Abstract: Methods and apparatus are disclosed for securing executable code for execution with a processor using a trusted platform module (TPM). In one example of the disclosed technology, a method of decrypting executable code for execution includes measuring values stored in a CPU boot ROM and measuring second values for executable code stored in non-volatile memory, storing the resulting measurement value in a TPM platform configuration register. The PCR value is used to unseal a key stored in non-volatile memory of the TPM, which key is used to decrypt executable code for execution. Security can be further enhanced by destroying the values stored in the PCR by performing additional measurement operations with the TPM PCR used to generate the measurement value.

Abstract: Embodiments herein describe a package management system that uses two operation modes of RFID readers (i.e., an inventory mode and a search mode) to provide feedback to an associate when a package has been mis-sorted. In one embodiment, the RFID readers are attached to one or more RFID antennas which each are disposed overhead a respective container or storage location in a warehouse. For example, each of the antennas may have a beam pattern or read region that covers the container. Using the RFID antennas, the RFID reader can query the RFID tags in the container to identify the packages stored in the container. In one embodiment, the RFID reader switches to the search mode after a new package is identified. Using the search mode, the RFID reader can quickly identify when the package is stored in the container and provide prompt feedback to the associate.

Abstract: Techniques for implementing a “volatile” user ID are described. A system receives first input audio data and determines first speech processing results therefrom. The system also determines a first user that spoke an utterance represented in the first input audio data. The system establishes a multi-turn dialog session with a first content source and receives first output data from the first content source based on the first speech processing results and the first user. The system causes a device to present first output content associated with the first output data. The system then receives second input audio data and determines second speech processing results therefrom. The system also determines the second input audio data corresponds to the same multi-turn dialog session. The system determines a second user that spoke an utterance represented in the second input audio data and receives second output data from the first content source based on the second speech processing results and the second user.

Abstract: Techniques are provided for providing assistance to users in locating and accessing points of interest associated with particular time positions in the media items using the techniques described herein. For instance, an electronic device outputting a media item may select one or more metadata items based on a current output position in the media item. The electronic device may then generate and output a user interface including a progress bar that includes indicators representing the selected metadata items and output the user interface to a display of the electronic device.

Abstract: Implementations detailed herein include description of a computer-implemented method. In an implementation, the computer-implemented method including training a machine learning model using domain mapped third party data; and performing inference using the machine learning model by: receiving scoring data, domain mapping the received scoring data using a domain mapper that was used to generate the domain mapped third party data, and applying the machine learning model to the domain mapped received scoring data to generate an output result.

Abstract: A browsing process is directed to the generation and management of a browse session at a network computing provider. A client computing device transmits secure requests for network resources to a network computing provider. The network computing provider comprises one or more virtual network computing providers for processing secure communications between a client computing device and a content source. A virtual network computing provider handles the secure communications, decrypting and processing the communications while preventing third parties from accessing the unencrypted communication data. The virtual network computing provider may determine a browse configuration identifying processing actions to perform on the request content.

Abstract: The allocation of resources, such as for data storage, can be performed based at least in part upon predicted values for utilization and growth, among other such values. Various features can be used to predict the initial utilization and growth rate for a data volume, and these predicted values can be used to determine where to place the volumes. The features can include, for example, customer usage history, volume type, volume purpose, type of attached virtual machine, and the like. The ability to predict actual usage can enable capacity to be allocated based on an as-needed basis instead of providing large blocks of allocated capacity that would go largely unused. Similar predictions can be used to determine whether and where to migrate data volumes so as to maintain sufficient capacity across a group of resources.

Abstract: Techniques described herein include systems and methods for enhancing content consumption experiences by synchronizing one or more devices to add immersive environmental effects to an area. In embodiments, a database of device capabilities and device identifiers for a plurality of devices associated with a location may be maintained. Information may be obtained that identifies that a particular portion of content has been consumed. Metadata associated with the particular portion of content may be identified based at least in part on the information and the database. The metadata may comprise definitions for providing environmental stimuli to the location where the environmental stimuli may correspond to the particular portion of content. Environmental stimuli may be presented within the location by invoking application programming interface calls for a portion of devices of the plurality of devices based on identifying the metadata and the device identifiers for the portion of devices.

Abstract: A method and apparatus for controlling access to documents retained by a document management and collaboration system is disclosed. The document management and collaboration system may generate one or more suggested privileges associated with one or more users. An access control policy may specify whether system-generated user privileges may be enforced. If they are enforced, access to one or more document may be made subject to the generated privileges.

