Abstract: Systems and methods provide logic for distributing cryptographic keys in a physical network comprising a plurality of physical nodes. In one implementation, a computer-implemented method is provided for distributing cryptographic keys in a physical network. The method includes receiving information mapping a virtual network address of a virtual node to a physical network address of a physical node. The virtual node may be associated with a virtual network hosted by the physical node, and the received mapping information identifies a virtual network address of the node and the physical network address of the node. The mapping service transmits a current version of a cryptographic key and an identifier of the current version to the physical node.

Abstract: Robotic arms or manipulators can be utilized to grasp inventory items within an inventory system. Information can be obtained about constraints relative to relevant elements of a process of transferring the item from place to place. Examples of such elements may include a grasping location from which an item is to be grasped, a receiving location in which a grasped item is to be placed, or a space between the grasping location and the receiving location. The information about the constraints can be used to select from multiple possible grasping options, such as by eliminating options that conflict with the constraints or preferring options that outperform others given the constraints.

Abstract: A method and system are disclosed for detecting malicious software on host server computers or instances running on the host server computers. A pattern of behavior of how the malicious software makes Domain Name System (DNS) requests and/or responses can be used to detect the malicious software. The pattern of behavior can be based on actions that the tenants take in order to make the DNS requests, such as repeating the same requests at fixed time intervals, or requesting a plurality of DNS requests in batches, wherein at least a threshold percentage of which are not resolvable, or using statistically random domain names with the requests. The pattern of behavior can also be associated with responses to the DNS requests, such as when the response includes a text message, and the text message includes encrypted or statistically random data.

Abstract: Systems and methods are directed to migrating virtual machine instances between equipment racks of, for example, a data center such that one or more of the equipment racks can be emptied of all active virtual machine instances. Power then can be reduced or completely shut off the racks emptied of their active virtual machine instances. Cooling for such racks also can be reduced. Energy and costs to operate and cool the racks thus are saved. Such techniques are particular beneficial during periods of reduced network activity (e.g., at night and on weekends). Also, all virtual machine instances running in a particular room of a data center can be migrated to server computers running elsewhere to thereby permit utilities (e.g., power, cooling) to the room to be reduced or shut down completely.

Abstract: Location data that corresponds to one or more user devices each associated with a user may be obtained. Based on the location data, the particular location of a user may be determined. Similarities between various users may be identified when it is determined that those users have visited the same locations. Upon at least two users visiting a threshold amount of the same locations, one or more recommendations may be provided to the users, whereby the recommendations relate to places that those users have yet to visit. In addition, the users may have the opportunity to reveal information about themselves to other users, while maintaining their anonymity. As a result, the users may meet people and learn about new places that are likely to be of interest to those users.

Abstract: This disclosure is directed to creation of a shutdown routine for an electronic device. A device may detect, via one or more sensors, one or more conditions associated with the environment of the handheld electronic device to optimize a shutdown routine for a particular use case. For instance, the user may be using the device to aid in the process of falling asleep and the shutdown routine may be optimized to aid that process. In addition, the system may monitor user interaction after an optimized shutdown routine has been executed to determine an effectiveness of the optimized routine for the particular use case. Optimized shutdown routines may be associated with the one or more conditions and used as a baseline for future use cases of the user or other users where similar conditions are detected.

Abstract: A graph of a plurality of resources in a computing environment is generated, with the graph associating a first resource of the plurality with a second resource of the plurality. Based at least in part on measurements obtained at a point in a test computing environment that corresponds to a point in the computing environment, an expected value or expected range of values is determined. An assessment of a security state of the computing environment is generated based at least in part on a comparison between a measurement obtained at the point in the computing environment and the expected value or expected range of values, and responsive to a determination that the assessment indicates a rule violation in the computing environment, a security action is performed.

Abstract: A technology for testing a computing resource is provided. In one example, services available for the computing resource are identified. The services may be automatically tested on the computing resource and metrics for testing of the services may be collected. Performance of the services may be determined based on the metrics.

