Abstract: A system, method and computer-readable medium for request routing based on content popularity information are provided. A client computer transmits a request for content from a content provider. The content provider utilizes executable code, such as translation request code, for facilitating request routing utilizing popularity information. The translation request code, may direct a client computing device to request further translation request code and/or translation information. Thereafter, the client issues a DNS query with the translated information including popularity information. The content delivery network service provider can then either resolve the DNS query with an IP address of a cache component or transmit another alternative resource identifier that will resolve to the content delivery network service provider. The process can repeat until a DNS nameserver resolves a DNS query from the client computing device.

Abstract: A first computer is selected for testing. Information sent from a second computer system to the first computer is intercepted. The information is modified to be noncompliant with a communication protocol, thereby producing noncompliant information. A determination is made whether the first computer device has failed to provide a particular response to receipt of the noncompliant information, and an operation is performed based at least in part on the determination.

Abstract: A posture assessment system is provided that uses an application programming interface (“API”), integrated into a computing device operating system, to assess the posture of the computing device. The API provides temporarily heightened access to the operating system, and executes code provided by the posture assessment system. The code may cause performance of various operations on the computing device, such as generating encoded representations of operating system components, performing computationally-expensive functions to verify execution of the code, and the like. The output of these operations can be sent to the posture assessment system for verification.

Abstract: Technologies are provided for secure sanitization of a storage device. A storage device can be configured to support an operational mode, into which the storage device is placed by default, and in which requests to cryptographically erase the storage device are rejected. The storage device can support a separate sanitization mode in which a request to cryptographically erase the storage device will be processed. Access to the sanitization mode can be restricted to trusted sources (such as a boot firmware of a computer connected to the storage device). The storage device can be configured to reject a command to place the storage device in the sanitization mode, unless the command is received during an initialization of the storage device. In at least some embodiments, the storage device can reject data access commands while it is in the sanitization mode.

Abstract: A processor configured to reduce the amount of time necessary for a mobile device to resume from a hibernation state is described. While in the hibernation state, power to all components of a mobile, except a motion sensor, may be powered off. The processor, upon receiving a signal from a wakeup sensor, causes the mobile device to initiate a transition from the hibernation mode to an awake mode. A validation sensor on the mobile device detects a user contact with the mobile device or user proximity with respect to the mobile device. Upon receiving a validation signal confirming validation of the transition from the hibernation state to the awake state, the processor resumes the transition to the awake mode. In the awake mode the mobile device may detect user input indicative of activating the mobile device. Upon receiving a signal indicating user input to activate the device, the processor may cause the device to become fully active, and ready for user interaction.

Abstract: A solid state storage card includes flash storage devices for storing user data and a serial peripheral interface (SPI) flash storage storing a first set of machine instructions. The solid state card also includes a plurality of processor cores coupled to the flash storage devices and SPI flash storage device. Each processor includes storage for storage of a second set of machine instructions configured to cause one of the processor cores to respond to access requests for the flash storage devices. Upon power-up, no storage in the solid state card contains any of the second set of machine instructions. When executed by one of the processor cores, the first set of machine instructions causes the processor core to initiate a download of the second set of instructions from a device external to the solid state card.

Abstract: Systems and processes are described for a message service with distributed key caching for server-side encryption. Message requests are received by message handlers of the message service that cache data encryption keys used to encrypt and decrypt messages that are stored to message containers in back end storage. A metadata service obtains the data encryption keys from a key management service, caches the keys locally, and sends the keys to the message handlers upon request, where the keys are cached, again. The key management service may generate the data encryption keys based on a master key (e.g., a client's master key). The message handlers may send both message data encrypted using the data encryption key and an encrypted copy of the data encryption key to be stored together in the data store.

Abstract: Data can be processed in parallel across a cluster of nodes using a parallel processing framework. Using Web services calls between components allows the number of nodes to be scaled as necessary, and allows developers to build applications on the framework using a Web services interface. A job scheduler works together with a queuing service to distribute jobs to nodes as the nodes have capacity, such that jobs can be performed in parallel as quickly as the nodes are able to process the jobs. Data can be loaded efficiently across the cluster, and levels of nodes can be determined dynamically to process queries and other requests on the system.

Abstract: The transmission of data on computer networks according to one or more policies is disclosed. A policy may specify, among other things, various parameters which are to be followed when transmitting initiating network traffic. Multiple network interfaces may be installed on a server to enable transmission of data from the single server according a number of discrete configuration settings implicated by the various policies. The multiple network interfaces may correspond to separate physical components, with each component configured independently to implement a feature of a policy. The multiple network interfaces may also correspond to a single physical component that exposes multiple network interfaces, both to the network and to the server on which it is installed.

