Abstract: A method and system for determining a custom personal identification number (PIN) for a user based on an ordered series of events are disclosed, comprising generating the custom PIN for the user based on a set of stored events of the user, each event associated with a point in time and authenticating the user responsive to receiving information that matches the custom PIN. A chronological order of a selected subset of events can be determined. A chronological identifier can be assigned representative of a position of the respective event in the determined chronological order. The custom PIN can be determined as an arrangement of the chronological identifiers. The selected subset of events can be presented to the user in the arranged order. The user can be authenticated responsive to determining that a received indication of a chronological arrangement matches the determined PIN.

Abstract: A method, computer program product, and computing system for obtaining machine vision encounter information using one or more machine vision systems. Audio encounter information may be obtained using a plurality of audio acquisition devices of an audio recording system. The audio encounter information may be encoded using an audio codec. The encoding of the audio encounter information by the audio codec may be adapted based upon, at least in part, the machine vision encounter information.

Abstract: Example aspects include techniques for implementing peer group evaluation for comparative anomaly. These techniques may include determining a candidate group including a plurality of component metrics, and determining that the plurality of component metrics are a peer group based at least in part on a cluster profile of the candidate group and the candidate group exhibiting peer-like behavior of a period of time. In addition, the techniques may include detecting anomalous activity based at least in part on first performance information of a component metric deviating from second performance information for the peer group, and providing a notification of the anomalous activity.

Abstract: The present disclosure relates to systems, methods, and computer-readable media for enhancing security of communications between instances of clients and servers while enabling rotation of server certificates (e.g., X.509 certificates). The systems described herein involve updating a client list of server certificates (e.g., a certificate thumbprint) without reconfiguring or re-installing a client and/or server application, starting a new session (e.g., a hypertext transfer protocol secure (HTTPS) session), or deploying new code. The systems described herein may passively or actively update a client list of certificates to enable a client to security verify an identity of a server instance in a non-invasive way that boosts security from man-in-the-middle types of attacks.

Abstract: A method and system for uploading a media file container from a first device to a second device are described herein, including receiving an instruction to upload the media file container and in response, reading a metadata box of the media file container to locate a track box containing information about video data in a media data box, identifying sample frames of the video data throughout a duration of the video data in the media data box using information from the track box, packaging the identified sample frames, and uploading the packaged sample frames of the video data prior to completing upload of the media file container.

Abstract: Policy-based network transmission routing is provided by accessing routing metadata in a wrapper of the transmission packet, the routing metadata representing a feature of the source or the destination, comparing the routing metadata to routing policy data associated with each of multiple routing policies defined within a routing policy structure, identifying, based on the comparing, one or more routing policies applicable to the transmission packet, identifying, based on the routing policy data, a highest priority routing policy from the one or more routing policies, the highest priority routing policy defining a route constraint usable to limit a selection of available routes to the destination, and selecting the route from the available routes based on the route constraint.

Abstract: The disclosed techniques provide features for managing conference user interfaces and access rights to content teams for event subgroups. Movement of an avatar or a user representation in a user interface and selective audio streaming can be achieved in response to a selection of a command, e.g., a “listen” command, corresponding to a specific subgroup from a list on a side panel. The disclosed techniques include a number of types of commands that are used to control the movement of an avatar and control access to a number of select audio streams for a computer of a user. The system moves the avatar from an original position to a second position near or within a graphical representation of the subgroup in response to the command. Access to audio streams can be modified to be bidirectional or unidirectional in response to the command.

Abstract: A device for detecting a visual accessibility violation (VAV) is disclosed, which includes a processor and a computer-readable medium in communication with the processor, the computer-readable medium including instructions that, when executed by the processor, cause the processor to control the device to perform receiving, from a host, theming data indicating a color theme; rendering, based on the received theming data, a graphical user interface (GUI) at a client, the GUI including a first visual element having a first color; determining whether the first color selected for the first visual element causes a VAV with respect to a second color of a second visual element displayed on the GUI; and in response to determining that the first color causes the VAV, generating a first VAV report.

Abstract: A method for content-aware type-on-path generation is implemented via a computing system including a processor. The method includes surfacing an image via a graphics GUI of a graphics application and detecting one or more salient objects within the image using a CNN model. The method also includes generating a contour map for each detected salient object and generating a path along the contours of each salient object by applying a defined offset to the corresponding contour map. The method further includes applying input text characters as type-on-path along the generated path based at least on user input received via the graphics GUI.

Abstract: The handling of external calls from one or more services to one or more subservices is described. Upon detecting that a service has made an external call to a subservice and prior to allowing the external call to be sent to the subservice, a system evaluates the external call against one or more pre-call thresholds to determine whether or not the one or more pre-call thresholds are met. If the determination is that a pre-call threshold of the one or more pre-call thresholds is not met, the external call is failed without sending the external call to the subservice. This failing might include communicating to the service that placed the external call that the external call has failed. Otherwise, the system sends the external call to the subservice. By applying these thresholds, the service is kept from using too many resources.

