Abstract: Disclosed are methods, apparatus, systems, and computer readable storage media for providing access to a private resource in an enterprise social networking system. One or more servers may receive a request for access to a private resource to be granted to a user from a publisher. The publisher may be configured to publish a message as a feed item to one or more feeds, where the message includes a user identification identifying the user. The user does not have access to the private resource. The feed item may be provided to display in the one or more feeds. Access may be granted to the user via the one or more feeds. In some implementations, access may be granted in response to a user input from the feed item associated with a moderator or owner, the moderator or owner having a privilege to control user access to the private resource.

Abstract: Private AppExchanges within an on-demand services environment in which multiple tenants have corresponding tenant identifiers (IDs) and the on-demand services environment is provided by an entity separate from the client entities. Access to a listing of apps is provided to a remote device based on a tenant ID associated with the user. The listing of apps for each tenant ID is controlled by an administrative entity associated with each respective tenant ID and. A download request is received from the remote device for a selected app from the listing. The remote device is allowed access only to the listing of apps having a tenant ID corresponding to the tenant ID for the remote device. Download access is granted to the remote device for a selected app in response to the download request. The code for the selected app is transmitted from a storage device to the remote device.

Abstract: Systems and methods for detecting phishing attacks and identifying attackers are described. In embodiments, a server system may modify a template image based on user information and provide the modified image to a user system with a login page. The server system may obtain authentication credentials with an image rendered by the user system. The server system may authenticate the user system based on the authentication credentials and information included in the rendered image. Other embodiments may be described and/or claimed.

Abstract: The disclosed technology offers methods of updating a data cube of samples and a display on a client device with a processor. The method provides GUI clients to computer devices; receives initial reports of sample values organized by sampled computing device and sampled aspect of operations, and identified by group membership and super-group membership; receives, from the devices, samples that update reports of sampled aspects of operations; and pushes updated reports to the GUI clients. The GUI clients calculate and update group and super-group aggregate operational status; and display a hierarchical representation of the aggregate operational status of the super-groups and groups and of the operational status of the computing devices, based on the sample values, in real or near real time, as received samples reach the clients. The operator viewing the display of the hierarchical representation is notified of operational aspects that require close monitoring or immediate remedial attention.

Abstract: Techniques for metadata-driven dynamic content serving. Metadata content is stored as a source instance. The metadata content is utilized to provide dynamically-constructed pages. The metadata content is published to runtime pods communicatively coupled to receive the metadata content. The source instance includes a metadata definition repository and is a primary source of dynamic data for serving pages in the runtime pods. The runtime pods are groups of multiple servers that act as a single entity to dynamically generate metadata-driven content in response to requests received from client devices. A request for content is received with a selected one of the runtime pods for a specific site. The specific site is mapped to a user identified by a user identifier. The user identifier is utilized to retrieve site metadata from a site metadata server. Content is provided in response to the request with the selected runtime pod utilizing the metadata content.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for processing a file to generate a recommendation using a database system. A database can be maintained. The database can store data objects identifying historical keywords for a user and weights associated with the historical keywords. Information identifying a file can be received. The file can be processed to extract file keywords. A query attribute can be generated based on the historical keywords, the file keywords, and the weights. It can be determined that the query attribute conforms to a designated characteristic associated with the user. Data indicating a recommendation of the file can be generated in response to determining that the query attribute conforms to the designated characteristic. The data indicating the recommendation can be provided as at least a portion of a feed item of a feed of a social networking system.

Abstract: An on-demand database system that manages graphical representation in web pages may associate a first graphical representation in a first web page with a first event in a library of events. Each of the events in the library of events may be associated with a function. A second graphical representation in the first web page may also be associated with the first event. Based on detecting a triggering of the first event, the database system may cause a function associated with the first event to execute. The first graphical representation and the second graphical representation may be based on execution of the function associated with the first event.

Abstract: Techniques are disclosed relating to automating permission requests, e.g., in the context of multi-factor authentication. In some embodiments, based on a change in one or more automation criteria (e.g., based on a mobile device entering a particular geographic region) a mobile device is configured to preemptively indicate to an authorization system to automatically authorize a subsequent attempt to perform an action, without transmitting the permission request to the mobile device. The mobile device may later revoke the preemptive permission request, e.g., based on another change in automation criteria. Disclosed techniques may increase authorization security while reducing user interaction for multi-factor authentication, in some embodiments.

Abstract: A system may include multiple personal data sources and a machine-implemented data extractor and correlator configured to retrieve personal data from at least one of the personal data sources. The data extractor and correlator may extract information from unstructured data within the retrieved personal data and correlate the extracted information with previously stored structured data to generate additional structured data. The system may also include a storage device configured to store the previously stored structured data and the additional structured data. A natural language query module may be configured to receive a natural language query from a user and provide a response to the natural language query based at least in part on one or both of the previously stored structured data and the additional structured data.

