Abstract: Techniques are disclosed relating to load balancing across server systems that communicate using end-to-end encryption. In various embodiments, a load balancer receives a first request from a client device to access one of a plurality of server systems providing a resource and communicating using end-to-end encryption. The load balancer provides, to the client device, a first set of public-key attestations for a first subset of the plurality of server systems. A given one of the public-key attestations includes a public key of one of the first subset of server systems. The load balancer receives, from the client device, a second request to use the resource, the second request being encrypted using the attested-to public keys of the first subset of server systems. The load balancer distributes the second request to, at least, one of the first subset of server systems.

Abstract: Techniques are disclosed relating to improving user privacy when accessing a resource. In various embodiments, a server system provides a resource accessible to a plurality of client devices using end-to-end encryption. The server system provides a signed attestation that includes a public key of the server system, the attestation attesting to the public key and to a set of system properties of the server system that are immutable while the resource is accessible. The server system receives a request from one of the client devices to access the resource, the request including encrypted using the attested-to public key of the server system. In some embodiments, the server system publishes information about the immutable system properties to a transparency log stored in a transparency server accessible to the client device when verifying the signed attestation.

Abstract: Techniques are disclosed relating to improving user privacy using machine learning (ML) models. In various embodiments, a device processes a query using a locally stored large language model (LLM) operable to use supplemental data provided by one of a plurality of assisting server systems. The device verifies a set of public-key attestations, each attesting to a public key of a respective one of the assisting server systems. The device sends, based on the verifying, a request for the supplemental data to the assisting server systems. The request includes intermediary data produced by the processing and is encrypted using the attested-to public keys. The device processes the received supplemental data using the LLM to produce a result of the query. In some embodiments, the device encrypts the intermediary data with a symmetric key and encrypts a respective instance of the symmetric key with each of the attested-to public keys.

Abstract: An electronic device can receive power from a powered accessory and can include a first communication system that communicates with the powered accessory; an internal clock; and a first processing system. Upon connection of the electronic device to the powered accessory, the first processing system can send a time update request to the powered accessory and can update the internal clock based on a time update received from the powered accessory. The powered accessory can include an energy storage device that delivers power to the electronic device; a second communication system that communicates with the electronic device; a real time clock; and a second processing system. Upon connection of the electronic device to the powered accessory and receiving the time update request from the electronic device the processing system can send the time update to the electronic device.

Abstract: Immersive audio can be generated and/or updated in real-time as an accessory device presenting the audio is moved with respect to a computing device presenting accompanying video content. This real-time immersive audio is enabled by determining positions of the accessory device with respect to the computing device, based on real-time analysis of sensor information from the accessory device and the computing device. Accurate positions can be determined by synchronizing timestamped sensor data from the multiple devices through the use of a clock of a common wireless communication link (e.g., a Bluetooth connection), which may have lower drift than the global clocks of the devices themselves. Calculated offsets associated with differences between the clock of the wireless communication link and the global clocks of the multiple devices can be used to account for inaccuracies in the global clocks of the multiple devices with respect to one another.