Abstract: Various mechanisms for adjusting pitches of propeller blades are described. For example, the pitch adjustment mechanism may include a propeller hub enclosing a geared mechanism that cooperates with a compound gearbox having first and second planetary stages to adjust pitches of propeller blades. Alternatively, the pitch adjustment mechanism may include a propeller hub enclosing a pitch adjustment assembly that utilizes tension cables and torsion springs, or rack-and-pinion structures, to adjust pitches of propeller blades. Using any of the various mechanisms, the pitches of propeller blades may be rotated at least 90 degrees, and up to and exceeding 360 degrees, in order to effect thrust reversals and/or adjust thrust profiles.

Abstract: Technology for managing state changes of modeled objects in a three dimensional (3D) virtual environment is provided. In one example, a method may include calculating changes to modeled objects in a virtual environment. The modeled objects and the modifications may be stored in a server data store. Modeled objects in the server data store for which the modifications have been received may be flagged and queued for replication of the modifications to the modeled objects from the server data store to a non-transactional data store. The modifications may be replicated by copying modeled object state data from the server data store to the non-transactional data store.

Abstract: A media universe system may leverage network-based computation resources and services, for example a streaming service, and a digital asset repository or repository service to dynamically provide active content in digital media of the media universe streamed to the client. An asset repository may contain digital assets including 3D models of objects and characters used in the digital media. Client interactions with digital media via a client interface may be mapped to particular objects, characters, locations, etc. within the media universe according to the digital assets from the repository. Most or all content within a rendered scene streamed to a client device may be rendered as active content. Clients may interact with the active content to, for example, obtain contextual information about the corresponding objects, manipulate and explore objects, discover hidden content, reveal hidden storylines, order merchandise (e.g., via 3D printing) related to the content, etc.

Abstract: A system performs cryptographic operations utilizing information usable to verify validity of plaintext. To prevent providing information about a plaintext by providing the information usable to verify the validity of the plaintext, the system provides the information usable to verify validity of the plaintext to an entity on a condition that the entity is authorized to access the plaintext. The information usable to verify validity of the plaintext may be persisted in ciphertext along with the plaintext to enable the plaintext to be verified when decrypted.

Abstract: Techniques for providing segments of media items associated with events to users are described herein. Computing device(s) may receive from a user a request for a segment of a media item associated with an event. The computing device(s) may also receive data presented as evidence of acquisition of a pass for the event, verify that the data is associated with a valid pass that has been purchased for the event, and, based on the verifying, provide the segment of the media item to the user. Additionally or instead, the request may include a time length for the segment and/or a beginning position of the segment, and the computing device(s) may determine, based on a policy and one the time length and/or beginning position, a part of the requested segment of the media item to provide. The computing device(s) may then provide the determined part of the segment to the user.

Abstract: A technology is described for embedding hypermedia resources in data interchange format documents. An example method may include receiving an API (Application Program Interface) request for a hypermedia resource at an API server. The API request may be associated with an API request pattern, where the API request pattern includes API requests for hypermedia resources. A data interchange format document may be generated to include the hypermedia resource requested and at least one of the hypermedia resources associated with the API request pattern may be embedded in the data interchange format document. The data interchange format document may be provided in response to the API request.

Abstract: A service provider system may implement an enterprise catalog service that manages software products and portfolios of software products on behalf of service provider customer organizations. Through an administrator interface of the service, a customer organization administrator may create constraints on the use of the software products, and each constraint may include one or more rules about how the products can be launched. These may include environmental constraints (specifying a region in which a product launches), restrictions on input parameter values (including the types of resource instances on which a product can be launched), quotas (controlling the number of product installations), or billing constraints. Constraints may be applied on a user-to-product arc or on a portfolio-to-product arc. Constraints may be stored as objects, and reference to those objects may be added to product or portfolio objects.

Abstract: A method and apparatus for dynamic rotation of streaming protocols are disclosed. In the method and apparatus, a first portion of content is streamed to a client device in accordance with a first content delivery protocol. Further, information indicating client device attributes, network conditions or usage conditions is received. A plurality of content delivery protocols including the first content delivery protocol are evaluated based at least in part on the received information to identify a content delivery protocol for streaming the a second portion of the content.

Abstract: Software is deployed to, and executed at, one or more computing devices in a computing system based on current conditions in the computing system and the capabilities of the different computing devices to handle the software. A request to run a software process calls a manager which determines an optimal place to run the software process. The manager can consider factors such as response time, user demands, bandwidth, processor utilization, storage utilization, security considerations, compatibility considerations and cost. Once a computing device is selected to run the software process, the manager facilitates movement of code and/or data to the computing device.

Abstract: Features are disclosed for accurately authenticating a delivery agent for unattended delivery of an item. The systems and methods described confirm the location of the delivery agent and proximity to the delivery location using short range wireless communications between a monitoring device at the delivery location and a communication device associated with the delivery agent. Access may also be conditioned on user specified “do not disturb” rules indicating when remote access is authorized. The authentication may be dynamically assessed such as based on a type of item being delivered.