Abstract: A display article is described herein that includes: a substrate comprising a thickness and a primary surface; a textured surface region; and an antireflective coating disposed on the textured surface region. The textured surface region comprises structural features and an average texture height (Rtext) from 50 nm to 300 nm. The substrate exhibits a sparkle of less than 5%, as measured by PPD140, and a transmittance haze of less than 40%, at a 0° incident angle. The antireflective coating comprises alternating high refractive index and low refractive index layers. Each of the low index layers comprises a refractive index of less than or equal to 1.8, and each of the high index layers comprises a refractive index of greater than 1.8. The article also exhibits a first-surface average photopic specular reflectance (% R) of less than 0.3% at any incident angle from about 5° to 20° from normal at visible wavelengths.

Abstract: A component connector is positioned in downhole tool. The downhole component includes a bulkhead and a receiver positioned in a housing. The component connector includes a contact member positioned in the bulkhead and a connector member in a receiver of the downhole tool. The contact member has an elongate body with a coupling end and a contact end. The connector member has another elongate body having a coupler end and a receptacle end. The connector member has an engager positioned about an outer surface of the connector member to provide selective engagement with the receiver. The coupling end of the contact member and the coupler end of the connector member are connected to electronics in the housing and wherein the receptacle end of the contact member is shaped to electrically receive the contact end of the contact member whereby electronics in adjacent components of the downhole tool are electrically coupled.

Abstract: A repair prosthetic for repairing a hernia is disclosed. In some embodiments, the repair prosthetic includes a patch body, a frame that assists in spreading the patch body from a reduced configuration to an expanded configuration, and a plurality of tethers attached to the patch body at locations between the frame and a periphery of the patch body. In various embodiments, the tethers can be tensioned to mitigate curling or creasing in the patch body to flatten the patch to facilitate attachment to tissue.

Abstract: A display article is described herein that includes: a substrate comprising a thickness and a primary surface; and the primary surface having defined thereon a diffractive surface region. The diffractive surface region comprises a plurality of structural features that comprises a plurality of different heights in a multimodal distribution. Further, the substrate exhibits a sparkle of less than 4%, as measured by pixel power deviation (PPD140) at an incident angle of 0° from normal, a distinctness of image (DOI) of less than 80% at an incident angle of 20° from normal, and a transmittance haze of less than 20% from an incident angle of 0° from normal.

Abstract: An apparatus for hardening waste resin is disclosed herein. The apparatus includes a container for holding the waste resin, the container having an outlet. The apparatus may also have a container pivot about which the container may rotate to a tilt position that allows waste resin to flow out of the outlet under the force of gravity, over a comb with a plurality of teeth. The teeth are constructed to separate the waste resin into waste resin droplets under the force of gravity. A conveyor surface is positioned below the comb to receive the waste resin droplets, and the conveyor surface moves as it receives the waste resin droplets. A plurality of UV lights is positioned to illuminate the conveyor surface and cause the waste resin droplets thereon to harden. The conveyor surface may be removable.

Abstract: Systems and methods for network security are provided. Various embodiments issue single use certificates for validating remote endpoints access to the private network. Some embodiments use a triage zone (or triage gateway) to which remote device can calls into using a static issued certificate. However, instead of granting complete access to the virtual private network, the use of this static certificate only grants access to the triage zone where further validation of the endpoint without any access to sensitive content on the private network. The endpoint can be connected to an ID manager within the triage zone. The endpoint can then send the username and password to the ID manager that can create a single use certificate (e.g., valid for a limited period of time). While valid, the single use certificate can be used by the remote device to gain access to the production zone using a VPN tunnel.

Abstract: The disclosed technology is generally directed to communications in an IoT environment. In one example of the technology, a plurality of module twins that respectively correspond to a plurality of modules of edge applications on a plurality of edge devices are stored. The plurality of module twins individually include metadata associated with the corresponding module of the plurality of modules. At least one module of the plurality of modules to be modified by adding a declarative rule is determined, such that the declarative rule causes determining whether an event has been triggered based on a particular event having been determined to have occurred, and, in response to the triggering of the event, communicating the triggering of the event to at least one declarative target. The determined at least one module of the plurality of modules is caused to be modified by adding the declarative rule.

Abstract: Systems and methods for network security are provided. Various embodiments issue single use certificates for validating remote endpoints access to the private network. Some embodiments use a triage zone (or triage gateway) to which remote device can calls into using a static issued certificate. However, instead of granting complete access to the virtual private network, the use of this static certificate only grants access to the triage zone where further validation of the endpoint without any access to sensitive content on the private network. The endpoint can be connected to an ID manager within the triage zone. The endpoint can then send the username and password to the ID manager that can create a single use certificate (e.g., valid for a limited period of time). While valid, the single use certificate can be used by the remote device to gain access to the production zone using a VPN tunnel.

Abstract: An energy recovery ventilation device includes a housing having a first side, a second side opposite the first side. The device also includes at least one first channel within the housing, and at least one second channel within the housing. The device includes a first inlet and a first outlet. The first inlet is fluidly coupled to the first outlet via the first channel. The device also includes a second inlet and a second outlet. The second inlet is fluidly coupled to the second outlet via the second channel. The device includes a first cover supported by the first side of the housing. The first cover is made of a first material. The device also includes a second cover supported by the second side of the housing. The second cover is made of a second material that is different than the first material.

Abstract: Various embodiments of the present technology use a combination of static and rotating access credentials to access target devices. Some embodiments start with a multi-factor authentication (MFA) token that can be used to log into the platform head-end. If approved, a landing page requesting login credentials can be presented to the user. The user can provide a username and password via landing page and select a PAM or CASB target. The system then issues a secondary access credential (e.g., a pin/token) that is unknown to the user and is placed into a vault. A dynamic credential can be dynamically generated at each request. The target device can use the static access credential from the vault and the dynamic access credential for access to the device. As such, even if the vault is comprised, the target device would be inaccessible without the dynamic token which constantly changing.