Abstract: Described herein are systems, methods, and apparatus for determining audio context between an audio source and an audio sink and selecting signal profiles based at least in part on that audio context. The signal profiles may include noise cancellation which is configured to facilitate operation within the audio context. Audio context may include user-to-user and user-to-device communications.

Abstract: Systems, methods, and computer-readable media are disclosed for optimization of real-time probabilistic model evaluation for online advertising. In one embodiment, a system may receive a bid request for an ad slot, and may receive cached user information with a first ad and a first ad score, and a second ad and a second ad score. The system may generate a first estimated probability of conversion associated with presentation of the first ad to the user, and may generate a second estimated probability of conversion associated with presentation of the second ad to the user based at least in part on the context information, the second ad identifier, and the second ad score. The system may select either the first ad or the second ad for which to generate a bid amount based at least in part on the first estimated probability of conversion and the second estimated probability of conversion.

Abstract: Online service providers may operate a rendering service for generating and providing substitute web content information for rendering substitute web content instead of authentic web content. The rendering service may obtain web content information for the authentic web content in response to receiving a request for web content. The rendering service may use the web content information to generate the substitute web content information. The substitute web content information is useable by the computing device to generate substitute web content that includes one or more visual elements resembling resource objects of the authentic web content. The visual elements are rendered, as a result of processing by the computing device, as image content instead of interactive objects.

Abstract: Data replication groups may be used to store data in a distributed computing environment. A data replication group may include a set of nodes executing a consensus protocol to maintain data durably. In order to increase efficiency and performance of the data replication, a particular node of the data replication group may be assigned the role of master node. The role of master node may be lease in accordance with a consensus protocol. If the lease is not renewed within an interval of time election/selection of a new master node may be commenced.

Abstract: High-speed processing of packets to, and from, a virtualization environment can be provided while utilizing hardware-based segmentation offload and other such functionality. A hardware vendor such as a network interface card (NIC) manufacturer can enable the hardware to support open and proprietary stateless tunneling in conjunction with a protocol such as single root I/O virtualization (SR-IOV) in order to implement a virtualized overlay network. The hardware can utilize various rules, for example, that can be used by the NIC to perform certain actions, such as to encapsulate egress packets and decapsulate packets.

Abstract: A system, such as a system of a computing resource service provider, tracks infrastructure-level changes to execution environments caused by or otherwise associated with activity associated with executable code. In one embodiment, the activity is associated with development and/or testing of the executable code, and a monitoring service generates a log of changes to the associated infrastructure caused by the activity over a designated period of time. The log of changes is used to generate a template that in turn causes configuration of a target execution environment in accordance with the monitored changes.

Abstract: Data replication groups may be used to store data in a distributed computing environment. The data replication groups may include a set of nodes executing a consensus protocol to maintain data durably. During the execution of the set of nodes various nodes may become stale or otherwise obtain a state that is inconsistent with at least one other node of the data replication group. A catch up algorithm may be employed in which a set of teachers is initialized, the various node which may be stale may select a teacher from the set of teachers and perform learning operations. This process may be repeated until the state of the various nodes is current with at least one other node of the data replication group.

Abstract: A secure channel is generated using a third party to the channel. A first secure channel between two computer systems is established. The first secure channel is used to relay information about a third party. The third party provides security parameters for a second secure channel to enable the two computer systems to communicate over a second secure channel.

Abstract: A policy/resource decommissioning service determines whether a resource has been inactive for a period of time greater than at least one period of time threshold for decommissioning. If the resource has been inactive greater than a first period of time threshold, the service disables the resource such that requests to access the resource are denied. If the resource has been inactive for a period of time greater than a second threshold, longer than the first period of time threshold, the service archives the resource. The service deletes the resource if the inactivity period of the resource is greater than a third period of time threshold, where the third period of time threshold is longer than the first and the second period of time thresholds.

Abstract: Latching components for retaining rack component cases within server racks are described. In one example, a latching component is installed at an interior surface of a rack component case. The latching component includes a protrusion. The latching component is biased in a locked position in which the protrusion is outside the rack component case. The latching component is moveable from the locked position to an unlocked in which the protrusion is removed from outside the rack component case using an unlatching component.

Abstract: In implementations described herein, A/V recording and communication doorbell devices (“A/V doorbells”) and signaling devices may be powered from a common AC waveform. In some implementations, an A/V doorbell and its corresponding signaling device may be arranged in a circuit loop where a portion of an AC waveform is used to power the A/V doorbell and the other portions of the AC waveform is used to power the signaling device. For example, a positive phase of the AC waveform may be used to power one of the A/V doorbell or signaling device and a negative phase of the AC waveform may be used to power the other of the A/V doorbell or signaling device. In some cases, an energy harvester device may be used to slow charge a battery or supercapacitor from the circuit loop to power the A/V doorbell and/or signaling device.