Abstract: Controlling access to location information by entities hosted by an execution extension environment. After receiving a request from the entity for location information associated with a computing device, access rights of the entity for the requested location information are accessed. A request is sent to another computing device to determine whether to authorize access by the entity to the requested location information. Based on a response from the other computing device, access to the requested location information is enabled.

Abstract: A method to identify a child process to a parent process in an operating system includes obtaining a token and login identifier from the operating system. The parent process creates a remote procedure call communications endpoint to communicate with the child process. Thereafter, a child process is spawned by the parent process. A child-initiated request to communicate with the parent process is then received by the parent process. In order to verify the identity of the child-initiated request, the parent process impersonates the child process and receives as identifier that identifies the requestor child process. The requestor process identifier and the spawned child identifier are compared. Based on the comparison, the parent process responds to the child-initiated request. In another embodiment, process identifiers are used by the parent process to verify the identity of a child process the requests communication with the parent process.

Abstract: Providing sentiment classification of out of domain data are disclosed herein. In some aspects, a source domain having a trained classifier is matched to a target domain having a target classifier. The trained classifier may include identifiers that may be used to predict the sentiment of opinion data for the source domain. The target classifier may use the identifiers of the trained classifier to determine the sentiment of opinion data for the target domain.

Abstract: Content can be segmented and each segment encoded at multiple different quality levels. A manifest file can describe the segments, and encodings thereof, present on each computing device. A channel definition can define content, users and computing devices among which such content is shared. Computing devices receive notification of any new shared and can stream or download it from any one or more other computing devices that have such content encoded at a quality appropriate for the capabilities of the recipient computing device. The recipient computing device can aggregate manifests from currently available computing devices, or can receive an already aggregated manifest. The multi-segmented multi-encoded content can be obtained from multiple computing devices simultaneously by obtaining interleaving segments from individual computing devices.

Abstract: Techniques to manage digital telephones are described. An apparatus may comprise a digital telephone management component having a telephone interface module operative to receive security information in the form of a personal identification number (PIN) for an operator or device. The digital telephone management component may also comprise a telephone security module communicatively coupled to the telephone interface module, the telephone security module operative to receive encrypted security credentials from a computing device, and decrypt the encrypted security credentials with the PIN. The digital telephone management component may further comprise a telephone authentication module communicatively coupled to the telephone security module, the telephone authentication module operative to authenticate the digital telephone using the security credentials. Other embodiments are described and claimed.

Abstract: Techniques for implementing mutual-exclusion algorithms that are also fault-resistant are described herein. For instance, this document describes systems that implement fault-resistant, mutual-exclusion algorithms that at least prevent simultaneous access of a shared resource by multiple threads when (i) one of the multiple threads is in its critical section, and (ii) the other thread(s) are waiting in a loop to enter their respective critical sections. In some instances, these algorithms are fault-tolerant to prevent simultaneous access of the shared resource regardless of a state of the multiple threads executing on the system. In some instances, these algorithms may resist (e.g., tolerate entirely) transient memory faults (or “soft errors”).

Abstract: Techniques for reputation mashup are described. Reputation mashup refers to combining, aggregating, collecting, compiling, or otherwise organizing reputation data from multiple sources into a uniform format to facilitate making trust decisions for resources. In an implementation, reputation data for a resource is combined from a plurality of reputation sources. The combined reputation data for the resource is presented to a client to enable a trust determination to be made for the resource. Interaction with the resource by the client is selectively enabled or restricted in accordance with the trust determination made using the combined reputation data.

Abstract: Controlling resource access by entities hosted by an execution extension environment via entity identifiers associated with the resources or with the execution extension environment. Policy sets define the access to the resources. Each policy set includes a principal identifier for execution extension environment, a resource identifier for one of the resources, and access rights. The principal identifier or the resource identifier includes one of the entity identifiers. Access requests from entities are evaluated by comparing the entity identifiers to the policy sets. In some embodiments, the policy sets implement access control for web browsers hosting executable code that attempts to access resources on a computing device.

Abstract: A vector graphics classification engine and associated method for classifying vector graphics in a fixed format document is described herein and illustrated in the accompanying figures. The vector graphics classification engine defines a pipeline for categorizing vector graphics parsed from the fixed format document as font, text, paragraph, table, and page effects, such as shading, borders, underlines, and strikethroughs. Vector graphics that are not otherwise classified are designated as basic graphics. By sequencing the detection operations in a selected order, misclassification is minimized or eliminated.

Abstract: A system may receive image data and capture motion with respect to a target in a physical space and recognize a gesture from the captured motion. It may be desirable to isolate aspects of captured motion to differentiate random and extraneous motions. For example, a gesture may comprise motion of a user's right arm, and it may be desirable to isolate the motion of the user's right arm and exclude an interpretation of any other motion. Thus, the isolated aspect may be the focus of the received data for gesture recognition. Alternately, the isolated aspects may be an aspect of the captured motion that is removed from consideration when identifying a gesture from the captured motion. For example, gesture filters may be modified to correspond to the user's natural lean to eliminate the effect the lean has on the registry of a motion with a gesture filter.

