Abstract: Disclosed are systems, methods, and non-transitory computer-readable storage media for detecting compromised credentials. In some implementations, a content management system can receive information identifying compromised login credentials (e.g., account identifier, password, etc.) from a third party server. The login credentials can be represented by a first hash value generated using a hashing algorithm. When a user logs in to the content management system the user can provide the user's account identifier and password for the content management system. The content management system can generate a second hash value from the user-supplied password using the same hashing algorithm used for the compromised login credentials. The content management system can determine whether the second hash value matches the first hash value and prompt the user to provide a new password for the user's content management system account when the second hash value matches the first hash value.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable storage media for placing a user account in escrow to remove it from an administered account. An employee and/or an employer can select to remove a user account from an administered account associated with the employer. To ensure that the each party, the employer and employee, has an opportunity to retain their content stored in the removed user account, the user account can be placed into escrow, requiring login credentials of both the user and the administrator (employer) to access the user account. The user account can therefore not be accessed unless both the employer and employee each login to the account at the same time. By placing the user account in escrow, both parties can be assured that they can access the content items in the user account, and that the other party cannot access the content without their knowledge.

Abstract: In some embodiments, a content management system can initiate a scan of a content item when the content management system detects that activity associated with the content item triggers a scan policy. In some embodiments, a content management system can initiate a scan of a user's account when the content management system detects that activity associated with the content item triggers a scan policy. A scan policy can specify, for example, a number of shares, downloads and/or previews of the content item allowable in a period of time. When the number of shares, downloads, and/or previews exceeds the specified number in the policy in the specified period of time, the content management system can initiate a scan (e.g., virus scan, malware scan, etc.) of the content item and/or the user's account.

Abstract: Enable using a user computer to search the user's personal content items hosted by an online content management service, the online content management service having an indexer computer configured to generate a base index of the user's content items hosted by the service, a base index server computer configured to transmit the generated base index over a network to the user computer, an index mutation generator computer configured to generate index mutations for subsequent changes to user's hosted content items, and an index mutation sever computer configured to transmit the generated index mutations over the network to the user computer. In one aspect, the system and method enable searches of the user's hosted content items and changes thereto to be conducted at the user computer using an index local to the user computer constructed based on the base index and the index mutations received by the user computer.

Abstract: One or more embodiments of a virtual space system enable one or more users to share and access digital content via a virtual space hosted by an online content management system. For example, the virtual space system can host and provide a virtual space including assets displayed within the virtual space that include links to digital content items referenced by the assets. The virtual space further facilitates creating new assets, adding new members to the virtual space, and collaborating between members of the virtual space with respect to assets added to the virtual space.

Abstract: A content management system enriches contact records obtained from a client device using user records stored on the content management system. The content management system receives contact records from a client device authorized on a user account of the content management system. The content management system compares contact records with user profiles stored on the content management system. The content management system matches contact records with user profiles of user accounts with which at least one sharing event occurred between the user account and the user account on which the client device is authorized. The content management system identifies a matching user profile corresponding to the contact record. The content management system determines modification information for modifying the contact record based upon the matching user profile.

Abstract: Predicting what content items a user finds important and sending those items to a cache on the user's device at times when doing so will not drain resources and will not result in expensive data rates. Applying a ranking function that examines recency and other content metadata associated with the user's content items stored in a synchronized content management system. Determining how much of a ranked list of content items to cache and deciding when is a good time to send content items to the local cache.

Abstract: An online content management system determines a new account configuration to offer to a user, including the price and/or size of a user's quota of storage space in an account on the online content management system, based on usage characteristics of the account. An account management module tracks account usage. The account management module analyzes the account usage and applies a model to predict the willingness of the user to pay for a new account configuration. Responsive to the results of the prediction, the new account configuration is offered to the user. The user's feedback on the offered new account configuration is tracked. If the user accepts the offer, the user's account details are updated accordingly. If the user rejects the offer, this feedback may be added as input into future predictions of that user's willingness to pay for a new account configuration.

Abstract: Embodiments are provided for ephemeral eventing. Ephemeral eventing may involve sending metadata portions associated with content items from a user device to a content management system prior to uploading the content portions of the content items. The content management system may then assign the content items to one or more events. The event assignments may then be sent back to the user device, allowing the content items to be locally displayed according to their events as if the content items had already been uploaded to the content management system.

Abstract: Techniques for general-purpose lossless data compression using a neural network including compressing an original content item to a baseline lossless compressed data format. The baseline lossless compressed data format is binarized to a binarized format. The binarized format is arithmetically coded based on probability estimates from a neural network probability estimator. The neural network probability estimator generates the probability estimates for current symbols of the binarized format to be arithmetically coded based on symbols of the binarized format that have already been arithmetically coded.

Abstract: A client application of a content management system provides instructions for synchronizing content items and placeholder items using a local file journal and updated file journal. The client application compares entries in the updated file journal to entries in the local file journal to determine modifications to make to content items or placeholder items stored in a shared content storage directory on the client device. Based on the result of the comparison, the client application replaces placeholder items with content items or replaces content items with placeholder items.

