Abstract: A computing device configured to removably attach a component comprises a housing comprising first and second device electromagnets. A wireless charging transmitting antenna is between the electromagnets. Instructions are executable by a processor to synchronize a first device current through the first device electromagnet with a first component current through a first component electromagnet of the component to attract the electromagnets, and to synchronize a second device current through the second device electromagnet with a second component current through a second component electromagnet of the component to attract the electromagnets.

Abstract: A query-processing technique includes an operation of matching the input query against a plurality of candidate target items, to produce a set of candidate query-item pairings. The matching is applicable to different classes of matching, but is performed by a computer processing architecture that uses a class-agnostic instance of query-processing logic and a class-agnostic target item index. After the matching operation, the technique assigns a matching class to each candidate query-item pairing in the set of candidate query-item pairings, to produce a set of classified pairings. The technique ultimately serves a particular output item to an end user, where the particular output item is chosen based on the results of the matching and assigning. Some implementations of the technique include a filtering operation whereby the candidate-item pairings are filtered to conform to a specified selection strategy or strategies. This filtering operation supplements or replaces the assigning operation.

Abstract: A data processing system implements receiving an access request from the client device of a content requestor to access a content item for which access to the content item is managed by a content access management platform and obtaining access control information. The access control information comprising information associated with a content owner associated with the content item, information associated with the content requestor, and information associated with the content item.

Abstract: A data processing system implements receiving a far-end signal associated with a first computing device participating in an online communication session and receiving a near-end signal associated with a second computing device participating in the online communication session. The near-end signal includes speech of a target speaker, a first interfering speaker, and an echo signal. The system further implements providing the far-end signal, the near-end signal, and an indication of the target speaker as an input to a machine learning model. The machine learning model trained to analyze the far-end signal and the near-end signal to perform personalized noise suppression (PNS) to remove speech from one or more interfering speakers and acoustic echo cancellation (AEC) to remove echoes. The model is trained to output an audio signal comprising speech of the target speaker. The system obtains the audio signal comprising the speech of the target speaker from the model.

Abstract: Systems and methods for protecting privacy-relevant data from unauthorized disclosure in source code of an application. For instance, the present disclosure provides a plurality of technical features including: a privacy-relevant data analyzer that analyzes source code, detects privacy-relevant data in the source code, and generates a report of instances of detected privacy-relevant data. In some examples, the privacy-relevant data analyzer scans through source code to detect annotations that denote if fields, records, or combinations thereof include privacy-relevant data. The privacy-relevant data analyzer further generates and provides a report of detected privacy issues associated with sensitive data included in source code so that the issues can be resolved to ensure that privacy is not breached.

Abstract: A hardware retire circuit includes: one or more input queues, each queue corresponding to an input stream of tasks and being configured to store input task identifiers corresponding to tasks of the input stream; and processing logic configured to: receive a completed task event; determine whether a completed task queue identifier and a completed task identifier of the completed task event match an input task identifier of an input task at a head of an input queue having an input queue identifier corresponding to the completed task queue identifier; and in response to determining a match, pop the task at the head of the input queue and output a task retirement event corresponding to the input task.

Abstract: A method of managing a wireless communication between a plurality of accessory devices and a host device includes, at the host device, establishing a data connection with a plurality of accessory devices, obtaining a radio ID for each accessory device of the plurality of accessory devices, grouping the plurality of accessory devices into at least one OFDMA device and at least one non-OFDMA device based at least partially on the radio IDs, sending a trigger signal to the at least one OFDMA device; and after receiving a first response signal from the at least one OFDMA device in response to the trigger signal, receiving a second response signal from the at least one non-OFDMA device.

Abstract: Examples are disclosed that relate to computing devices, head-mounted display devices and methods for remote collaborations. In one example a computing device receives a first spatial mapping of a first environment and a second spatial mapping of a second environment. The computing device determines that a first volumetric space in the first environment and a second volumetric space in the second environment each satisfy at least one collaboration criterion. Based on this determination, an indication of the first volumetric space is displayed by a first display device in the first environment, and an indication of the second volumetric space is displayed by a second display device in the second environment.

Abstract: Environment type validation can provide a tamper-resistant validation of the computing environment within which the environment type validation is being performed. Such information can then be utilized to perform policy management, which can include omitting verifications in order to facilitate the sharing of policy, such as application licenses, from a host computing environment into a container virtual computing environment. The environment type validation can perform multiple checks, including verification of the encryption infrastructure of the computing environment, verification of code integrity mechanisms of that computing environment, checks for the presence of functionality evidencing a hypervisor, checks for the presence or absence of predetermined system drivers, or other like operating system components or functionality, checks for the activation or deactivation of resource management stacks, and checks for the presence or absence of predetermined values in firmware.

Abstract: Technologies for on-device experimentation include embodiments that receive a request to provide digital content for display in a slot of a user interface display screen of a first device. By a secure execution environment, an identifier received with the request is anonymized. The request is determined to be associated with a content distribution test. The anonymized identifier is assigned to a test group associated with the content distribution test. The secure execution environment receives user interface event data generated by the first device in response to the content distribution test. The received user interface event data is attributed to the test group. An association of the user interface event data with the test group and the content distribution test is provided by the secure execution environment to a second device different than the first device while the identifier and the anonymized identifier are not provided to the second device.