Abstract: Disclosed herein are hybrid materials including a polyvinyl alcohol component combined with a filler. The filler may be one or more of crystalline nanocellulose and chitin nanofibers. The hybrid materials may also include water, and in such cases are designated hydrogels. The hybrid materials may be substantially free of solvents including water, and in such cases are designated aerogels.

Abstract: Systems and methods for network security are provided. Various embodiments of the present technology provide an integrated security platform that combines PAM, CASB, identity access management, and multi-factor authentication onto one platform. This integration allows for a frictionless deployment that can be utilized by companies that may not have large teams of system administrators. As such, some embodiments provide a gateway solution and a proxy solution that is easy to deploy. The user equipment (e.g., computer, phone, point of sale terminal, etc.) can be used as a gateway. An agent can be included on each endpoint that combines gateway functionality of PAM and web rewrite and proxy functionality of a CASB deployment into an endpoint solution.

Abstract: The disclosed technology is generally directed to communications in an IoT environment. In one example of the technology, a plurality of module twins that respectively correspond to a plurality of modules of edge applications on a plurality of edge devices are stored. The plurality of module twins individually include metadata associated with the corresponding module of the plurality of modules. A plurality of services is executed, such that the services of the plurality of services are configured to communicate with the modules of the plurality of modules. At least one service to be executed as a further module on at least one edge device of the plurality of edge devices is determined. The further module is caused to be deployed to the at least one edge device of the plurality of edge devices. Execution of the determined at least one service is ceased.

Abstract: A method for an escrow computing service comprises maintaining ownership information for a network-configurable device having a unique digital device identifier, the ownership information indicating ownership of the device by a first online identity of a first owner, the ownership information granting access permission for the network-configurable device. The escrow computing service receives a request to transfer ownership of the network-configurable device to a second online identity of a second owner. The ownership information is updated to indicate ownership of the network-configurable device by the second online identity of the second owner. The escrow computing service receives an indication of a network-accessible device management platform to be used to manage the network-configurable device.

Abstract: Systems and methods for network security are provided. Various embodiments of the present technology provide an integrated security platform that combines PAM, CASB, identity access management, and multi-factor authentication onto one platform. This integration allows for a frictionless deployment that can be utilized by companies that may not have large teams of system administrators. As such, some embodiments provide a gateway solution and a proxy solution that is easy to deploy. The user equipment (e.g., computer, phone, point of sale terminal, etc.) can be used as a gateway. An agent can be included on each endpoint that combines gateway functionality of PAM and web rewrite and proxy functionality of a CASB deployment into an endpoint solution.

Abstract: The systems and methods relate to an internet of things (IoT) system that includes a global IoT connectivity fabric to facilitate communications between a plurality of applications that provide services to one or more IoT devices. The global IoT connectivity fabric may include a plurality of global IoT connectivity fabric nodes that establish communication channels between the applications and the IoT devices. The global IoT connectivity fabric may implement a channel architecture where the IoT devices declare one or more channels for sending and/or receiving communications. The applications may subscribe to the one or more channels declared by the IoT devices and may communicate with the IoT devices through the one or more channels.

Abstract: Systems and methods for network security are provided. Various embodiments issue single use certificates for validating remote endpoints access to the private network. Some embodiments use a triage zone (or triage gateway) to which remote device can calls into using a static issued certificate. However, instead of granting complete access to the virtual private network, the use of this static certificate only grants access to the triage zone where further validation of the endpoint without any access to sensitive content on the private network. The endpoint can be connected to an ID manager within the triage zone. The endpoint can then send the username and password to the ID manager that can create a single use certificate (e.g., valid for a limited period of time). While valid, the single use certificate can be used by the remote device to gain access to the production zone using a VPN tunnel.

Abstract: Systems and methods for network security are provided. Various embodiments issue single use certificates for validating remote endpoints access to the private network. Some embodiments use a triage zone (or triage gateway) to which remote device can calls into using a static issued certificate. However, instead of granting complete access to the virtual private network, the use of this static certificate only grants access to the triage zone where further validation of the endpoint without any access to sensitive content on the private network. The endpoint can be connected to an ID manager within the triage zone. The endpoint can then send the username and password to the ID manager that can create a single use certificate (e.g., valid for a limited period of time). While valid, the single use certificate can be used by the remote device to gain access to the production zone using a VPN tunnel.

Abstract: The disclosed technology is generally directed to communications in an IoT environment. In one example of the technology, a plurality of module twins that respectively correspond to a plurality of modules of edge applications on a plurality of edge devices are stored. The plurality of module twins individually include metadata associated with the corresponding module of the plurality of modules. At least one module of the plurality of modules to be modified by adding a declarative rule is determined, such that the declarative rule causes determining whether an event has been triggered based on a particular event having been determined to have occurred, and, in response to the triggering of the event, communicating the triggering of the event to at least one declarative target. The determined at least one module of the plurality of modules is caused to be modified by adding the declarative rule.

Abstract: The disclosed technology is generally directed to communications in an IoT environment. In one example of the technology, a plurality of module twins that respectively correspond to a plurality of modules of edge applications on a plurality of edge devices are stored. The plurality of module twins individually include metadata associated with the corresponding module of the plurality of modules. At least one module of the plurality of modules to be modified by adding a declarative rule is determined, such that the declarative rule causes determining whether an event has been triggered based on a particular event having been determined to have occurred, and, in response to the triggering of the event, communicating the triggering of the event to at least one declarative target. The determined at least one module of the plurality of modules is caused to be modified by adding the declarative rule.