Abstract: A computing system retrieves a value of a device identifier of itself and generates a device claim asserting the value of the device identifier. The device claim is then associated with an identifier of a user of the computing system. The computing system then generates and attach proof code to the device claim to turn the device claim into a verifiable device credential (VDC). The proof code proves that the VDC is issued by the user of the computing system. The VDC is later presented to a relying entity as part of an identity protection system to further protect the user's identity.

Abstract: Dynamic thread count optimizations include determining: (i) a detected quantity of unassigned IO requests; (ii) a quantity of IO requests currently in process; (iii) a thread pipeline value required to fill a thread's pipeline capacity and based on ratio of (a) an IO duration time from when an IO request is issued until a corresponding IO completion is received and (b) an IO processing time from when an IO request is assigned to a thread until it is issued; and (v) an ideal thread quantity based on a ratio of (a) the quantity of IO requests to be processed and (b) the thread pipeline value. Said optimizations also include dynamically activating new threads whenever a quantity of active threads is determined to be less than the ideal thread quantity.

Abstract: Methods for evaluating quantum computing circuits in view of the resource costs of a quantum algorithm are described. A processor-implemented method for performing an evaluation of a polynomial corresponding to an input is provided. The method includes determining a polynomial interpolation for a set of sub-intervals corresponding to the input. The method further includes constructing a quantum circuit for performing, in parallel, polynomial evaluation corresponding to each of the set of sub-intervals.

Abstract: A computing device detects an indication of a data-linkable context for the electronic stylus and transitions communication between the digitizer of the computing device and the electronic stylus from a user interface mode to a data link mode, based at least in part on the detecting. The computing device communicates between the electronic stylus and the digitizer in the data link mode via the multiple electrostatic antennas of the electronic stylus, based at least in part on the transitioning.

Abstract: Technology is disclosed herein for the integration of spreadsheet environments with LLM services. In an implementation, an application receives a natural language input from a user associated with a spreadsheet hosted by the application. The application generates a prompt that includes metadata about the spreadsheet and identifies a required format for descriptions of pivot tables. The application sends a prompt to a large language model (LLM) service to elicit a reply that includes a description of the pivot table having the required format. The application receives a reply to the prompt from the LLM service that includes the description of the pivot table in the required format. The application generates pivot table according to the reply from the LLM service.

Abstract: The disclosure herein describes generating an inpainted image from a masked image using a patch-based encoder and an unquantized transformer. An image including a masked region and an unmasked region is received, and the received image is divided into a plurality of patches including masked patches. The plurality of patches is encoded into a plurality of feature vectors, wherein each patch is encoded to a feature vector. Using a transformer, a predicted token is generated for each masked patch using a feature vector encoded from the masked patch, and a quantized vector of the masked patch is determined using generated predicted token and a masked patch-specific codebook. The determined quantized vector of the masked patch is included into a set of quantized vectors associated with the plurality of patches, and an output image is generated from the set of quantized vectors using a decoder.

Abstract: An access token broker is executed within a first iFrame, a fully trusted application is executed in a second iFrame within the first iFrame, and a partially trusted application is executed in a third iFrame within the second iFrame. The partially trusted application may identify the iFrame in which the access token broker is executing and request an access token from the access token broker. The access token broker determines whether the request for the access token is to be granted. If the request is to be granted, the access token broker requests the access token from a hosting application. The hosting application obtains the requested access token from an access token server and provides the access token to the access token broker. The access token broker receives the access token from the hosting application and provides the access token to the partially trusted application.

Abstract: Methods and systems for controlling window arrangements for tabbed user interface elements. An example method includes displaying a plurality of application windows including at least one application window for a web browser application having multiple open tabs, the multiple open tabs including at least one active tab and multiple inactive tabs, receiving an input to invoke a snap assist mode; in response to the input, display a snap assist user interface to reconfigure the display of one or more the plurality of the application windows, the snap assist user interface including tab representations and an application-window representation. In response to receiving a selection of a tab representation, a web browser application window is displayed with the corresponding tab as the active tab.

Abstract: A traceability system for a bulk commodity supply chain is provided. The system includes a tracking device, a location determination subsystem, and at least one computing device having at least one processor. The location determination subsystem is configured to determine positional information of the tracking device while placed in a bulk commodity traveling along the bulk commodity supply chain. The processor receives the positional information from the location subsystem, extracts positional values from the positional information, and processes the positional values to identify motion primitives. A modeling tool is applied to the identified motion primitives to produce a positional path of the tracking device, which is output, for example, via a user interface. The positional path represents travel of the bulk commodity along the supply chain.

Abstract: The processing of an incoming query targeted to a data store in a way that early detection of code injections can be achieved. Initial code injections, even if unsuccessful, can be used to adjust the code injections to more successfully perform harmful actions against the data store. Accordingly, early detection can be used to block attackers from experimenting against the data store. The early detection is accomplished by detecting when all or a portion of the query is structured in accordance with a query language, but does not follow the syntax recognized by the underlying data store. This is a good indication that the issuer of the query is performing a blind code injection, not knowing the type of the underlying data store.