Abstract: Apparatuses and techniques to utilize a scratch organization as a unit of virtualization. Potential hosts for a scratch organization are evaluated. The potential hosts include at least the first group of hardware processing devices and a second group of the plurality of hardware processing devices to provide remote client computing environments. A target host is selected from the potential hosts. The scratch organization to be hosted by the target host is generated. Data is loaded from a test source that is not the subject organization into the scratch organization. One or more test operations are performed on the scratch organization using the loaded data with the target host. The scratch organization is destroyed on the selected host after the one or more test operations have been performed.

Abstract: Systems and methods for broadcasting events are provided. The system, for example, may include, but is not limited to, a communication system, a memory, and a processor. The processor may be configured to receive, from the communication system, a session identifier identifying a broadcast session and at least one application event corresponding to the broadcast session from a presenting electronic device, update a playback queue corresponding to the broadcast session stored in the memory based upon the received at least one application event, receive, from the communication system, a subscription request to the broadcast session from at least one subscribing electronic device, and transmit, via the communication system, a corresponding playback queue to each electronic device subscribed to the broadcast session, the playback queue including instructions to regenerate the application event within an application operating on the at least one subscribing electronic device.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for configuring service consoles based on service feature templates using a database system. In some implementations, a database of a database system storing service feature templates can be maintained. A request for a service console comprising a console component can be processed. A service feature template comprising a template console component corresponding to the console component can be identified. A set of CRM records can be identified. It can be determined that a user has access to the console component. A graphical representation of the service console can be displayed in a user interface on a display of a device of the user.

Abstract: During runtime of the software application, the runtime analysis framework may assign input tags to objects associated with the user requests. The input tags may identify the requests as potentially malicious and carry a security risk. The RTA framework then may assign sanitization tags to the objects identifying security checks performed on the objects during runtime. The RTA framework identifies output responses to the user requests that include the objects and compares the input tags assigned to the objects with any sanitization tags assigned to the objects. The RTA framework may identify the software application as susceptible to a security vulnerability when the input tags for the objects do not include corresponding sanitization tags.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing a user interface customizable to define state transitions of panes in a bounding window. For example, a bounding window including one or more resizable panes is displayed in a user interface on a display device. Breakpoints situated at respective spatial positions in the bounding window are graphically represented in the user interface. Each breakpoint defines a transition of a pane from one state to another when the pane is resized to traverse the breakpoint. The spatial position of one or more of the breakpoints can be updated in accordance with a request indicating user customization of breakpoints.

Abstract: A runtime analysis framework (RTA) stores a hierarchical list of input tags and a hierarchical list of output tags. The RTA stores defined vulnerabilities that include associated input tags and output tags. During runtime the software application may receive a request from a user system. The RTA assigns an input tag from the hierarchical list of input tags to an object associated with the request and assigns an output tag from the hierarchical list of output tags to a method generating a response to the request. The RTA identifies one of the defined vulnerabilities as a potential vulnerability if the assigned output tag and output tag associated the potential vulnerability are in a same subtree of the hierarchical list of output tags and the assigned input tag and the input tag associated with the potential vulnerability are in a same subtree of the hierarchical list of input tags.

Abstract: Threat detection in a multi-organizational environment. Attribute data corresponding to accesses to a multi-organizational environment and entity data corresponding to accesses to the multi-organizational environment are maintained. A graph based on the attribute data and the entity data where graph edges represent a relationship between an attribute and an entity is generated. Subsequent access are compared to the graph to determine if the subsequent access corresponds to a new relationship. The subsequent access is allowed if the subsequent access does not correspond to a new relationship. The subsequent access further analyzed if the subsequent access corresponds to a new, unexpected relationship.

Abstract: Provided are technical solutions for preparing and using a cache of social media post data. In an example, a database of social media posts is queried for matching posts and respective metadata for each matching post. Index item data describing one or more respective attributes of each matching post is gathered. For each of the matching posts, the respective index item data is combined with the respective metadata to form combined data. The matching posts and the combined data for each matching post are stored in the cache of social media post data. The cache can be indexed. The cache index can be subsequently queried to provide, for further analysis, social media data which matches specific attributes.

Abstract: Dataflow optimization is described for extractions from a data depository. In one example an object-relationship graph of a data extraction definition is traversed in a first pass. The object-relationship graph has a node for each object. The steps from each node of the graph in the first pass is determined. It is determined if any of the determined steps are repeated. A single instance of each repeated step is placed before other steps in a query plan. Data is then extracted in a second pass from the object-oriented database system according to the object-relationship graph by performing the repeated steps first and then reusing the repeated steps in other determined steps.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for creating custom platform objects for a multi-tenant non-relational database environment. A database system maintains a multi-tenant non-relational database associated with multiple enterprises and a number of records for each of the enterprises. The system also maintains a dynamic virtual table associated with a number of records. A request is received from one of the enterprises to define a custom data object within the database system, uniquely associated with an enterprise. The request is processed, and a custom object is generated based on the request. The custom object defines database columns corresponding to the data object and the enterprise. The virtual table is updated to include virtual columns corresponding to the database column definitions, and existing columns of a shared table in the non-relational database are updated to match the virtual columns.

