Abstract: Systems, methods, and computer-readable media are disclosed for systems and methods for automated identification and mapping of objects in video content. Example methods may include determining a first set of frames in video content, determining, using one or more object recognition algorithms, a first object present in the first set of frames, determining that a first product corresponding to the first object is present in a product catalog comprising a set of product images, associating a first product identifier of the first product with a video identifier of the video content, and causing presentation of a set of product identifiers associated with the video identifier.

Abstract: In some cases, a method may include receiving electricity usage data from a re-ordering device and determining usage information for an appliance that is electrically connected to the re-ordering device based on the electricity usage data. The method may also include determining, based on the usage information and order history information for a customer, an estimated remaining quantity of an item that is associated with an appliance type of the appliance. The method further includes comparing the estimated remaining quantity of the item to a threshold associated with the item. In response to determining that the threshold associated with the item is satisfied, the method includes decrementing the estimated remaining quantity of the item. In response to determining that the threshold associated with the item is not satisfied, the method includes generating order data for automated re-ordering of the item for delivery to the customer.

Abstract: A technique for scheduling instructions includes obtaining a set of instructions that operate on memory objects, and determining the dependencies of the memory objects. The memory objects are then sorted into a sequence of memory objects based on the dependencies of the memory objects, and the set of instructions are scheduled into a sequence of instructions according to the sequence of memory objects. Sorting memory objects allows instructions that operate on the same memory object to be kept together. This helps minimize spilling conditions because intervening instructions that do not operate on the same memory object can be avoided.

Abstract: An anomalous period of operation of a database management system is detected by analyzing a time series of data points indicating the number of database queries pending processing by the system. Conditions associated with execution of the pending database queries are recorded and analyzed to identify conditions correlated with the anomalous period of operation. A recommendation for tuning the database is generated based on analysis of the conditions.

Abstract: Security policies can be dynamically updated in response to changes in endpoints associated with those policies. A user can indicate one or more regions or networks from which access is to be granted under a specific security policy. The user can subscribe to receive notifications upon a change relating to those endpoints, such as the addition or removal of one or more endpoints. When a change is detected, new policy information can be generated automatically and published for subscribed policies, which can then have the updates applied automatically or provided for manual review and application. Such a process enables access determinations to be made based upon up-to-date endpoint information.

Abstract: To take advantage of the architecture of a systolic array tailored to perform sparse matrix multiplications, a weight matrix can be converted into a set of constrained fine-grained sparse weight matrices. The conversion process may include receiving a request to perform a matrix multiplication operation with a weight matrix, and determining that the weight matrix satisfies a sparsity condition to convert the weight matrix into a set of constrained fine-grained sparse weight matrices. The weight matrix can then be converted into a set of constrained fine-grained sparse weight matrices. Computer instructions can then be generated for an integrated circuit device to perform the requested matrix multiplication operation as a set of sparse matrix multiplication operations using the set of constrained fine-grained sparse weight matrices.

Abstract: Network traffic between a source node and a destination node in a network fabric can be routed by distributing the network traffic from the source node to a set of one-hop neighbors of the source node. Each one-hop neighbor of the source node can be set as a first waypoint. A one-hop neighbor of the destination node mapped to the corresponding one-hop neighbor of the source node is identified and set as a second waypoint. The distributed traffic is then routed from the first waypoint to the second waypoint via a network fabric having network nodes connected according to harmonics.

Abstract: Systems and techniques for reading a structured identifier are provided. One technique involves obtaining a set of images of an item with a structured identifier. A region of interest (ROI) of the structured identifier within a first image of the set of images is determined. A second image comprising the ROI of the structured identifier is generated. An enhanced version of the second image is generated, based on processing the second image with at least one image restoration model. The structured identifier is decoded from the enhanced version of the second image to obtain data corresponding to the structured identifier.

Abstract: Techniques are described for a domain-specific language and associated framework for implementing analyses of security, operational, or functional properties involving computing resources. The specification language enables users to readily define the semantics of a set of cross-resource relations of interest using a human-readable language. For example, the language enables users to express properties over computing resources based on a user-defined set of cross-resource relations. The specification language is human-readable, allowing users to easily add new cross-resource relations or to modify existing relations and properties, thereby enabling users to readily modify existing analyses or to create new ones entirely.