Abstract: A system may include multiple personal data sources and a machine-implemented data extractor and correlator configured to retrieve personal data from at least one of the personal data sources. The data extractor and correlator may extract information from unstructured data within the retrieved personal data and correlate the extracted information with previously stored structured data to generate additional structured data. The system may also include a storage device configured to store the previously stored structured data and the additional structured data. A natural language query module may be configured to receive a natural language query from a user and provide a response to the natural language query based at least in part on one or both of the previously stored structured data and the additional structured data.

Abstract: The technology disclosed includes access to content and encryption key rotation in a multi-generational file system that has a first tier file, and automatically initializes a second tier file accessible using a same path and file name as the first tier file. The disclosed technology includes copying forward blocks of data from the first tier file to the second tier file, and prior to completion of the copying forward, responding to an access request by accessing the second tier file by providing data available from the second tier file that has been copied forward and by following links associated with the holes to access blocks in the first tier file to provide data from the first tier file. The first tier files are encrypted using a first encryption key; and applying a second encryption key to encrypt data in the second tier files during the copying forward and write access.

Abstract: An interaction manager assigns messages posted on a social media website to a support case in a database system. A support agent may tag a message posted by a user for directing to the support case. The interaction manger assigns the tagged message to the support case and activates a timer to track a time period. During the time period, the interaction manager assigns other messages posted by the same user to the support case. The interaction manager may reset the time period whenever the support agent replies to one of the messages posted by the user or the support agent tags another one of the user messages for directing to the support case. The interaction manager reduces the burden of having to manually review and manage every message posted on the social media website.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for sharing content via links. These mechanisms and methods for sharing content via links can enable customizable features associated with the operations related to those links. These features may include generating customized reports on usage of the links, and/or exposing one or more application programming interfaces (APIs) enabling applications to access the links and/or logic associated with operations related to those links.

Abstract: An error checking technique for database records. A record is selected and its entities are compared with the entities of other records stored in the database to determine a likelihood that the labels associated with the entities of the selected record are correct. The likelihood for each entity of the selected record being correctly labeled can be determined by comparing the number of times that the entity appears in the database records with that label to the number of times that the entity appears in the database records with any other label. If the likelihood does not exceed a threshold, then an error is likely, and action can be taken to correct the record.

Abstract: An adaptive multi-phase approach to estimating network parameters is presented. By gathering and aggregating raw network traffic data and comparing against default network parameters, a training data set may be generated. A black box optimization may be used in tandem with a supervised learning algorithm to bias towards better choices and eventually pick network parameters which optimize performance. Data delivery strategies are applied to deliver content using the optimized network policies based on the estimated parameters.

Abstract: Various computer-implemented systems and methods are provided here for purposes of smart messaging. A machine learning application can obtain message context data from a user device, and process the message context data to determine a predicted conversation pattern of the conversation that is taking place between the particular users. The message context data is indicative of context of a conversation taking place between particular users during a messaging session. Based on the predicted conversation pattern, the machine learning application can then determine options for suggested responses that are predicted to compete at least part of a response message as part of the conversation. Each of the options for suggested responses corresponds to the message context data indicative of the context of the conversation. In response to selection of one of the suggested responses, that suggested response can be displayed within a message field.

Abstract: During runtime of the software application, the runtime analysis framework may assign input tags to objects associated with the user requests. The input tags may identify the requests as potentially malicious and carry a security risk. The RTA framework then may assign sanitization tags to the objects identifying security checks performed on the objects during runtime. The RTA framework identifies output responses to the user requests that include the objects and compares the input tags assigned to the objects with any sanitization tags assigned to the objects. The RTA framework may identify the software application as susceptible to a security vulnerability when the input tags for the objects do not include corresponding sanitization tags.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for appending data to large data volumes in a multi-tenant store. These mechanisms and methods for appending data to large data volumes can enable embodiments to provide more reliable and faster maintenance of changing data. In an embodiment and by way of example, a method for appending data to large data volumes is provided. The method embodiment includes receiving new data for a database. The new data is written to a temporary log. The size of the log is compared to a threshold. Then the log is written to a data store, if the size of the log is greater than the threshold.

Abstract: The technology disclosed improves existing streaming processing systems by allowing the ability to both scale up and scale down resources within an infrastructure of a stream processing system. In particular, the technology disclosed relates to a dispatch system for a stream processing system that adapts its behavior according to a computational capacity of the system based on a run-time evaluation. The technical solution includes, during run-time execution of a pipeline, comparing a count of available physical threads against a set number of logically parallel threads. When a count of available physical threads equals or exceeds the number of logically parallel threads, the solution includes concurrently processing the batches at the physical threads. Further, when there are fewer available physical threads than the number of logically parallel threads, the solution includes multiplexing the batches sequentially over the available physical threads.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for combining updates of a social network feed. In some implementations, a feed of a social networking system can be configured to share feed items associated with an enterprise record. The feed items can include a first update associated with a first user. A first request to share a comment on the first update can be processed. A second request to share a first post in a feed can be processed. The first post can be related to the first update based on a first attribute conforming to a second attribute. A combined update can be generated based on the first post being related to the first update. The combined update can be displayed in a feed.