Abstract: A technology can be provided for change invariant scene recognition of an environment by an agent that uses image sensors to capture images. An example method can include grouping the images into situation image sets to form an image database. A navigation image can be captured by the agent at the agent's current location. Another operation can be searching through images by separately loaded situation image set to identify images that are a probable match for the navigation image. Error values can be computed between the navigation image and situation image sets. A probability can be calculated that situation image sets are to be used as a relevant situation image set based on the error values. Then the relevant situation image set can be searched for matching purposes with the navigation image while the error value is below a defined threshold.

Abstract: An integrated collaborative user interface for a document editor is provided. The integrated collaborative user interface includes a document pane, document details pane and a section details pane. Document details and section details are obtained and provided to authors. A collaborative author views the document details, section details and provides updates to a document in the document editor. Changes are then refreshed to the authors to provide a consistent and up-to-date status of the document.

Abstract: This document describes techniques for creating three-dimensional models of image collections using a network-accessible (e.g., cloud-based) computation service, rather than a client computing device. In some instances described below, the computation service performs at least a portion of the operations for creating these models in parallel.

Abstract: Various embodiments provide an ability to schedule latency-sensitive tasks based, at least in part, upon one or more processor cores usage metrics. Some embodiments gather information associated with whether one or more processor cores are in a heavily loaded state. Alternately or additionally, some embodiments gather information identifying latency-sensitive tasks. Task(s) can be (re)assigned to different processor core(s) for execution when it has been determined that an originally assigned processor core has exceeded a usage threshold.

Abstract: A system facilitates managing one or more devices utilized for communicating data within a telepresence session. A telepresence session can be initiated within a communication framework that includes a first user and one or more second users. In response to determining a temporary absence of the first user from the telepresence session, a recordation of the telepresence session is initialized to enable a playback of a portion or a summary of the telepresence session that the first user has missed.

Abstract: The present invention extends to methods, systems, and computer program products for para-virtualized GPGPU computation and GDI acceleration. Some embodiments provide a compute shader to a guest application within a para-virtualized environment. A vGPU in a child partition presents compute shader DDIs for performing GPGPU computations to a guest application. A render component in a root partition receives compute shader commands from the vGPU and schedules the commands for execution at the physical GPU. Other embodiments provide GPU-accelerated GDI rendering capabilities to a guest application within a para-virtualized environment. A vGPU in a child partition provides an API for receiving GDI commands, and sends GDI commands and data to a render component in a root partition. The render component schedules the GDI commands on a 3D rendering device. The 3D rendering device executes the GDI commands at the physical GPU using a sharable GDI surface.

Abstract: An Internet mail bridge is provided for downloading e-mail messages from Internet mail servers supporting different email protocols, such as the Post Office Protocol 3 (POP3) and Web Distributed Authoring and Versioning (Web DAV) protocol, and delivering the downloaded messages, which are in different formats, to a mail server on a local area network. The Internet mail bridge has a mail manager that is independent from particular e-mail protocols or e-mail formats. For each e-mail account, the mail manager instantiates a mail connector object that contains logic for downloading e-mail according to the e-mail access protocol of that account, and invokes the mail connector object to download e-mail messages from that account. The mail manager then instantiates and invokes mail deliverer objects tailored for handling different message formats to deliver the downloaded messages to the local mail server.

Abstract: A method for accessing offline voicemail messages within a mobile messaging application may be provided. First, a voice mail message may be received and the voicemail message may be transcribed to text. Next, the voicemail message and the text transcription may be stored. The recipient may then be presented with a list of voicemail messages and the voicemail message may be retrieved in response to the recipient. The recipient may read or listen to the voicemail message or both. The recipient may also annotate the voicemail message.

Abstract: Concepts and technologies are described herein for continuously deploying applications. In accordance with the concepts and technologies disclosed herein, a first host environment executes an application. An upgrade for the application is released by creating a backup of the application and content used by the application and restoring the backup at a second host environment. The application hosted by the second host environment is upgraded, traffic is routed to the second host environment, and performance of the upgraded application is monitored. If errors are detected in the upgraded application, the upgrade can be rolled back, and traffic can be rerouted back to the first host environment. If the errors are not detected, traffic can be increasingly routed to the second host environment and the first host environment can be deactivated.

Abstract: Technologies described herein relate to estimating engagement of a person with respect to content being presented to the person. A sensor outputs a stream of data relating to the person as the person is consuming the content. At least one feature is extracted from the stream of data, and a level of engagement of the person is estimated based at least in part upon the at least one feature. A computing function is performed based upon the estimated level of engagement of the person.