Abstract: A system and method for synchronizing messages between client application instances and a message service provider includes a connection service communicatively coupled to a plurality of client messaging application instances; a first intermediary transfer layer with an inbound message data queue that queues message updates of a client application instance and an outbound message data queue that queues message updates and notifications from a mailbox service layer; a mailbox service layer communicatively coupled to the connection service through the first intermediary transfer layer; a second intermediary transfer layer with an mailbox message data queue that contains queued message data directed at the mailbox service layer and a message service data queue that contains queued message updates directed at a message service layer; and a message service layer configured for message interactions with an outside message service provider.

Abstract: Various embodiments of the present technology involve creating a secure unique identifier for a content item to be used in a synchronized content management system while off-line with the synchronized content management system. In some embodiments, securing the unique identifier involves generating a random key and applying a hash function to an input to generate a hash. The synchronized content management system can require a user to send both the secure identifier and the key to the content management system in order to register the content item with the content management system. Accordingly, a malicious user who only has access to the secure identifier cannot use it to identify the key. This prevents a malicious user who has obtained the secure identifier, but does not have access to the key from registering a malicious document using the original user's secure identifier.

Abstract: Systems, methods, and computer-readable storage media for inserting content into an application from an online synchronized content management system are disclosed. The system can receive text input into an application at a client device associated with the content management system. The text input can be, for example, keystrokes performed at the client device by a user, and the application can be, for example, an email client. The system can identify, within the text input, a predefined text string, such as an escape sequence, that is followed by a partial or full string that represents an identifier. The identifier may be associated with a content item that is stored in the online synchronized content management system. The system can then insert inside the application a link that points to the content item. The system can also insert code that is designed to render the content item as a dynamically updated preview.

Abstract: A light installer can be utilized to improve the installation process of a client-side application. A light installer can be an installer containing only the necessary information to initiate the installation process, such as information necessary for prompting the user for required data and authorizations, communicating with the content management system, downloading additional resources, and installing the client-side application. The light installer can minimize user interaction time by obtaining all necessary user authorizations early in the installation process, thereby enabling the light installer to install all components of the client-side application without further authorization from the user. Further, the light installer can be tagged with data identifying a user account associated with the client device that can be used for reporting, pre-populating data during the installation process, customizing the installation process, pre-authorizing the client-side application, etc.

Abstract: Nested namespaces for selective content sharing are provided. In a content management system, content is stored for a plurality of users. The content includes a plurality of content items and a plurality of folders arranged in a plurality of hierarchies. A plurality of root namespaces is established. Each root namespace is rooted to a root folder of an account. A first namespace rooted to a first folder selected from the plurality of folders is established. First permissions are maintained for the first namespace, granting access to a first set of users. A request to share a second folder is received. The second folder is a child of the first folder in a particular hierarchy. A second namespace rooted to the second folder is established. Second permissions are maintained for the second namespace, granting access to a second set of users.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable storage media for providing content management features in a messaging service. A messaging client receives a reference to a content item stored on a content management system and receives, from the content management system, a set of sharing options for the content item. The set of sharing options is presented to the user via the messaging client and a user selection of sharing options is received. The messaging client sends the user selection of sharing options to the content management system, wherein the content management system is configured to apply the user selection of sharing options to the content item.

Abstract: A content management system can detect file events that are suspected to be in error, and notify users having access to files affected by the detected file events of the detected events. The content management system can maintain a log of file events including a plurality of file identifiers. The file identifiers identify files that are associated with a namespace, a file event, and a user account responsible for the file event. An analytics module can analyze the log of file events and notify the user of a suspected error when it may be that the file events were inadvertent. A notification can include a link to restore (undo) the file events if the user confirms that the file events were in error.

Abstract: Systems, methods, and computer-readable storage media for managing pooled collections of content items, such as photos, in a content management system. An example system can first receive, from a first user device, images uploaded to a first account at a synchronized online content management system, and cluster at least some of the images as a collection. The system can receive, from the first user, a request to share the collection with a second user having a second account at the content management system, and generate, in response to the request, a pooled collection at the content management system from the collection. The system can transmit an invitation to the second user to join the pooled collection, and, upon acceptance, link the pooled collection to the second user account so that the first user and the second user have access to images in the persistent pooled collection and have permission to contribute content to the pooled collection.

Abstract: User authentication for a user device can leverage one or more fingerprint sensor regions capable of detecting and/or recognizing a user's fingerprints. The user can define a fingerprint gesture or sequence of fingerprint gestures as a passcode, with access to a protected function being conditional on the user performing the defined fingerprint gesture or sequence of fingerprint gestures. Different fingerprint gestures or fingerprint gesture sequences can invoke or authorize different functions of the device. Fingerprint gestures from two or more users in the same location or in different locations can be used to unlock a protected function of a device.