Abstract: Systems, device and techniques are disclosed for dynamically retrieving and monitoring geo-fence activity. A meta geo-fence may be identified based on a user device geolocation. The meta geo-fence having a radius that is dynamically generated to include previously defined geo-fences within or touching the meta geo-fence. User device geolocation may be monitored in relation to the defined geo-fences included in the radius of the meta geo-fence. A communication may be sent to the user device when the user device reports that the user device has entered or exited one of the previously defined geo-fences within or touching the radius of the meta geo-fence.

Abstract: Disclosed RNN-implemented methods and systems for abstractive text summarization process input token embeddings of a document through an encoder that produces encoder hidden states; applies the decoder hidden state to encoder hidden states to produce encoder attention scores for encoder hidden states; generates encoder temporal scores for the encoder hidden states by exponentially normalizing a particular encoder hidden state's encoder attention score over its previous encoder attention scores; generates normalized encoder temporal scores by unity normalizing the temporal scores; produces the intra-temporal encoder attention vector; applies the decoder hidden state to each of previous decoder hidden states to produce decoder attention scores for each of the previous decoder hidden states; generates normalized decoder attention scores for previous decoder hidden states by exponentially normalizing each of the decoder attention scores; identifies previously predicted output tokens; produces the intra-decoder at

Abstract: This disclosure provides various techniques that may allow for tracking how a user interacts with content. For example, a user may interact with various types of content, such as web pages, applications, text, multimedia, or any other type of content. In one example of web page content, for example, this disclosure provides that executable code may be included with a web page and run on a user's system (e.g., via a web browser). The code may be capable of monitoring which content is visible in a viewport of the web browser, when the content is visible, and what part of the viewport contains the content. This monitoring data may be used to measure user interaction or engagement with the content.

Abstract: Systems and methods are provided in which an application at each user device monitors locations of user devices. A location of a first user device within a facility and identification information associated with a user who is associated with the first user device can be determined and a floorplan can be generated and then caused to displayed via a user interface of a second user device. The floorplan includes an icon that represents the location of the first user device.

Abstract: In an example, a method for developing a customer system utilizing a preexisting cloud-computing platform is provided. The method may include defining a platform architecture for the customer system to be developed in terms of a plurality of architecture types—and their predefined architecture type unit. The method may include displaying an indicator of first and second indicators, the first and second indicators corresponding to confirmation of the platform architecture and non-confirmation of the platform architecture, respectively, based on information about a subset of deliverables corresponding to the architecture types.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing electronic notifications that users are concurrently interacting with the same feed item of a social network feed. In some implementations, first data from a first user system can identify a first feed item of the feed as one with which a first user is interacting. It can be determined that a second user using a second user system is concurrently interacting with the first feed item. Based on the determinations, a notification can be sent to one or both user systems. The notification can include data indicating that the first and second users are concurrently interacting with the first feed item.

Abstract: The technology disclosed relates to embedding private comments in public messages. In particular, it relates to customizing public messages by including private comments that are directed to specific recipients. The private comments are included in the context of the public messages sent to their intended recipients but excluded from the public message when it is sent to other recipients. The private comments can be viewable only to their intended recipients and in the context of the public response. The public response as seen by recipients not intended to receive private comments does not include the private comments. This enables a sender of a private comment to efficiently communicate selected information to specific recipients without burdening all recipients with information which may not be relevant for them. Furthermore, it preserves the overall context of the original message.

Abstract: In various embodiments, a method of transferring data between datacenters may be performed. The method may include running a first plurality of host programs and a first plurality of encryption units at a first datacenter. The method may further include establishing, between the first datacenter and a second datacenter, secure communication connections between each of the first plurality of encryption units and a corresponding one of a second plurality of encryption units running at the second datacenter. The method may further include transferring, by the first datacenter, data from the first plurality of host programs to a second plurality of host programs running at the second datacenter.

Abstract: In an example, a processing device of a datastore system may be configured to identify one or more grants of permission corresponding to one or more first objects, respectively, wherein the one or more first objects comprise only a subset of objects of a datastore, wherein the one or more grants of permission are by a user of the datastore; generate an access control entry for a second object of the objects using at least one of the identified grants of permission, wherein the second object is not exposed to the user; and in responsive to receipt of a query for data corresponding to the objects, determine whether to grant access to the data based on the generated access control entry.

Abstract: System and methods for secure transmission are described and include receiving, by a first computing system, an encrypted token generated using a public key of an asymmetric key pair; receiving, by the first computing system, a first partially decrypted token generated by applying a first private key fragment of a private key of the asymmetric key pair to the encrypted token; applying, by the first computing system, a second private key fragment of the private key to the encrypted token to generate a second partially decrypted token; applying, by the first computing system, a third private key fragment of the private key to the encrypted token to generate a third partially decrypted token; and combining the first partially decrypted token, the second partially decrypted token and the third partially decrypted token to generate a decrypted token.