Abstract: Users consume media in a variety of ways. Media may be consumed primarily for the audio, primarily for the video, or for a combination of the audio and the video. The selection and serving of a content item may be performed such that a content item profile of the served content item that matches how the media is being consumed may be preferred during selection by a content selection service. The selection of a content item by the content selection service may be based on an aggregate view profile for the media and a content item profile for a candidate content item. In some instances, a current view profile may also be used. The selected content item may be served to effect presentation of the selected content item with the media.

Abstract: In cases where a user of a social network has lost access to one or more email addresses on file with the social network, the social network may confirm an identity of the user before issuing a new password. The social network may confirm the identity of the user by prompting the user to correctly identify pictures of members of the social network that are connected to the user, selecting or receiving a selection of a plurality of trustees (e.g., members of the social network who are connected to the user), prompting the trustees to confirm with the user that the user has lost the access, and receiving notification that at least a specified number of the trustees have confirmed with the user that the user has lost the access. After the social network confirms the identity, the social network may provide a new password to the user.

Abstract: In one embodiment, a method includes causing a real-time performance dashboard to be displayed, wherein the real-time performance dashboard comprises a time-indexed line that represents a status of at least one monitored system over time, wherein the status is determined, at least in part, as a composite of a plurality of time-series performance metrics. The method further includes receiving, for a time interval, new values of at least a portion of the time-series performance metrics. The method additionally includes, responsive to a determination that at least one performance event has occurred during the time interval, causing a portion of the time-indexed line which corresponds to the time interval to graphically indicate instability. Further, the method includes, responsive to a determination that no performance event has occurred during the time interval, causing the portion of the time-indexed line which corresponds to the time interval to graphically indicate stability.

Abstract: Methods and apparatus for monitoring workfiles are disclosed. An authorized user or system programmer may input workfile threshold values and other monitoring information into a configuration file. A server reads the configuration file and starts traces to monitor workfile usage in a system. The server may continuously monitor the system to determine whether workfile usage in the system reaches workfile threshold values set in the configuration file. The server may list SQL queries using workfiles and then alert the system programmer when the threshold values are reached and is capable of reclaiming disk space by dropping and recreating overgrown workfiles with their original definitions.

Abstract: A monitoring arrangement (1) for use with a computer network. The arrangement (1) comprises a filtering module (7) which is operable to filter content delivered to a device connected to the network and to generate filtering data indicative of content filtered by the filtering module (7). The arrangement (1) further comprises a connectivity detection module (6) which is operable to detect the connectivity of a device connected to the network and to generate connectivity data indicative of the connectivity of the device. The arrangement (1) is operable to detect when a new device is connected to the computer network and to examine the new device to determine whether the new device is a trusted device. If the new device is not a trusted device then the monitoring arrangement (1) alerts a user to the attempted access by the untrusted device. The monitoring arrangement (1) is also operable to improve the performance of the computer network.

Abstract: Systems and methods for account specific login throttling are provided. A user with a user account may submit a request to a server regarding download of an application onto one or more user devices associated with the server. The server may determine that the current load of request is more than it handle, assign a number to the request, and send a responsive message includes information about when the application will be made available to the user account for download. Once the allotted number is called and the server is ready to make the application available to the user account, the server may send notification to the user. account. The user may then download the application onto the one or more client devices associated with the user account.

Abstract: A load balancer is provided that can direct Internet Protocol Security (IPsec) traffic received from a single IPsec tunnel initiator to one of a plurality of endpoints provided Virtual Private Network (VPN) gateways in a network. The load balancer uses IP (Internet Protocol) addresses and SPIs (Security Parameter Identifier) to identify an endpoint responsible for processing particular packets for the VPN. Messages received at the load balancer from the endpoints are utilized to map endpoints responsible for processing packets having a particular IP address and SPI for forwarding IPsec traffic to the correct endpoint.

Abstract: One or more examples provide a method of transferring a virtual machine between a virtualized computing system and a cloud computing system that includes: establishing connection between a first resource in the virtualized computing system and a second resource in the cloud computing system to transfer files that implement the virtual machine from the first resource to the second resource; accessing, for transmission over the connection, data blocks on a storage device in the virtualized computing system that include the files; executing at least one compliance check on each of the data blocks using at least one compliance checker; and preventing each of the data blocks that fails a compliance check from being maintained in the cloud computing system.

Abstract: A of a method of securely transferring information between execution environments includes: receiving, at a crypto engine, original plaintext from a first execution environment; obtaining a first cryptographic key by the crypto engine, the first cryptographic key being retained in memory such that the first cryptographic key is associated with the first execution environment and a second execution environment that is not the first execution environment; encrypting the original plaintext by the crypto engine using the first cryptographic key to produce encrypted information, and storing the encrypted information in an intermediate storage location; obtaining, at the crypto engine, the encrypted information from the intermediate storage location; decrypting the encrypted information by the crypto engine using the first cryptographic key to produce reconstituted plaintext; and making the reconstituted plaintext available to the second execution environment by the crypto engine.

