Abstract: Various aspects include methods of compensating for issues caused by charge sharing between pixels in pixel radiation detectors. Various aspects may include measuring radiation energy spectra with circuitry capable of registering detection events occurring simultaneous or coincident in two or more pixels, adjusting energy measurements of simultaneous-multi-pixel detection events by a charge sharing correction factor, and determining a corrected energy spectrum by adding the adjusted energy measurements of simultaneous-multi-pixel detection events to energy spectra of detection events occurring in single pixels. Adjusting energy measurements of simultaneous-multi-pixel detection events may include multiplying measured energies of simultaneous-multi-pixel detection events by a factor of one plus the charge sharing correction factor.

Abstract: A system for implementing mixed protocol certificates, the system includes a subject device designed and configured to receive, from an issuing device, a first digital certificate, wherein the first digital certificate further comprises a first digital signature public and private key pair according to a first digital signature protocol and a second digital signature public key according to a second digital signature protocol, wherein the second digital signature protocol is distinct from the first digital signature protocol, to generate a second digital certificate, wherein generating the second digital certificate comprises generating a subject digital signature signing the certificate, the subject digital signature generated as a function of the second digital signature protocol and to provide the first digital certificate and the second digital certificate to a verifying device.

Abstract: A first message of a first type and having a first destination address is received in a provider network. The first destination address is associated with a virtual network address of the provider network and an address of a first device in an extension of the provider network, the extension of the provider network in communication with the provider network via at least a third-party network. A message state data store is updated based on at least a portion of the first message. A first payload of the first message is sent to the first device a first secure tunnel through the third-party network.

Abstract: Disclosed systems and methods implement a tracking system that tracks accesses to a TPM-secured key. In embodiments, the key may be encrypted using an encryption key, which is sealed using the TPM. A first value indicating an initial access state of the key is stored in a PCR of the TPM, and the encryption key is sealed against the PCR, so that it can be unsealed when contents of PCR match a next value derived from the first value. When the key is accessed, contents of the PCR is verified against an expected access state. If successfully verified, the PCR is extended hold the next value, the encryption key is unsealed, and the key decrypted. With each access, the encryption key is repeatedly resealed against the successive states stored in PCR. In this manner, the PCR may be used to track accesses and detect unauthorized accesses to the key.

Abstract: An entangling projectile includes a pair of pellets and a tether connecting the pellets. The pellets each have a head portion and a tail portion. At least one gasket is carried by the head portion of at least one of the pellets. The gasket is operable to provide a sealed interface between the head portion of the at least one pellet and a socket within which the at least one pellet is fired from a launcher.

Abstract: The present invention provides methods, devices, and kits to improve procedures for reducing carbohydrates, such as glycans released from glycoconjugates, or for labeling carbohydrates by reductive amination.

Abstract: Techniques for monitoring a computing environment for anomalous activity are presented. An example method includes receiving a request to invoke an action within a computing environment, with the request including a plurality of request attributes and a plurality of contextual attributes. A normalcy score is generated for the received request by encoding the received request into a code in latent space of an autoencoder, reconstructing the request from the code, and generating a probability distribution indicating a likelihood that the reconstructed request attributes exist in a data set of non-anomalous activity. Based on the calculated normalcy score, one or more actions are taken to process the request such that execution of non-anomalous requests is allowed, and execution of potentially anomalous requests may be blocked pending confirmation.

Abstract: The present disclosure relates to caches, methods, and systems for using an invalidation data area. The cache can include a journal configured for tracking data blocks, and an invalidation data area configured for tracking invalidated data blocks associated with the data blocks tracked in the journal. The invalidation data area can be on a separate cache region from the journal. A method for invalidating a cache block can include determining a journal block tracking a memory address associated with a received write operation. The method can also include determining a mapped journal block based on the journal block and on an invalidation record. The method can also include determining whether write operations are outstanding. If so, the method can include aggregating the outstanding write operations and performing a single write operation based on the aggregated write operations.

Abstract: Techniques for optimizing disk volume scanning using snapshot metadata are described. A method of optimizing disk volume scanning using snapshot metadata may include determining, by a scanning service of a provider network, a plurality of changed blocks between a current snapshot of a storage volume in a storage service of the provider network and a reference snapshot of the storage volume, determining one or more files that overlap at least one of the plurality of changed blocks, and scanning the one or more files for threats.

