Abstract: Systems, methods, apparatuses, and software for electronic mail systems and service in computing environments are provided herein. In one example, an electronic mail (email) messaging service is provided that identifies inbound email messages that include inactive sender addresses, processes the inactive sender addresses against suggestion information compiled based at least in part on monitored email replies related to the inactive sender addresses, and surfaces one or more suggested reply addresses for use in composing reply email messages in response to the inbound email messages.

Abstract: Determining browsing activities is described. In one or more implementations, browsing history data, indicating navigation to websites using a web platform, is analyzed to determine a browsing activity, such as shopping, planning a trip, and so forth. The websites navigated to using the web platform as part of the browsing activity are then stored with the browsing activity to enable subsequent access to the websites. In one or more implementations, for each browsing activity, one or more suggested websites which are related to the browsing activity are determined and stored with the browsing activity to enable access to the suggested websites.

Abstract: Systems and methods for multistage post-rendering image transformation are provided. The system may include a transform generation module arranged to dynamically generate an image transformation. The system may include a transform data generation module arranged to generate first and second transformation data by applying the generated image transformation for first and second sampling positions and storing the transformation data in a memory. The system may include a first image transformation stage that selects the first and second transformation data for a destination image position and calculates an estimated source image position based on the selected first and second transformation data.

Abstract: The disclosed technology is generally directed to a secure boot mechanism for a multi-core system. In some examples, multiple execution environments may be sequentially booted according to a chain of trust that corresponds to the defense-in-depth hierarchy. A first stage of the secure boot may be based on the hardware root of trust of the multi-core processor. Subsequent stages may be based upon the trust in the previous stages. In some examples, if any stage is determined to be compromised, then the secure boot ceases, and neither the stage determined to be compromised nor any subsequent stages are booted.

Abstract: Computer systems, devices, and associated methods of detecting and/or preventing injection attacks in databases are disclosed herein. In one embodiment, a method includes determining whether parsing a database statement received from an application on the application server cause a syntax error in a database. In response to determining that parsing the received database statement does not cause a syntax error, determining whether an identical syntactic pattern already exists. In response to determining that an identical syntactic pattern already exists in the database, the method includes indicating that the received database statement does not involve an injection attack.

Abstract: Described technologies facilitate cloud validation using validation as a service (VaaS). A cloud validation service provider acquires and securely stores certification tests developed by cloud component providers, integrated solution providers, and others. Each test's executable portion tests hardware or software of a candidate cloud. The candidate may be on the premises of an enterprise, or instead be a hosted cloud on the premises of a hoster off the premises of the entity that pays for the hosting. Monitored testing is done using an infrastructure in the candidate cloud or in a public cloud. Results are uploaded to the VaaS provider, which provides an analysis of test results for use in determining whether to validate the candidate cloud. Test execution agents may be VaaS-cloud-resident or candidate-cloud-resident, and may use a mutex to prevent simultaneous execution of tests. Testing may be accomplished even when the candidate cloud has no internet-exposed communication endpoint.

Abstract: The dependencies of an application are identified by intercepting application programming interface calls made by an application. A determination is then made at the runtime of the application as to whether the dependencies of the application are present. If the dependencies are not present, a client device upon which the application is executing is configured such that the dependencies are present and are made available only to the authorized application. If the dependencies are present and the application is authorized to interact with the dependencies, the application is permitted to execute.

Abstract: Techniques for controlling a voice activated feature of a voice activated device are described. Data from one or more sensors and data indicative of a status of a user are received. Based on the analyzing the data, a proximity of the user relative to the location of the voice activated device is determined. One or more voice activated features of the voice activated device are enabled based at least in part on the determined proximity, one or more rules, and one or more user preferences.

Abstract: Collected usage information relating to interaction with content is integrated with operation of a system, such as a content management system. The usage information is collected in response to occurrences of usage events. A user may create, configure and define the usage events according to their needs. The user may also configure/define different values that are associated with the different events. For example, a user may specify: when to count a view (e.g. unique user view or each view); what period of time to collect counts; aggregation of counts (e.g. tenant, site, collection); a weighting for the event; a trim value; when to provide the parameter to a search index of the system such that the value is considered by the search engine of the system; whether or not a parameter is configurable by other users, and the like.

Abstract: A graphics rendering system is provided for controlling the rendering of images to manage expected errors. The graphics rendering system receives a specification of a render task to be performed to render an image of a graphics scene and then identifies computing devices that each have a graphics processing unit. The graphics rendering system directs each of the identified computing devices to render the image specified by the render task such that each identified computing device renders the same image. When the graphics rendering system detects that a computing device has completed the render task successfully, it provides the image rendered by that computing device as the rendered image of the render task such that any other image rendered by another of the computing devices is not needed.

