Patents by Inventor Gahl Saraf
Gahl Saraf has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 10516639Abstract: Embodiments are described for generating an aggregated notifications feed that organizes notifications into groups of notification thread types. Various notifications in a social media network can be associated with a notification thread, and notification threads can be assigned a thread category. An aggregated notifications feed can be used to provide a user interface with notifications grouped under a corresponding thread category. Grouped notifications can be ordered in several ways such as in reverse chronologic order providing for more relevant notifications to be presented first. This notification ordering can be within a group or can be among groups based on the most recent notification within that group. In some implementations, grouping notifications or ordering notifications can be based on additional parameters such as user preferences, rules obtained for machine learning, or administrator settings.Type: GrantFiled: July 5, 2017Date of Patent: December 24, 2019Assignee: Facebook, Inc.Inventors: Alon Schwarz, Blaise A. DiPersia, Gahl Saraf, Masha Gutman
-
Publication number: 20190014069Abstract: Embodiments are described for generating an aggregated notifications feed that organizes notifications into groups of notification thread types. Various notifications in a social media network can be associated with a notification thread, and notification threads can be assigned a thread category. An aggregated notifications feed can be used to provide a user interface with notifications grouped under a corresponding thread category. Grouped notifications can be ordered in several ways such as in reverse chronologic order providing for more relevant notifications to be presented first. This notification ordering can be within a group or can be among groups based on the most recent notification within that group. In some implementations, grouping notifications or ordering notifications can be based on additional parameters such as user preferences, rules obtained for machine learning, or administrator settings.Type: ApplicationFiled: July 5, 2017Publication date: January 10, 2019Inventors: Alon Schwarz, Blaise A. DiPersia, Gahl Saraf, Masha Gutman
-
Patent number: 10178071Abstract: Techniques to use operating system redirection for network stream transformation operations are described. In one embodiment, an apparatus may comprise a network stream component operative to receive a network stream, the network stream associated with an application on a device; modify the network stream to generate a modified network stream; and send the modified network stream through an operating system for the device; and a local virtual private network component operative on the processor circuit to: receive the modified network stream from the operating system as a plurality of modified network stream packets; determine a network connection policy based on the application; and send the plurality of modified network stream packets to a destination network address via the network interface controller when the network connection policy indicates sending. Other embodiments are described and claimed.Type: GrantFiled: June 20, 2016Date of Patent: January 8, 2019Assignee: FACEBOOK, INC.Inventor: Gahl Saraf
-
Patent number: 9985968Abstract: Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.Type: GrantFiled: February 8, 2017Date of Patent: May 29, 2018Assignee: FACEBOOK, INC.Inventors: Lior Tubi, Dekel Shmuel Naar, Gahl Saraf, Guy Yonish, Roi Tiger
-
Publication number: 20170366508Abstract: Techniques to use operating system redirection for network stream transformation operations are described. In one embodiment, an apparatus may comprise a network stream component operative to receive a network stream, the network stream associated with an application on a device; modify the network stream to generate a modified network stream; and send the modified network stream through an operating system for the device; and a local virtual private network component operative on the processor circuit to: receive the modified network stream from the operating system as a plurality of modified network stream packets; determine a network connection policy based on the application; and send the plurality of modified network stream packets to a destination network address via the network interface controller when the network connection policy indicates sending. Other embodiments are described and claimed.Type: ApplicationFiled: June 20, 2016Publication date: December 21, 2017Applicant: Facebook, Inc.Inventor: Gahl Saraf
-
Publication number: 20170149781Abstract: Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.Type: ApplicationFiled: February 8, 2017Publication date: May 25, 2017Inventors: Lior Tubi, Dekel Shmuel Naar, Gahl Saraf, Guy Yonish, Roi Tiger
-
Patent number: 9602468Abstract: Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.Type: GrantFiled: November 19, 2014Date of Patent: March 21, 2017Assignee: FACEBOOK, INC.Inventors: Lior Tubi, Dekel Shmuel Naar, Gahl Saraf, Guy Yonish, Roi Tiger
-
Publication number: 20160142375Abstract: Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.Type: ApplicationFiled: November 19, 2014Publication date: May 19, 2016Applicant: Onavo Mobile Ltd.Inventors: Lior Tubi, Dekel Shmuel Naar, Gahl Saraf, Guy Yonish, Roi Tiger