Abstract: A user interface is configured to present a stream of activities that arise from operation of two or more heterogeneous applications that access shared content objects of a content management system. A first application of a first type among the heterogeneous applications interoperates with a second application of a second type. Application activity records that correspond to interactions by the second application over the shared content objects are stored. Additional interactions that are raised by the first application and that pertain to a common content object are also stored. When a user requests access to a content object of the content management system, recent application activity records are selected. Some of the selected activity records are filtered out based on permissions attributes corresponding to the content object and/or based on permissions attributes corresponding to the requesting user. An application activity stream is generated based on the selected application activity records.

Abstract: A system for utilizing a remote server to transmit a message includes a user device including a controller, a memory coupled to the controller, and a database in communication with the remote server. The user device is in communication with the remote server. The controller is configured to generate a message based on data from the database, receive input from the user to send the message and a data file to a receiver, provide, through a user interface, a first option and a second option for sending the message and the data file to the receiver, and receive a selection from the user between the first option and the second option. If the user selects the first option, send the message and a data file using an email service provider. If the user selects the second option, send the message to the server through a network connection.

Abstract: Disclosed herein includes a system, a method, and a device for providing persistence across applications using a content switching server. A device can receive a first request from a client for a version of an application having different versions provided by one or more servers. The device can provide access to each version of the application via different load balancing virtual servers. A content switching virtual server of the device can select a load balancing virtual server to handle the first request for the version of the application. The content switching virtual server can generate a session identifier for a session between the client and the version of the application to persist the session with the selected load balancing virtual server for subsequent requests from the client for the version of the application.

Abstract: A method for providing and managing a top-level domain includes: (a) receiving a first domain name associated with a first object; (b) generating a “Whois” record associated with the received first domain name, the “Whois” record including a plurality of fields associated with the first domain name, the plurality of fields consisting of registration data required for creating the first domain name; (c) expanding the “Whois” record by adding one or more new fields associated with the first object to the “Whois” record, thereby linking the first domain name with the first object, wherein the one or more new fields comprises provenance information and metadata regarding the first object associated with the first domain name; and (d) creating a duplicate record of the “Whois” record in a blockchain system that is linked to the “Whois” record, wherein any changes in the “Whois” record is synced to the duplicate record.

Abstract: Methods, apparatus, and systems for incorporating a dynamic interface into an expandable network device. A section of memory of the expandable network device is partitioned for the dynamic interface and the dynamic interface is loaded into the partitioned section of the memory. A hardware interface of the expandable network device is configured to communicate with the dynamic interface under a control of the dynamic interface; and a communication channel is established between a network interface of the expandable network device and the hardware interface of the expandable network device via the dynamic interface.

Abstract: An integrated circuit (IC) device includes a network device including a first network port, a second network port, and an internal endpoint port. The IC device further includes a first processing unit including an internal end station. The first processing unit is configured to communicate with the network device using the internal endpoint port. The IC device further includes a second processing unit including a bridge management layer. The second processing unit is configured to communicate with the network device using the internal endpoint port. In various embodiments, the first processing unit and the second processing unit are configured to communicate with each other using a first internal channel.

Abstract: Embodiments herein relate to out-of-band connections for remote diagnosis and repair of client devices. In various embodiments, a server for remote management of a client device may receive, a network packet including a request for a keyboard-video-mouse (KVM) remote management session that includes an identifier of a gateway device coupled to a local area network (LAN) of the client device to be remotely managed by the server. The server may use the identifier of the gateway device to assist in invoking an out-of-band (OOB) connection between the client device and the gateway device. Other embodiments may be described and/or claimed.

Abstract: A method includes sending, from a portable computing device to a media device, first data indicating media content provided to a display device when a particular local area network was not accessible to the portable computing device. The media device generates or updates a user profile based on the first data and causes a first media content item to be recorded based on the user profile. The method includes receiving, from the media device via the particular local area network, a notification identifying the first media content item and a storage size associated with the first media content item. The method also includes, in response to determining that a pre-cache memory does not have available capacity to store the first media content item based on the storage size, deleting a second media content item from the pre-cache memory and storing the first media content item at the pre-cache memory.

Abstract: Methods, computer program products, and/or systems are provided that can perform the following operations: receiving a connection request from a first user device; creating an authentication container for the first user device; authenticating the first user device using the authentication container; in response to authentication for the first user device being successful, creating a first user request processing container for the first user device; and processing user requests received from the first user device using the first user request processing container.

Abstract: A method for executing an application on a distributed system architecture having an application client for receiving input data and for providing output data; a local application server on the application client; at least one remote application server for receiving input data from the application client for processing input data for the application client and for returning processed input data to the application client; and an application manager for assigning the application to the local application server or to the at least one remote application server. The method includes determining a first round-trip time, determining a second round-trip time, determining a tolerance time for receiving and processing input data for the application, comparing the two round-trip times with the tolerance time, and assigning the application to the local application server or to the at least one remote application server based on the comparison.