Abstract: An eye-tracking system comprises one or more optical sources configured to emit infrared light with a narrow spectral linewidth toward an eye of a user and one or more shuttered optical sensors configured to receive infrared light reflected off the eye of the user. A controller is configured to pulse the one or more optical sources on and off, such that a pulse-on duration is less than a duration needed to fully thermalize each optical source. The controller is also configured to open the shuttered optical sensor for a detection duration based on the pulse-on duration. A conformation of the user's eye may be indicated based on infrared light received at the shuttered optical sensor during the detection duration.

Abstract: Traversing data stored in a relational graph by utilization of probabilistic characteristics associated with the graph nodes is disclosed. When a user submits a request with a graph query, an initial node associated with the graph query is identified. Further, the edge type associated the node is extracted from the graph query. When traversing the graph by following relevant edges from the initial node to new nodes, each new node is queried with the extracted edge type. If the query for the node is negative, then the edges for the particular node are not enumerated. However, if the query for the node is positive, then the edges for the particular node are enumerated for expanding the subgraph. This process continues until the subgraph is expanded to include all relevant nodes. Thus, the computational efficiency is improved by reducing the number of edges that must be traversed when performing graph queries.

Abstract: A system for identifying abnormal resource usage in a data center is provided. In some embodiments, the system employs a prediction model for each of a plurality of resources and an abnormal resource usage criterion. For each of a plurality of resources of the data center, the system retrieves current resource usage data for a current time and past resource usage data for that resource. The system then extracts features from the past resource usage data for that resource, predicts using the prediction model for that resource usage data for the current time based on the extracted features, and determines an error between the predicted resource usage data and the current resource usage data. After determining the error data for the resources, the system determines whether errors satisfy the abnormal resource usage criterion. If so, the system indicates that an abnormal resource usage has occurred.

Abstract: The disclosed technology is generally directed to IoT device update failure recovery. In one example of the technology, after writing an updated release to memory, a determination is made whether the updated release is valid. The updated release includes a plurality of image binaries. If the updated release is determined to be valid, the updated release is made the current release. A determination is made as to whether the current release is stable. Upon determining that the current release is unstable, an auto-rollback is performed. Performing the auto-rollback includes, via at least one processor, automatically: obtaining an uncompressed backup of a previous release; making the uncompressed backup of the previous release the current release; and executing the uncompressed backup.

Abstract: One embodiment illustrated herein includes a computer implemented method. The method includes acts for training an amplification attack detection system. The method includes obtaining a plurality of samples of IPFIX data. The method further includes using the IPFIX data to create a plurality of time-based, server samples on a per server basis such that each sample corresponds to a server and a period of time over which IPFIX data in the sample corresponds. The method further includes identifying a plurality of the server samples that are labeled positive for amplification attacks. The method further includes identifying a plurality of server samples that are labeled negative for amplification attacks. The method further includes automatically labeling at least some of the remaining server samples as positive or negative based on the previously identified labeled samples. The method further includes using the automatically labeled samples to train an amplification attack detection system.

Abstract: An electronic document having a current layout can be presented in an application user interface. Based on a detected interaction with an object in the electronic document, an intent can be determined. The determined intent can be used to identify different sets of commands that result in corresponding visual representations that are likely to satisfy the determined intent. Different activation regions can be defined within the electronic document. A different command set, each identified from the determined intent, is associated with each different activation region. Movement and release of the selected object to a position within an activation region is detected, and the command set associated with the activation region is executed to perform a multi-step operation that modifies at least the current layout of the electronic document to result in the corresponding visual representation.

Abstract: Embodiments provide a method and system for transferring data between different computing devices. Specifically, a communication session is established between a first computing device and a second computing device. The communication session may be established using a first communication protocol. The first computing device creates a virtual memory object which is bound to one or more memory blocks of the first computing device. A path to the virtual memory object is generated and the path is transmitted to the second computing device using the communication session. The second computing device may then read or write data directly into/from the virtual memory object using a second communication protocol that is different from the first communication protocol. The data is written into and read from the virtual memory object using file system commands.

Abstract: remote server machine, without an accessible operating system, is identified. A management computing system sends, to the remote server machine to be tested, a pre-installation environment image that has a pre-configured remote execution service disposed thereon. The pre-installation environment image is loaded into memory on the remote server machine to be tested and the remote execution service automatically runs and exposes an application programming interface (API). A client application on the management computing system interacts with the API to execute a debugging script on the remote server machine, and receives the result of the executed scripts through the API.

Abstract: A system for automatically converting hand-drawn shapes into graphical objects is provided. In aspects, a user's intention to convert a hand-drawn shape into a computer-generated graphical may be inferred when the user traces over a previously hand-drawn shape. For instance, after receiving a first ink stroke forming a drawn shape, the system may receive at least a second ink stroke that substantially overlays the first ink stroke. When the system detects that the user substantially traced over the drawn shape, it may be determined that the user intends to beautify the drawn shape. Thereafter, in response to identifying a graphical object corresponding to the drawn shape, the system may replace the drawn shape with the graphical object on a drawing canvas. Accordingly, the user may indicate an intention to automatically beautify a hand-drawn shape without switching to an edit mode or otherwise selecting the hand-drawn shape for editing.