Abstract: Techniques for performing multimedia communications including audio and video (including still-frame video) are described. During a multimedia communication involving two devices, one of the devices may receive a user input to display digital book covers. In response, each device may display live video (captured by each device of the multimedia communication) and still-frame video corresponding to digital book covers. Thereafter, in response to a further user input, each device may display the live video and still-frame video corresponding to a specific page of one of the digital books. Each device may receive a user input for controlling the still-frame video displayed.

Abstract: Technologies directed to a wireless network device with a single hardware architecture that supports multiple devices roles through software configuration are described. One wireless network device includes a housing with an RF connector and a circuit board with a first radio coupled to an internal antenna and a second radio coupled to an external antenna via the RF connector. The second antenna is mounted on an exterior surface of the building and coupled to the RF connector via an RF cable. The wireless network device establishes a first wireless link between the first radio and a radio of a second device via the first antenna and a second wireless link between the second radio and a radio of a third device via the second antenna. The second device can be a second wireless network device that is programmed to operate as a gateway, the gateway being mounted outside of the building.

Abstract: Disclosed herein is software technology that enables different accounts to be mirrored. In one aspect, the disclosed process may involve determining that an origin data record created under a first account of a first party is to be mirrored to a second account of a second party, generating a thread identification that is mapped to the data record created under the first account of the first party, and generating a first message that comprises data from the origin data record and the thread identifier that is mapped to the origin data record. Based on the first message, the disclosed process may further involve creating a target data record under a second account of a second party that corresponds to the origin data record created under the first account of the first party and storing the target data record under the second account of the second party.

Abstract: Provided is an apparatus for providing skipping of advertising content based on video recognition, the apparatus including a controller configured configured to control video recognition for providing skipping of advertising content of an advertising-based OTT receiving platform; a video recognition model executor configured to synchronize a target image with a video frame analyzer; the video frame analyzer configured to transmit information about the target image to a reception advertising controller; the reception advertising controller configured to generate a plurality of control signals according to a type of the target image and to transmit the plurality of control signals to a media playback unit or a media reception processing unit; the media playback unit configured to control a pop-up banner advertisement or media stream playback according to the control signal; and the media reception processing unit configured to control reception of the data according to the control signal.

Abstract: Techniques for generating rules from documentation are described. For example, a method for generating rules may include generating one or more rules from documentation by: extracting a plurality of chunks from the documentation, inferring one or more candidate rules from the extracted chunks, mining the inferred one or more candidate rules to determine at least one of the one or more candidate rules is to be included in rule generation, classifying the at least one mined one or more candidate rules as one or more rules, and extracting information to generate the one or more rules.

Abstract: Storage device programming methods, systems and devices are described. A method may generate a mapping of data based on a set of data, the mapping of data including a first mapped data and a second mapped data. The method may include performing a first programming operation to write, in a first mode, the first mapped data to the memory device. The method may include storing the second mapped data to a cache. The method may include generating a second set of data, based on an inverse mapping of the mapping of data including the second mapped data from the cache and the first mapped data from the memory device, for writing, in a second mode, to the memory device, wherein the second set of data includes the set of data, and the first mode and the second mode correspond to different modes of writing to the memory device.

Abstract: Techniques for an optimization service of a service provider network to help optimize the selection, configuration, and utilization, of virtual machine (VM) instance types to support workloads on behalf of users. The optimization service may implement the techniques described herein at various stages in a life cycle of a workload to help optimize the performance of the workload, and reduce underutilization of computing resources. For example, the optimization service may perform techniques to help new users select an optimized VM instance type on which to initially launch their workload. Further, the optimization service may monitor a workload for the life of the workload, and determine new VM instance types, and/or configuration modifications, that optimize the performance of the workload. The optimization service may provide recommendations to users that help improve performance of their workloads, and that also increase the aggregate utilization of computing resources of the service provider network.

Abstract: A system for a cryptographic agile bootloader for upgradable secure computing environment, the cryptographic agile bootloader comprising a computing device associated with a first bootloader is presented. The computing device includes a secure root of trust, the secure root of trust configured to produce a first secret and a second secret and a processor. The processor is configured to load a second bootloader, wherein the second bootloader is configured to generate a secret-specific public datum as a function of the second secret, wherein the secret-specific public datum further comprises a bootloader measurement, load a first bootloader, wherein the first bootloader is configured to sign the secret-specific public datum as a function of the first secret, and replace the first bootloader with the second bootloader.