Abstract: Disclosed are various embodiments of techniques that may be used to improve the reliability of network authentication. A communication session is established between a server computing device and a client computing device. The communication session is established via a network using a credential for a network site. A verifier for the credential is generated, which may be used to confirm the authenticity of the credential. The verifier is provided to the client computing device via the network.

Abstract: This application describes, in part, systems and methods that may be used to proactively deliver anticipated data to a mobile device while the mobile device is connected to a wireless network that will not result in a charge for transmitting the data. In one example, data that may be accessed by a user of the mobile device and a time of that likely access is determined. In addition, anticipated wireless network connection events are determined to identify times when the wireless device will likely be connected to a fixed fee wireless network. Based on the determined information, the anticipated data is scheduled for delivery during a fixed fee wireless network connection event that occurs prior to the time at which the anticipated data is requested by the user of the mobile device.

Abstract: Disclosed are various embodiments for translation of speech in a video messaging application. At least one computing device is employed to access a data stream received from a transmitting computing device, where the data stream comprises an audio signal embodying a first language and a video signal. The at least one computing device performs a translation of the audio signal embodying the first language to a translation output embodying a second language and determines a delay indicative of a time needed to perform the translation. The translation output is associated with the video signal after the delay.

Abstract: A remote browsing process is directed to the generation and management of a remote browse session at a network computing and storage provider. A client computing device loads a local browser process and obtains network content from content providers. The local browser process additionally requests a browse session instance corresponding to the network content at a network computing and storage provider. The network computing and storage provider instantiates a browser process in response to the request. The remote browser process retrieves the network content, and generates a processing result corresponding to a first representation of the network content. The processing result may be provided to the client computing device for display. The local browser process may display either the first representation of the network content corresponding to the processing result or a second representation of the network content processed locally at the client computing device.

Abstract: External mobile device sensors may be provided that are configured to manage sensory information associated with motion of objects external to the mobile device. In some examples, the object motion may be detected independent of contact with the device. In some examples, a device may include a screen with a first sensor (e.g., a touch sensor). The device may also include at least a second sensor external to the screen. Instructions may be executed by a processor of the device to at least determine when an object is hovering over a first graphical user interface (GUI) element of the screen. Additionally, in some cases, a second GUI element may be provided on the screen such that the second GUI element is rendered on the screen adjacent to a location under the hovering object.

Abstract: A browsing process is directed to the generation and management of a browse session at a network computing provider. A client computing device requests a remote browse session instance at a network computing provider. The browse session instance may correspond to requested network content. The network computing provider determines one or more browse configurations. Different browse configurations can be determined for separate portions of the requested network content. The browse configurations may identify a communication protocol and various processing actions. The network computing provider retrieves the requested content through an instantiated network browse session instance, and performs a first set of processing actions to generate a processing result. The processing result may be provided to the client computing device for display, including performing a second set of processing actions on the processing result at the client computing device.

Abstract: During execution of a program, a code patching component may insert a redirection patch into a native-code representation of the program. The code patching component may identify a patch area in the native-code representation, copy existing code from the patch area to another location for subsequent emulation by a trap handler, determine the number of instructions and type of native-code elements within the patch area, and replace native-code elements in the patch area with native-code elements representing a jump type instruction and a target address argument for the jump type instruction (directly or indirectly indicating the location of new code that replaces the code in the patch area). The target address argument may be determined by the code patching component based on the program's characteristics, and may include a collection of elements representing existing code, trap type instructions, NOP type instructions, or arbitrary values.

Abstract: Technologies are described herein for establishing a secure tunnel infrastructure between host computers in a hybrid network environment. A first network tunnel is established between a border device in a first network and a border device in a second network. A second network tunnel is established between a first host computer in the first network and the border device in the first network. Similarly, a third network tunnel is established between the border device in the second network and a second host computer in the second network. The networking infrastructures of the first and second networks are then configured so that network packets from the first host computer arriving at the border device in the first network through the second network tunnel are sent through the first network tunnel to the border device in the second network, and then through the third network tunnel to the second host computer.

Abstract: An electrowetting display device comprising a first support plate, a second support plate and a picture element having a space defined by the first support plate, the second support plate and walls of the first support plate. The space comprises a first fluid and a second fluid immiscible with each other, the second fluid being electroconductive or polar and the walls confining the first fluid to the space. The picture element is electrically switchable between a first state without an electric field applied and a second state with an electric field applied, in which in the first state the first fluid is spread out in the picture element and in the second state the first fluid is contracted near one of the walls. Two of the walls have a side facing the space, the sides having different angles with a plane of the first support plate.

