelihood of fraud is provided if the fraud value exceeds a predetermined amount. Thus the transaction is terminated and the appropriate parties are automatically notified.

Abstract: Configuration of an application module to utilize branded content is described. In an implementation, a method includes identifying one of a plurality of business relationships which correspond to a request sent by a client over a network. A configuration file is the formed for communication to the client and for configuration of an application module of the client to utilize branded content which corresponds to the identified business relationship.

Abstract: Systems and methods to determine relevant keywords from a user's search query sessions are disclosed. The described method includes identifying search session logs of a user, segmenting the search session logs into one or more search sessions. After the segmentation, the search sessions are analyzed to compose a list of semantically relevant keyword sets including at least a first keyword set and a second keyword set. The described method further includes determining a semantic relevance between the first and second keyword sets according to the frequency at which the first and second keyword sets are reported in the query results and displaying one or more semantically high relevant keyword sets after being filtered by a threshold.

Abstract: Disclosed herein are methods for protecting user information on a client device that may have a plurality of users. A user interface with a public machine designation portion is presented to a user prior to the start of the authentication process. The public machine designation removes web service account descriptions and any user specific information stored on the client device. Also, the client device is prevented from storing any new user specific information that is provided to the client device. The public machine designation is a persistent feature that may only be disabled by an affirmative action from the user.

Abstract: An architecture and techniques for implementing a unified and extensible meta-testing framework within a distributed environment. This framework allows entities within the distributed environment to run tests written in different testing frameworks in a unified way. In addition, this disclosure describes techniques for allowing an entity within the distributed environment to test itself, both from its own perspective as well as from the perspective of other entities within the distributed environment.

Abstract: The claimed subject matter provides systems and/or methods that facilitate utilizing a shared secret to obscure a password within a sequence of characters. The sequence of characters can include the password as well as noise. The shared secret can leverage utilizing a set of known images that a user can uniquely distinguish from random images. By employing the imaged based shared secret, the user can login to a server from an untrusted machine suspected to be infected with spyware such as a keylogger that tracks user input.

Abstract: Systems and methods for implementing diverse topic phrase extraction are disclosed. According to one implementation, multiple word candidate phrases are extracted from a corpus and weighed. One or more documents are re-weighed to identify less obvious candidate topics using latent semantic analysis (LSA). Phrase diversification is then used to remove redundancy and select informative and distinct topic phrases.