Abstract: A biometric identification system acquires a multimodal image. The system is trained to determine three embeddings: a first embedding associated with features present in a first modality, an intersection embedding associated with features present in both the first and a second modality, and an XOR embedding associated with features that are not shared between the first modality and the second modality. Once trained, the system may process a multimodal query image to determine query embedding data. Additional information, such as minutiae depicted in the multimodal query image may also be determined. The query embedding data, and in some implementations the additional information, may be compared with enrolled embedding data associated with a previously enrolled user. If the comparison exceeds a threshold value, an identity may be asserted.

Abstract: Techniques are described for providing a web cookie firewall application capable of monitoring and controlling the use of web cookies at computing devices. The web cookie firewall application uses web cookie security policies to selectively allow or prohibit the storage or use of individual web cookies or types of web cookies. For example, web cookie security permissions can be defined by such policies to permit or deny the storage or use of web cookies associated with certain website domains, to permit or deny the storage or use of defined types of cookies, or to control access to web cookies based on other attributes. The web cookie firewall application can be implemented as a standalone application, as a web browser plugin or extension, or as any other type of software application that it is capable of monitoring and controlling the use web cookies on a computing device.

Abstract: Cameras having storage fixtures within their fields of view are programmed to capture images and process clips of the images to generate sets of features representing product spaces and actors depicted within such images, and to classify the clips as depicting or not depicting a shopping event. Where consecutive clips are determined to depict a shopping event, features of such clips are combined into a sequence and transferred, along with classifications of the clips and a start time and end time of the shopping event, to a multi-camera system. A shopping hypothesis is generated based on such sequences of features received from cameras, along with information regarding items detected within the hands of such actors, to determine a summary of shopping activity by an actor, and to update a record of items associated with the actor accordingly.

Abstract: Described implementations obtain a proof of valid attestation data. The attestation data may include configuration data of a host computing system. A prover service may receive the attestation data. The prover service may generate a proof to prove that the attestation data includes valid configuration data of the host computer system, without revealing sensitive or private information of the host computing system. The proof may be a zero-knowledge proof.

Abstract: A plurality of events is extracted from a set of sources, including an event representing a transfer of a first data set from one data storage stage of a data pipeline to another stage to form a second data set, and another event representing a completion of a computation performed on the second data set. Based on analysis of the plurality of events, a graph is stored; the nodes of the graph represent data sets at respective stages of the data pipeline, and edges represent the events. In response to a request for lineage information pertaining to a particular data set at a particular stage of the pipeline, an indication of a sequence of events represented in the graph is provided, including a particular event which led to the presence of the particular data set at the particular stage.

Abstract: A system comprises a plurality of computing devices. Requests received by the system are distributed at random among the computing devices. A computing device, in response to receiving a request, stores a record of utilization of the computing device by a source of the request. The computing device determines to throttle requests from the source based, at least in part, on the utilization of the computing device by the source within the time period.

Abstract: Results of applying a set of voting rules to a target corpus of documents are used to obtain a set of derived probabilistic labels indicating the probabilities of the presence of a particular attribute within the documents' constituent objects. A machine learning model is trained to identify a candidate portion of a document from which a value of the attribute is to be extracted. The training data for the model includes learned representations obtained from paths of constituent objects, and the corresponding derived labels. A proposed value for the attribute, obtained based on an assigned attribute value presence probability score for an individual constituent object from a selected candidate portion of a document, is provided.

Abstract: A connection-based service impersonates request-based security for requests from clients that do not include credentials for the requests (e.g., data plane requests made via a connection-oriented security). A connection between a client and a connection-based service is established based on connection credentials that are based on security credentials from a request-based security service. The credentials are sent by a security component of the service to a local agent of the remote security service to be authenticated by the security service. An impersonation token is returned by the security service and cached by the local agent. Requests from the client to perform operations do not include credentials. For each request, the service passes an identifier for the client and the operation to a local authorization component that calls the agent for authorization of the requested operation. The agent uses the impersonation token to obtain authorization for the requested operation.

Abstract: A virtual network verification service for provider networks that leverages a declarative logic programming language to allow clients to pose queries about their virtual networks as constraint problems; the queries may be resolved using a constraint solver engine. Semantics and logic for networking primitives of virtual networks in the provider network environment may be encoded as a set of rules according to the logic programming language; networking security standards and/or client-defined rules may also be encoded in the rules. A description of a virtual network may be obtained and encoded. A constraint problem expressed by a query may then be resolved for the encoded description according to the encoded rules using the constraint solver engine; the results may be provided to the client.