Abstract: Methods and apparatus to share online media impression data are disclosed. An example apparatus includes a communications interface; and a web browser to send a first request to an audience measurement entity via the communications interface; and send a second request via the communications interface to cause a database proprietor to send to the audience measurement entity a cookie mapping of an audience measurement entity cookie to a database proprietor cookie corresponding to a client.

Abstract: Certain embodiments of this disclosure describe techniques for detecting a spoofed network device and preventing the serving of content, such as advertisements, to the spoofed network device. In certain embodiments, a network security system is provided. The network security system can include hardware and/or software programmed to prevent the provision of content to a spoofed client device. The network security system can provide a mechanism for certifying to content providers, such as advertisers, whether or not a client is a legitimate mobile device or a spoofed device. Accordingly, content providers can prevent the delivery of content to fraudulent devices instead of relying on imprecise solutions that detect fraudulent activity after it has occurred.

Abstract: A disclosed example to determine a migration recommendation of a service between geographic regions includes: a graph generator to generate an interaction graph, the interaction graph including first and second nodes and an edge therebetween, the first node representative of a first service in a first geographic region, the second node representative of a second service in a second geographic region, and the edge representative of a network path of interactions between the first and second services; a weighing engine to determine a weight value of the edge between the first and second services based on a count of network interactions between the first and second services and a real-time latency between the first and second services; and a recommendation engine to generate a migration recommendation to migrate the first service to the second geographic region based on the weight value of the edge.

Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.

Abstract: A memory record of a knowledge management tool stores data lineage criteria. A processor of the knowledge management tool receives a request to change one or more of a configuration of a server, a code of a hosted application, and a configuration of the hosted application. The processor determines whether a misalignment is detected associated with the requested change being outside at least one of the predefined ranges of values for server configuration data and application configuration data of the data lineage criteria. If the misalignment is not detected, the requested change is allowed to be implemented in one or both of the server and the hosted application. If the misalignment is detected, an alert is provided to an administrator device. If a response to the alert indicates to implement the requested change, implementation of the requested change is allowed. Otherwise, implementation of the requested change is prevented.

Abstract: Described embodiments provide systems and methods for learning across multiple application delivery controllers and updating settings across the application delivery controllers. A profile can be generated based on selection of a set of intermediary devices managed by a device. The set of intermediary devices configured to load balance data of an application hosted in different computing environments. Activity can be identified at the intermediary devices with use of a firewall. The activity having an appearance of a malicious attack on at least one intermediary device of the set. The device can determine if the activity is permissible or a violation based on a comparison of an aggregation of data records for the identified activity and a threshold. The device can provide a notification to at least one intermediary device of the set to configure the at least one intermediary device to allow the activity or prevent the activity.

Abstract: Techniques are provided for identifying and deleting idle remote sessions in a distributed file system. In an example, a server that serves a plurality of server message block (SMB) sessions analyzes those sessions to determine which sessions are idle. Of the idle sessions, the server can determine which possess a lock on a computer file. Where another, active session is waiting for that resource, the server can terminate the idle session and release the lock so that the active session acquires access to the requested computer file.

Abstract: A database protection system (DPS) is configured to dynamically-optimize security rule validation throughput based on evaluating resource consumption data collected from prior validations. In particular, the DPS analyzes collected resource consumption information and determines which security rules in a set should then be active. To this end, the DPS is configured with multiple security rules engines (SREs), and each is configured to evaluate the same set of security rules. When an SRE applies a validation (to a request or response flow), an associated collector collects and analyzes associated resource consumption data. This data is provided to an optimizer, which receives similar resource consumption data from other SREs. Based on the resource consumption data collected from the SRE collector(s), the optimizer dynamically optimizes security rules validation in real-time, e.g., by dynamically switching on or off given security rule(s) in the set of security rules at given one(s) of the SREs.

Abstract: Techniques for dynamic resource movement in heterogeneous computing environments including provider substrate extensions are described. A dynamic resource movement service of a provider network monitor conditions of heterogeneous computing environments, including provider substrate extensions of the cloud provider network, to evaluate customer-provided movement policy conditions governing when to move customer application resources from these environments, where to move the resource to, and/or how to move the customer application resources. The customer-provided movement policy conditions may be based on a variety of factors, such as a latency between end-users of the customer application and the application itself.

Abstract: A system and methods are provided for aggregating communication connections. Multiple users connect to a system (e.g., a web-based system) that hosts an application or service for exchanging communications. Users who exchange communications among themselves may be considered “associates.” When one user who is on-line with the application sends a communication through the system for an associate, the system determines whether the associate is on-line or off-line. If the associate is off-line, the system crafts and sends toward the associate a notification regarding the communication, including an address of the communication server to which the one user is connected. When the associate's device receives the notification, the application may attempt to connect to the specified address. In this way associated users' connections will aggregate or gravitate toward the same communication server, thereby eliminating the latency and cost of exchanging users' communications between multiple communication servers.