Abstract: The present disclosure describes systems and methods relating to full motion video (FMV) routing in one-way transfer (OWT) systems. The present technology enriches the datagrams of the video stream that are sent from the low-trust side of the OWT system with a global unique identifier (GUID) that is used as an identifier to determine a particular destination on the high-trust side of the OWT system. The enriched video stream is then transmitted through an OWT system that provide high reliability for the enriched video stream. When the enriched video stream is received on the high-trust side, the GUID in the datagram is extracted and used to identify destination addresses for destination devices in the high-trust computing environment. The video stream is then delivered to the destination devices having the corresponding destination addresses.

Abstract: Systems and methods for generating dynamic quick actions for an application in a web browser. The dynamic quick actions correspond to various functions of an application accessible via a web browser sidebar interface. When a hover event is detected in association with an icon of the application, a quick-actions card is generated that includes quick actions of the application from which the user can select. For instance, a selection of a quick action triggers the web browser to execute an action that causes the application function to be performed. Thus, application functions are able to be surfaced and controlled via a single input device selection (e.g., a mouse click).

Abstract: This document relates to devices employing imaging devices, such as cameras and improved camera performance. In one example the device includes an optical element and a sensing element configured to sense light passing through the optical element. This example includes a set of MEMS actuators configured to be individually selectively controlled to create six degrees of freedom (6DoF) movement between the sensing element and the optical element.

Abstract: Systems and methods for generating advanced feedback for draft messages using a language model are disclosed. Prior messages, along with corresponding reactions, may be incorporated into an AI prompt that is processed by a language model to generate an output payload. The output payload is processed to generate custom profiles for users that have provided the reactions to the messages. At runtime, while a draft message is being composed within a messaging application, the data from the draft message (and message thread where applicable) are received. The custom profiles for recipients of the draft message are then retrieved from the database of custom profiles. The data from the draft message as well as the retrieved custom profiles are incorporated into another AI prompt that is processed by the language model to produce another output payload. The output payload is post-processed to extract advanced feedback for the draft message.

Abstract: Aspects of the present disclosure relate to adverse user behavior detection and mitigation. In examples, a user account of a social platform may be trusted or untrusted. If the user account is untrusted, activity of the user account may be buffered so as to not directly affect social metrics of the social platform. For example, if the untrusted user account follows a target user account, the untrusted user account may be added to a separate set of followers or otherwise separated from a set of trusted followers of the target user account. Eventually, each user account in the separate set is evaluated to determine whether the user account has transitioned to a trusted user. If the user account is now trusted, it may be migrated to the set of trusted followers. However, if the user account is untrusted, it may be removed from the separate set, thereby reverting the activity.

Abstract: A data processing system implements detecting that a first user device associated with a first user has added a first sponsored content item to a host electronic document by adding a first reference to the first sponsored content item to the host electronic document. The first sponsored content item is stored separately in a memory of a cloud-based service from the host electronic document. The data processing system further implements determining that the first user has permission to share the first sponsored content item with other users of the cloud-based service, generating sponsor information to associate the sponsored content item with the host electronic document to permit users having access to the host electronic document to access the sponsored content item, and storing the sponsor information in a sponsored access datastore.

Abstract: Embodiments generally relate to improving reliability of processing cache lines with metadata symbols encoded into parity symbols of codewords. The data and metadata of a cache line are encoded into codewords where each codeword is a number of (1) message symbols, each including message bits from data of the cache line, and (2) parity symbols, each including parity bits determined from the message symbols and a metadata symbol. For each codeword of the cache line, the plurality of message and parity symbols are rotated so that a location of each symbol of one codeword is different from other codewords of the cache line. The codewords of the cache line are then stored in memory as rotated. In this manner, the reliability is improved by rotating symbols of the codewords of the cache line, with metadata symbols encoded into parity of codewords, before storage in memory.

Abstract: Networked device management is based on an ontology graph which includes device nodes, physical facility nodes, and edges. The ontology graph may go beyond network topology by also documenting: relationships between devices and facilities, facility attributes such as facility-specific security scores, and device characteristics such as whether a device is recognized, whether it is authorized, and its mission criticality. Medical devices, physical condition sensors, and other internet of things devices, including those embedded in vehicles, those located on a vehicle, those used for industrial control, or those which are intermittently air-gapped, are managed. Devices may be discovered by extraction of identifications and characteristics from telemetry data in a staged architecture. Security postures may be assessed, and security recommendations based on device context may be provided.

Abstract: Described herein is a technique for surfacing content for users of a connection network application. The technique involves performing a first query to fetch recently-impressed items viewed by a user of the connection network application and, concurrently with the first query, performing a second query of search nodes to generate a set of search node results. The technique allows for filtering the recently-impressed items from the set of search node results to generate a candidate set and applying a freshness factor to the candidate set. Updates are provided to a user display, based on results of applying the freshness factor to the candidate set.

Abstract: This document describes techniques for storing virtual disk payload data. In an exemplary configuration, each virtual disk extent can be associated with state information that indicates whether the virtual disk extent is described by a virtual disk file. Under certain conditions the space used to describe a virtual disk extent can be reclaimed and state information can be used to determine how read and/or write operations directed to the virtual disk extent are handled. In addition to the foregoing, other techniques are described in the claims, figures, and detailed description of this document.