Abstract: The present invention generally relates to systems and methods for providing an enterprise user with an electronic identity and an electronic mailbox when the user has denied, degraded, intermittent, or latent network connectivity. In aspects, a database limited to a single user containing the user's electronic identity and electronic mailbox is provided. The single user database is replicated using a multi-master replication scheme across the cloud and on-premises servers. When a user is entering an environment with denied, degraded, intermittent, or latent network connectivity (“DDIL”), the single user database is replicated to a DDIL server. The user is provided access to their electronic identity and electronic mailbox in the single-user database via the DDIL server during periods of denied, degraded, intermittent, or latent network connectivity.

Abstract: This document relates to an optical device that uses adaptive optics as part of an optical system. The adaptive optics can be used to correct light rays that correspond to a portion of an eye box based on information received from an eye-tracking unit, and can also correct for aberrations in the optics in the optical device. The adaptive optics include corrective elements that can be modified using modifying elements to correct the angle of light rays, such that rays associated with a specific pupil position and gaze direction of a user's eye can be made parallel and ensure a high quality image is viewed by the user.

Abstract: Trusted execution of a workload payload is brokered among multiple trusted execution platforms. The workload payload is received from a source computing system and includes input data, trusted execution code, and one or more trusted execution policies. At least one of the multiple trusted execution platforms is selected based on the one or more trusted execution policies. A brokered payload is generated to include executable trusted execution code and the input data. The brokered payload is communicated to the selected at least one trusted execution platform. A brokered result generated from the brokered payload by the selected at least one trusted execution platform is received. A workload result based on the brokered result is returned to the source computing platform.

Abstract: An integrated fastener includes a threaded portion, a fastener head, and one or more spring fingers integrated into the fastener head, wherein the spring fingers are configured to apply a compressive load when the fastener is inserted and secured to a receiving assembly.

Abstract: Methodologies for testing resiliency of server computer environments with greater security are disclosed. Access is provided to a subset of server computer resources to a client user within a distributed server computer platform to form the server computer environment. An ephemeral fault injector program is instantiated to implement a resiliency experiment within server computer environment. The ephemeral fault injector program is configured to self-terminate within the server computer environment upon completion of the resiliency experiment.

Abstract: An enhanced integration of spreadsheet environments and external environments is disclosed herein that allows users to enter non-native statements directly into the cells of a worksheet so that external resources can be applied with respect to their values. In addition, a security model is disclosed whereby external functions referenced in the cells of a worksheet are executed in the context of a runtime environment that is secured apart from the spreadsheet application that hosts the worksheet. Various enhancements to the user experience are also disclosed that allow users to enter non-native statements in line with respect to the functional syntax that forms the basis of spreadsheet formulas.

Abstract: The technology described herein protects the privacy and security of data stored in a knowledge graph (“graph”) by enforcing visibility policies when returning property information in response to a query or other attempt to extract property information from the graph and/or about the graph. The visibility policies may be stored with the object and used to prevent restricted properties from being extracted from the object, let alone the graph. The object-specific visibility policy may be stored in the storage layer of the knowledge-graph object with the object properties and content. Some implementations may include multiple visibility records for a single object. Together the visibility records form the object visibility policy. An object visibility policy may have a single visibility record or multiple visibility records.

Abstract: Embodiments of the described technologies are capable of reading a text sequence that include at least one word; extracting model input data from the text sequence, where the model input data includes, for each word of the text sequence, segment data and non-segment data; using a first machine learning model and at least one second machine learning model, generating, for each word of the text sequence, a multi-level feature set; outputting, by a third machine learning model, in response to input to the third machine learning model of the multi-level feature set, a tagged version of the text sequence; executing a search based at least in part on the tagged version of the text sequence.

Abstract: This disclosure describes techniques for addressing and/or accounting for path failures (e.g., congestion, link failures, disconnections, or other types of failures) within a network environment. In one example, this disclosure describes a method that includes receiving, by a node connected to a plurality of interconnected nodes, a network packet to be forwarded to a destination node; identifying, by a forwarding plane within the node, a first link along a path to the destination node; determining, by the forwarding plane, that the first link is inoperable; storing, by the node and within the network packet, data identifying the node as having been visited; identifying, by the forwarding plane and from among the plurality of egress links from the node, a second link that is operable and is along an alternative path to the destination node; and transmitting the network packet over the second link.

Abstract: The techniques disclosed herein enable systems to reduce the time required to terminate a set of microservices for an application while ensuring high availability and preventing request failures. This is accomplished through a termination manager which retrieves request queues for the microservices to analyze outstanding requests that require processing prior to termination. Based on the outstanding requests, the termination manager constructs call graphs for each request. The call graphs capture the operational flow of the associated request by defining a sequence of microservices whose functionality is invoked by the request. From an initial analysis, the termination manager can determine that some of the microservices do not appear in the call graphs, indicating that the microservices are not needed to process the outstanding requests. Accordingly, the unneeded microservices are terminated.