Abstract: Methods and apparatus for providing network traffic monitoring such as intrusion detection to clients of a provider network. An interface and methods are provided via which a client can select traffic monitoring as a functionality to be added to their configuration on the provider network, for example as part of a load balancer layer. Via the interface, the client can configure new or existing components and specify that traffic monitoring be added on or at the components. Traffic monitoring technology is automatically and transparently added to the client's configuration on or at the components. By adding traffic monitoring functionality to an existing layer, the client does not have to separately manage traffic monitoring on the client's configuration. Traffic monitoring technology may be added at a network substrate level rather than at an overlay network level to insure that all traffic is available to the traffic monitoring technology.

Abstract: Systems and methods enable the selection of one or more recipes by a user. Items available for purchase from an electronic marketplace can be selected based on the recipe selection. In some instances, the selected items can be automatically placed or added to a virtual shopping cart such that a user can quickly and conveniently purchase the items. In other instances, a purchase transaction for the selected items can be automatically initiated following the selection of the items.

Abstract: Disclosed are various embodiments for supervising execution of untrusted code. Untrusted code that is to be executed in a computing device is obtained. A virtual machine in the computing device is configured to execute the untrusted code, with one or more resource access restrictions being placed on the untrusted code. Periodic updates are obtained from the virtual machine relating to one or more resources of the computing device that are consumed by the virtual machine. Execution of the untrusted code in the virtual machine is interrupted in response to a value indicated by one or more of the periodic updates.

Abstract: Disclosed are various embodiments for generating implicit user ratings for a media item. A ratings analyzer tracks user interaction with a network content server configured to present a media item to a plurality of users and then generates an interaction history for each user based at least upon corresponding user interaction with the media item presented by the network content server. A user interaction metric may be generated based at least upon each interaction history associated with the plurality of users and a user interface may be encoded for display where the user interface comprises the user interaction metric.

Abstract: Stream complexity mapping enables substantially uninterrupted transmission of a highest compatible bit rate of a stream of media to a client via a network connection. Stream complexity data may include complexity information for each period of a stream of media. The stream complexity data may be associated with the stream of media. The stream complexity data may be analyzed to enable a preemptive transition to a new stream of media having a new bit rate and/or expanding a buffer capacity to provide uninterrupted streaming media for complex portions of a variable bit rate stream of media.

Abstract: Generally described, aspects of the present disclosure relate to for managing the configuration and security policies of hosted virtual machine networks. Hosted virtual machine networks are configured in a manner such that a virtual machine manager component can establish service manifests that correspond to information required by the virtual machine network from a user/customer. The virtual machine manager component can also publish in the service manifests contractual information, such as security risk assessments, that are deemed to have been provided and accepted by the user/customer in instantiating virtual machine networks. If the processed service manifest information remains valid, a substrate network process requests or independently instantiate services or components in accordance with the configuration information and security risk information included in the processed service manifest.

Abstract: Systems and methods of manufacturing compact camera modules for use in electronic device are provided. The camera module includes a lens housing and a flexible substrate. An image sensor die is coupled to a first portion of the flexible substrate, and a second portion of the substrate is folded so as to position optical image stabilization components adjacent to a lateral side of the lens housing. The optical image stabilization components may be enclosed within a molded enclosure.

Abstract: A method of managing power to electrical systems in a rack includes pooling power from power supply mechanisms in two or more slots of a rack. Power is supplied from the pooled power to electrical systems in one or more slots in the rack. Power supply mechanisms are activated or deactivated from the pooled power based on conditions of the power supply mechanisms or the electrical systems receiving power from the pooled power supply system.

Abstract: Disclosed are various embodiments for analyzing user searches of verbal media content associated with media content features. A search query is obtained from a user. Media content items are determined by executing a verbal media content search based at least in part on the search query. The media content items include verbal media content that is relevant to the search query. Data relating to the verbal media content search is stored. A user interest in media content is determined by analyzing the data relating to the verbal media content search.

Abstract: Disclosed are various embodiments for a social networking behavior-based identity system that employs social networking data that a user has elected to share through an opt-in procedure. First social networking data is stored in association with a user identity. An assertion of the user identity is received from a client after the first social networking data is stored. Second social networking data is received in response to receiving the assertion of the user identity. An identity confidence level as to whether the user identity belongs to a user at the client is generated based at least in part on a comparison of the second social networking data with the first social networking data.

Abstract: Described are methods and systems of providing an augmented experience on a user device to facilitate user interaction with one or more virtual items. An augmented image comprising an actual object and a virtual item is generated and presented in a user interface. The user interface allows the user to lock a relative position of the virtual item as presented, such that the user may appear to “move” the virtual item. The user interface may also provide sizing information of the virtual item relative item to the actual object.