Abstract: An apparatus with an integrated circuit (IC) chip can provide protection against attacks on a cryptographic coprocessor. An attacker can compromise a cryptographic coprocessor by, for instance, obtaining a private encryption key or instruction code. To combat these attacks, example implementations store information in encrypted form. The information may correspond to data, instruction code, or intermediate values located in state registers. To securely and quickly “erase” such stored information, the cryptographic coprocessor can change the encryption key. In other example implementations, random numbers are provided with two different levels of “randomness quality” that is appropriate for different types of procedures. A cryptographic coprocessor can include two registers that store randomized bits in accordance with the two different quality levels for rapid access during cryptographic operations.

Abstract: Operations of a method include receiving a configuration request requesting configuration management of a base configuration package that describes infrastructure of an application. The operations include determining, for the base configuration package, a plurality of package functions. Each package function of the plurality of package functions extends functionality of the base configuration package. The operations include determining, for the base configuration package and the plurality of package functions, a change-proposal function. The change-proposal function proposes one or more of the plurality of package functions to extend the functionality of the base configuration package. The operations include transmitting, to a user device, the change-proposal function and receiving, from the user device, approval of the change-proposal function.

Abstract: The present disclosure provides systems and methods for generating and transmitting, or applying, a noise profile based on a determined environment a host device is operating in. The host device may receive data from one or more sensors, location information, and/or device information. The sensors may include a pressure, temperature, light, location, or humidity sensor. The location information may include data from a global positioning system and/or connectivity signals, such as multicast DNS and/or Bluetooth broadcast. Device information may include schedule data and/or device state information. The data from one or more sensors, the location information, and/or the device information may be aggregated to determine the environment in which the host device is operating in. Based on the determined environment, a noise profile generator may generate a noise profile. The noise profile may define gains to be applied to audio signals being output to the user.

Abstract: A method includes receiving a point data anomaly detection query from a user. The query requests the data processing hardware to determine a quantity of anomalous point data values in a set of point data values. The method includes training a model using the set of point data values. For at least one respective point data value in the set of point data values, the method includes determining, using the trained model, a variance value for the respective point data value and determining that the variance value satisfies a threshold value. Based on the variance value satisfying the threshold value, the method includes determining that the respective point data value includes an anomalous point data value. The method includes reporting the determined anomalous point data value to the user.

Abstract: A method using media arbitration includes, while a first assistant-enabled device is performing a first long-standing operation, determining the first assistant-enabled device satisfies a co-presence condition with a second assistant-enabled device, and determining that the second assistant-enabled device is performing a second long-standing operation that conflicts with the first long-standing operation performed by the first assistant-enabled device. Based on determining that the first long-standing operation and the second long-standing operation conflict, the method also includes executing an operation arbitration routine to identify one or more compromise operations for at least one of the first assistant-enabled device or the second assistant-enabled device to perform, and instructing the first assistant-enabled device or the second assistant-enabled device to perform a selected compromise operation among the identified compromise operations.

Abstract: Aspects of hardened encoded message check systems and methods for RSA signature verification are described. In one implementation, an encoded message is received that includes an array of words. Each of the words in the encoded message are processed using an expected value and a share associated with each word. A verification value is calculated based on the array of words in the encoded message, the expected value, and the share associated with each word. A determination is performed regarding whether the verification value is correct and, if the verification value is correct, a hardware device is unlocked.

Abstract: A method for garbage-collection includes obtaining a request to compact a plurality of log files of a log-structured volume. Each log file includes fresh block runs in use and stale block runs no longer in use. The log-structured volume includes a plurality of snapshots. For each respective snapshot, the method includes determining, using a plurality of interval maps, the fresh block runs of the plurality of log files used by the respective snapshot. For each respective log file, the method includes writing the fresh block runs of the respective log file to a respective compacted log file and generating a respective per-log diff file. The method includes, for each respective snapshot, generating a respective checkpoint based on respective per-log diff files and deleting each respective log file of the plurality of log files.

Abstract: Implementations described herein relate to methods, devices, and computer-readable media to automatically adjust white balance in an image. In some implementations, a computer-implemented method includes detecting a face in the image, wherein the face corresponds to a plurality of pixels. The method further includes determining a region of interest (ROI) for the face, wherein the region of interest excludes at least one pixel from the plurality of pixels that correspond to the face. The method further includes performing a face color calculation for the face based on the region of interest for the face. The method further includes adjusting the white balance in the image based on the face color calculation to obtain an output image.

Abstract: This application is directed to a display assistant device that acts as a voice-activated user interface device. The display assistant device includes a base, a screen and a speaker. The base is configured for sitting on a surface. The screen has a rear surface and is supported by the base at the rear surface. A bottom edge of the screen is configured to be held above the surface by a predefined height, and the base is substantially hidden behind the screen from a front view of the display assistant device. The speaker is concealed inside the base and configured to project sound substantially towards the front view of the display assistant device.