Abstract: A manufacturer of computing equipment may generate a signature for computing equipment by measuring various attributes of the computing equipment, such as the impedance across circuits included in the computing equipment. Verification equipment may be provided to a recipient of the computing equipment. The verification equipment may be configured to generate a signature of the computing equipment over a physical connection between the verification equipment and the computing equipment. A determination may be made whether the computing equipment has been tamper with based at least in part on the signature generated by the manufacturer and the signature generated by the recipient.

Abstract: Disclosed are various embodiments for distributed generation of network pages from portions of network pages. A first request for a network page is obtained. A second request for a network page portion is sent to a server application. The second request includes a protocol header that specifies a base uniform resource locator (URL). The network page portion is obtained from the server application. The network page portion is based at least in part on the base URL. The network page is generated from the network page portion and other data.

Abstract: A sequence of 3D hand poses may be used to define a hand gesture, and different hand gestures may be represented by different sequences of poses. One or more hand gestures may be used to generate a virtual input device. Another one or more hand gestures may subsequently be used to provide input via the virtual input device.

Abstract: An online service may receive a request by a first user to provide a notice or other communication to a second user. The request may specify an email address or other communication address in order to identify the second user. The specified email address may be different than the primary email address by which the second user is known to the online service. Upon receiving such a request, the online service emails the second user using the specified email address and asks the second user to log on to the online service. When the second user logs on, the online service adds the specified email address to the account information of the second user as a secondary email address. When a subsequent request specifies the secondary email address, the notice is sent instead to the primary email address of the second user.

Abstract: A display apparatus comprises an electrowetting picture element with a first support plate with a first support plate portion comprising a layer substantially non-transmissive for light and second support plate portion substantially non-absorbing for light. A display controller is configured to control a display effect of the electrowetting picture element between a dark and light display effect, and, responsive to input data corresponding to the dark display effect, output at least one signal to a driver corresponding to the dark display effect. The driver is configured to, responsive to the at least one signal output by the display controller, apply a first, non-zero, voltage to the electrowetting picture element to switch a first and a second fluid of the electrowetting picture element to a first configuration with the first fluid and the second fluid in contact with a first surface of the first support plate portion and the first fluid in contact with a second surface of the second support plate portion.

Abstract: A data storage system may implement locking item ranges for creating a secondary index of an online table. A secondary index may be generated for a table of items stored in a non-relational data store. Different ranges of items in the data store may be locked while a corresponding portion of the secondary index is generated. Upon generating the corresponding portion of the secondary index, a range of items may be unlocked. While generating the secondary index, the table may be made available for servicing access requests. For a request to update the table received during the generation of the secondary index, a determination may be made as to whether the update is included within a locked range of the table. If locked, the request may be delayed until the range is unlocked.

Abstract: A distributed storage system may store data object instances in persistent storage and may cache keymap information for those data object instances. The system may cache a latest symbolic key entry for some user keys of the data object instances. When a request is made for the latest version of stored data object instances having a specified user key, the latest version may be determined dependent on whether a latest symbolic key entry exists for the specified user key, and keymap information for the latest version may be returned. When storing keymap information, a flag may be set to indicate that a corresponding latest symbolic key entry should be updated. The system may delete a latest symbolic key entry for a particular user key from the cache in response to determining that no other requests involving the keymap information for data object instances having the particular user key are pending.

Abstract: A technology to select a virtualized instance is described. A computing specification is received. The computing specification is mapped to specifications of a virtualized instance. Information about the virtualized instance is provided as a result.

Abstract: A test environment is created for optimizing the execution of a programmable execution service (“PES”) application. The test environment is created in one embodiment by replicating a production network and one or more production virtual machine instances executing the PES application. Once the test environment has been created, the test environment is utilized to identify optimized values for one or more application parameters consumed by the PES application. The optimized values may be selected to optimize the output of a fitness function that is based upon one or more direct and/or indirect performance metrics associated with the PES application. Once the optimized values for the application parameters have been identified, the generated values are applied to production virtual machine instances executing the PES application.

Abstract: Described herein are techniques for providing information regarding brands of items offered for acquisition by an offering service. The items may comprise tangible or intangible goods, products (e.g., electronics, sporting goods, digital music, etc.), services, or the like. A brand, meanwhile, may refer to a name, term, design, symbol, or any other feature that distinguishes a designer, maker, manufacturer, seller or the like from other entities.