Abstract: Systems are provided to enable users of a streaming media playback system to share playlists. A user can select a first play-list corresponding to a play-list identifier and can use the messaging component executable from a first playback interface to send a message to a second user that allows the second user to playback the selected play-list. The play-list identifier may be packaged with arguments or other coding. The system further includes a streaming media clips rating system that includes a database management component that maintains an organizational data structure describing rating information for media resources, and a dynamic playlist generator adapted to automatically and dynamically generate at least one play-list for a user based on rating information in the organizational data structure comprises identifiers of one or more media resources that have similar attributes to one or more media resources that have received a positive rating selection from a user.

Abstract: Systems, methods, and software described herein provide encryption configurations to application containers. In one example, a method of operating a management system to provide VPN configurations to application containers in an application container environment includes identifying two application containers in the application container environment for secure communication, and identifying a VPN configuration for the two application containers. The method further includes configuring the two application containers for secure communication by transferring the VPN configuration to security layers within each of the two application containers.

Abstract: A software widget running on a user device may be designed to operate in a locked or an unlocked mode. In unlocked mode, the user has full interactivity with the widget. In locked mode, however, at least some of the interactivity with the widget is restricted, despite the fact that the widget still operates normally otherwise while in the locked mode. While in locked mode, user input may be compared against a predefined unlocking sequence to determine if the widget should be unlocked.

Abstract: A system and method can support on-device operation management. A token issuer on a backend server, and/or a tool, can generate an authorization token, which is bound to a user of one or more devices using a unique identifier (ID) that is assigned to the user. The unique ID can be known and/or shared between the an on-device authorizing entity and the token issuer. Then, the on-device authorizing entity can verify the authorization token before granting an execution of one or more protected on-device operations. Furthermore, the on-device authorizing entity may not grant the execution of the one or more protected on-device operations, when the unique ID is erased from the device.

Abstract: A mechanism for providing centralized message notification for user interface. disclosed. A method includes intercepting a plurality of message notifications. The plurality of message notifications are generated in an operating system and an application. The method also includes comparing content of a message corresponding to one of the plurality of message notifications with a plurality of regexp based rules. Each of the regexp based rules comprise a condition that is regexp based. When the content of the message matches with a matching regexp based rule of the plurality of regexp based rules, determining whether the condition in the matching regexp based rule is associated with a black list rule. The black list rule comprises excluding one or more of the message notifications among the plurality of message notifications indicated by a user to be displayed at a user device.

Abstract: The present invention provides an encryption and decryption method and device. In the method, a first optical transport network (OTN) transport device encrypts, according to an initial vector (IV), a key, and an encryption algorithm that are preset, data received by the first OTN transport device, and sends the IV and the encrypted data to a second OTN transport device; and the second OTN transport device receives a value of a high-order counter in the IV and the encrypted data that are sent by the first OTN transport device, where the encrypted data is data encrypted by using the IV, the preset key, and the encryption algorithm, and decrypts the encrypted data according to the preset key, the IV, and a decryption algorithm corresponding to the encryption algorithm.

Abstract: Systems and methods for asynchronous processing of messages that are received from multiple servers.

Abstract: Disclosed are an apparatus and method for providing a digital signature. The apparatus includes a certificate unit, an input unit receives a selection input for a certificate related to signature content received from a signature-requesting terminal, and a control unit for determining whether the certificate unit is capable of performing a digital signature function corresponding to a selected certificate. If the certificate unit is capable of performing the digital signature function, the certificate unit creates a digital signature based on a private key corresponding to the selected certificate when the control unit commands the certificate unit to create a digital signature. Further, if the certificate unit is not capable of performing the digital signature function, the control unit creates a digital signature based on a private key corresponding to a certificate selected from the certificate unit. The control unit transmits the digital signature to the signature-requesting terminal.

Abstract: An information processing apparatus includes plural communication interfaces, a storing unit, an acquisition unit, and a selection unit. The plural communication interfaces are connected to plural communication networks that are independent of each other, and receive data from a terminal connected to the communication network and transmit data to the terminal on the basis of positional information that indicates a position of the terminal on the communication network. The storing unit stores correlation information including correlation between a user of the terminal at the time when data are received from the terminal and one of the plural communication interfaces that is used. The acquisition unit acquires user information that indicates a user that commands transmission of data to the terminal. The selection unit selects one of the plural communication interfaces on the basis of the correlation information and the user information.

Abstract: An online system transmits third-party content originating from a third-party system to a client device. The third-party content includes a pointer to a third-party application associated with the third-party system. When the client device receives an interaction with the third-party content from a user of the client device, the client device executes the third-party application and generates an attribution identifier from which the user's identity cannot be determined. The attribution identifier is transmitted to the online system. Subsequently, the client device determines information describing interactions by the user with the third-party application that is transmitted to the third-party system along with the attribution identifier.

Abstract: A packet-forwarding network node can process a programmable packet based on a reputation value for a name prefix to perform a customized operation on a local resource. The programmable packet can include a name prefix, and a header comprising reputation criteria for the packet's name prefix and one or more resource fields. A resource field can include instructions that perform an operation on a corresponding resource of the network node. When the network node receives the programmable packet, the node determines a reputation value for the name prefix at the local node, and compares this reputation value to the packet's reputation criteria. If the reputation value for the name prefix at the local node satisfies the reputation criteria, the node proceeds to execute the one or more instructions of the respective resource field to perform the operation on the corresponding resource.