Abstract: A method at an electronic device with a display includes: displaying a user interface having a first region and a second region; receiving, and displaying in the first region of the user interface, a live video stream of a physical environment captured by a remote video camera; displaying, in the second region, a timeline corresponding to a timespan for a first portion of a duration during which the live video stream may have been recorded; in response to receiving a user interaction to move the timespan to a second portion of the duration, transitioning the displayed timeline to a new timeline that corresponds to the timespan for the second portion, and while transitioning, displaying, in the first region, a subset of video frames representing the first and/or second portion of the duration.

Abstract: Methods, systems, and apparatus are described for transferring application data. In one aspect, a method includes causing, by a first component on a first device to establish a wireless connection with a second device; receiving, from a second component on the second device, data specifying one or more applications that are installed on the second device and supported by the second component, each of the applications being separate from the second component; determining, by the first component, that a first application installed on the first device corresponds to one of the applications installed on the second device, the first application being separate from the first component; receiving, by the first component, first application data from the first application; and causing, by the first component, the first device to send the first application data to the second component running on the second device using the wireless connection.

Abstract: A media application determines, based on pixels of images or videos from a collection of media items, clusters of media items such that the media items in each cluster have a visual similarity, wherein the collection of media items is associated with a user account. The media application selects a subset of the clusters of media from corresponding clusters of media items based on the media items in each cluster having a visual similarity within a range of threshold similarity values. The media application causes a user interface to be displayed that includes the subset of the clusters of media.

Abstract: A method includes identifying a middlebox receiving network flow and communicating with one or more backend virtual machines. The method also includes receiving flow statistics corresponding to the network flow of the middlebox and determining whether the flow statistics satisfy an offload rule. The offload rule indicates when to migrate the network flow from the middlebox to an end host. When the flow statistics satisfy the offload rule, the method also includes migrating the network flow from the middlebox to the end host.

Abstract: An example method includes receiving, by a communication controller of a source device and from an audio source of the source device, audio data to be wirelessly transmitted to a sink device, wherein the audio data is received from the audio source at a rate; storing, by the communication controller and in a buffer, the audio data as a sequence of audio blocks, wherein each audio block includes audio data for a respective output time; transmitting, by the source device and to the sink device, audio blocks of the sequence of audio blocks using a wireless link between the source device and the sink device; determining a current condition of the wireless link; and automatically adjusting, by the communication controller and based on the current condition of the wireless link, the rate at which audio data is received from the audio source.

Abstract: Systems and methods are disclosed herein for opening files via local application.

Abstract: In general, the subject matter described in this specification can be embodied in methods, systems, and program products for receiving a voice query at a mobile computing device and generating data that represents content of the voice query. The data is provided to a server system. A textual query that has been determined by a speech recognizer at the server system to be a textual form of at least part of the data is received at the mobile computing device. The textual query is determined to include a carrier phrase of one or more words that is reserved by a first third-party application program installed on the computing device. The first third-party application is selected, from a group of one or more third-party applications, to receive all or a part of the textual query. All or a part of the textual query is provided to the selected first application program.

Abstract: In one embodiment, a system includes a plurality of first host machines implementing a public-cloud computing environment, wherein at least one of the first host machines comprises at least one public-cloud virtual machine (VM) that performs network address translation; and a plurality of second host machines implementing a private-cloud computing environment, wherein at least one of the second host machines comprises one or more private-cloud virtual machines, wherein the public-cloud VM is configured to receive, via a network tunnel from the private-cloud VM, one or more first packets to be sent to a public Internet Protocol (IP) address of a public network host, translate, using a NAT mapping, a source address of each first packet from a private IP address of the private-cloud VM to an IP address of the public-cloud VM, and send the first packet to the IP address of the public-cloud VM.

Abstract: The present disclosure describes systems and manufacturing techniques directed to a user equipment (UE) that can be bezel-less and has a loop antenna system for radiating and sensing millimeter-waves. The UE includes a housing and a display within the housing. The display is disposed within a display layer across a primary plane defining a front surface of the user equipment. The loop antenna system is within the housing and is configured to radiate a field of millimeter-waves within the spatial region and sense a reflection of the millimeter-waves by an object within the spatial region. Described manufacturing techniques include multi-layer fabrication techniques that are applicable to printed circuit boards and/or integrated circuit (IC) devices.

Abstract: A method of populating a test environment for integration testing of a production database. The production database includes a plurality of tables, and may be represented by a directed acyclic graph (DAG), in which each of the plurality of tables is represented by a respective node of the DAG and schema-level constraints of the plurality of tables are represented by edges of the DAG. The method may involve constructing the DAG, topologically ordering the plurality of tables of the production database according to the DAG, randomly generating test data in accordance with the schema-level constraints of the plurality of tables, and populating the randomly generated test data to the test environment according to the topological ordering of the plurality of tables.

Abstract: Optical gratings, such as those used in waveguide displays, may have large aspect ratios. For example, a grating characteristic (e.g., period, feature size, etc.) can be much smaller than the grating area. Variations in the grating characteristic over the grating area may appear like a secondary grating having a long grating period superimposed on a primary grating for which the optical grating was designed. Because variations responsible for the secondary grating occur over a long distance relative to the primary grating period, it may be difficult to locate and characterize these variations with testing methods designed for shorter distances. The present disclosure presents systems and methods to detect and characterize the secondary gratings quickly and efficiently.