Abstract: The present disclosure relates to systems, methods, and computer readable media for reducing placement conflicts between allocation agents tasked with allocating computing resources on a computing zone. For example, systems disclosed herein may identify placement conflicts between multiple allocation agents processing incoming placement requests on a computing zone. The systems disclosed herein may further modify a placement policy based on the number of placement conflicts by reducing one or more restrictions on rules for allocating computing resources. For example, the systems disclosed herein may enlarge a placement zone of server nodes when allocating computing resources to prevent or otherwise reduce conflicts between multiple allocation agents implementing the same placement policies.

Abstract: An example system includes a processor to receive production log data and pre-process the production log data to generate an exploration data set. The production log data includes continuous updates of a ranking function associated with different actions for a same query issued by a same user in different impressions. The processor can perform offline estimation of online metrics for ranking functions using the exploration data set, evaluate a proposed ranking function by comparing the estimated online metrics to a set of baseline metrics of a baseline ranking function, detect that the proposed ranking function is a preferred ranking function having a higher detected metric score than the baseline ranking function based on a comparison of the estimated online metrics with the baseline metrics of the baseline ranking function, and execute an action on an information retrieval system based on the preferred ranking function.

Abstract: Methods, systems, and computer program products are presented for classifying logged event data as anomalous. Multivariate input feature vectors based on event data are applied to an autoencoder model to generate corresponding predicted multivariate feature vectors with respective feature elements. Each feature element of each vector corresponds to a respective type of event data (e.g., sign-in failures). A reconstruction loss is determined for each predicted feature vector and used to classify the predicted feature vector as anomalous or not anomalous. Reason(s) for an anomaly classification are determined by selecting one or more feature elements based on a level of percent contribution to the vectors loss and underprediction or overprediction, determined for each feature element of the anomalous predicted feature vector. Each reason is related to the type of event associated with a selected feature element. The reasons may be displayed in a security analytics UI.

Abstract: A foldable computing device comprises a first frame rotatably coupled to a second frame. The second frame comprises a push-to-open mechanism comprising an actuator and a power switch located for actuation by the actuator. A detection mechanism detects a displaced position of the actuator that corresponds to releasing the foldable computing device from a closed configuration. Actuation of the power switch is detected and used with detection of the displaced position of the actuator to control an operating state of the computing device.

Abstract: A computing system includes a processor and memory storing instructions that, when executed by the processor, cause the processor to perform acts. The acts include receiving a query provided by a user. The acts additionally include determining that the query is related to a comparison between entities. Based upon the determining that the query is related to the comparison between entities, the computing system generates a prompt that is to be input to a generative language model, where the prompt includes: 1) an instruction for the generative language model to generate a table based upon the query; and 2) attribute values for entities identified by a search system based upon the query. The acts also include providing the prompt as input to the generative language model, where the generative language model generates a table based upon the prompt, and further where the table includes the attribute values for the entities.

Abstract: Implementations are directed to developing and facilitating a data collaboration using a debug mode that permits debugging a data pipeline without exposing collaborator data. In an example implementation, collaborators that contribute production data into a data pipeline specify sample data such as mock, random, or expired data for each production dataset they contribute. When one of the collaborators triggers the data pipeline in debug mode, a modified data pipeline that substitutes the production data for the sample data is executed to generate sample derived data in a data trustee environment, without exposing the production data. Since debug mode does not use production data, a data pipeline may run in debug mode even if a governing contract has not been signed (and entitlements have not been granted), and/or diagnostic logs generated by the modified data pipeline in debug mode may be exposed to the collaborators for debugging purposes.

Abstract: A base noise level of a touchscreen interface for a computing device is actively and adaptively calibrated. Antenna traces forming a digitizer of the touchscreen interface are allocated into antenna regions. Antenna regions with high energy signal levels and antenna regions with low energy signal levels are identified. Signal level information from high energy antenna regions is discarded. A noise level, caused by electrical components of the computing device, is determined within signals generated in the antenna traces based at least in part upon the low energy antenna regions. The digitizer is calibrated by reducing energy levels of signals carried by the antenna traces in all antenna regions by the noise level.

Abstract: Systems and methods related to integrated memory pooling and direct swap caching are described. A system includes a compute node comprising a local memory and a pooled memory. The system further includes a host operating system (OS) having initial access to: (1) a first swappable range of memory addresses associated with the local memory and a non-swappable range of memory addresses associated with the local memory, and (2) a second swappable range of memory addresses associated with the pooled memory. The system further includes a data-mover offload engine configured to perform a cleanup operation, including: (1) restore a state of any memory content swapped-out from a memory location within the first swappable range of memory addresses to the pooled memory, and (2) move from the local memory any memory content swapped-in from a memory location within the second swappable range of memory addresses back out to the pooled memory.

Abstract: Technologies are presented directed to smart attachment of cloud-based files to communications such as email. A communication service may determine and select automatically between local and cloud versions of synchronized files allowing the recipient of the message to receive a version of the file regardless of whether the sender is offline or online when the attachment was made and in a user-friendly manner to the sender through a single representation.

Abstract: Validating proof of possession (POP) of a private key by a device. A computer system generates a provisioning package for a device catalog. The provisioning package including a POP challenge. After generating the provisioning package, the computer system receives a device activation request for a device. The device activation request includes a public key, a device identifier, and a signature. The computer system validates POP of a private key corresponding to the public key, including using the public key, the device identifier, and the POP challenge to cryptographically verify the signature. The computer system establishes a trust relationship with the device, including registering the public key and the device identifier into the device catalog.