Abstract: This disclosure describes techniques for providing multiple namespace support to application(s) in containers under Kubernetes without breaking containment boundaries or escalating privileges of the application(s). A namespace service executing on a physical server may communicate with contained processes executing on the physical server by utilizing a Unix Domain Socket (UDS) endpoint in the filesystem of each of the containers. the namespace service may execute on the physical server with escalated privileges, allowing the namespace service to create a socket in a namespace and provide access and rights to utilize the socket to process(es) in a separate namespace.

Abstract: Techniques and mechanisms to reduce double encryption of packets that are transmitted using encrypted tunnels. The techniques described herein include determining that portions of the packets are already encrypted, identifying portions of the packets that are unencrypted, and selectively encrypting the portions of the packets that are unencrypted prior to transmission through the encrypted tunnel. In this way, potentially private or sensitive data in the packets that is unencrypted, such as information in the packet headers, will be encrypted using the encryption protocol of the encrypted tunnel, but the data of the packets that is already encrypted, such as the payload, may avoid unnecessary double encryption. By reducing (or eliminating) the amount of data in data packets that is double encrypted, the amount of time taken by computing devices, and computing resources consumed, to encrypted traffic for encrypted tunnels may be reduced.

Abstract: A through-air thermally bonded nonwoven fabric is provided. The nonwoven fabric can include a first surface and a second surface and a visually discernible pattern of three-dimensional features on one of the first or second surface. Each of the three-dimensional features can define a microzone comprising a first region and a second region. The first and second regions can have a difference in values for an intensive property, wherein at least one of the surfaces has a TS7 value of less than about 15 dB V2 rms, and wherein the first surface has a TS7 value that is higher than the second surface TS7 value.

Abstract: The invention relates to an optical fiber connector and to a related method for changing the polarity thereof. The connector comprises a ferrule, housing a plurality of terminations of optical fibers, and an inner housing arranged around the ferrule and comprising a rear portion and a front portion configured to be inserted into an optical fiber adapter.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for associating a new measurement of an object surrounding a vehicle with a maintained track. One of the methods includes receiving an object track for a particular object, receiving a new measurement characterizing a new object at a new time step, and determining whether the new object is the same as the particular object, comprising: generating a representation of the new object at the new and preceding time steps; generating a representation of the particular object at the new and preceding time steps; processing a first network input comprising the representations using a first neural network to generate an embedding of the first network input; and processing the embedding of the first network input using a second neural network to generate a predicted likelihood that the new object and the particular object are the same.

Abstract: An edge wear protector system adapted to be attached to a plate of a bucket is provided. Edge wear protector system includes a first side member having a proximal end and a distal end opposite the proximal end, the first side member adapted to be attached to one side of the plate, a second side member having a near end and a far end opposite the near end, the second side member adapted to be attached to another side of the plate, the another side of the plate being opposite the one side of the plate, an end member adapted to be attached to an edge of the plate, the edge of the plate extends from the one side to the another side of the plate, such that the first side member is attachable to the end member via its proximal end and the second side member is attachable to the end member via the near end.

Abstract: This disclosure describes techniques for providing a distributed scalable architecture for Network Address Translation (NAT) systems with high availability and mitigations for flow breakage during failover events. The NAT servers may include functionality to serve as fast-path servers and/or slow-path servers. A fast-path server may include a NAT worker that includes a cache of NAT mappings to perform stateful network address translation and to forward packets with minimal latency. A slow-path server may include a mapping server that creates new NAT mappings, depreciates old ones, and answers NAT worker state requests. The NAT system may use virtual mapping servers (VMSs) running on primary physical servers with state duplicated VMSs on different physical failover servers.

Abstract: An apparatus includes an integrated circuit that includes a microprocessor and a microcontroller unit circuit (MCU) coupled to the microprocessor. The MCU includes a central processing unit (CPU) core and a network processor that implements a wireless interface. The MCU is configured to execute a location application that facilitates a determination of a physical location of the apparatus. The MCU may also be configured to support one or more management functions. The microprocessor sends data to the MCU for wireless transmission by the MCU's wireless interface.

Abstract: Systems are provided for generating, modifying and using SBOMs for facilitating risk assessment and threat mitigation for corresponding programs, and particularly for large programming builds. The creation and modification of the SBOMs includes processes for omitting declarations referenced in chunk SBOMs of program chunks incorporated into a final programming build associated with a build SBOM, but which are not actually utilized by the final programming build, as well as processes for adding new declarations for code segments that are not declared in the related chunk SBOMs, even though the code segments are utilized by the final programming build. Systems are also configured to use SBOMs in combination with configuration restriction records to assess and resolve threat events in a manner that can prevent unnecessary remedial actions for threat events that appear to be relevant to one or more files or dependencies incorporated into a program.

Abstract: Systems are provided for generating, modifying and using SBOMs for facilitating risk assessment and threat mitigation for corresponding programs, and particularly for large programming builds. The creation and modification of the SBOMs includes processes for omitting declarations referenced in chunk SBOMs of program chunks incorporated into a final programming build associated with a build SBOM, but which are not actually utilized by the final programming build, as well as processes for adding new declarations for code segments that are not declared in the related chunk SBOMs, even though the code segments are utilized by the final programming build. Systems are also configured to use SBOMs in combination with configuration restriction records to assess and resolve threat events in a manner that can prevent unnecessary remedial actions for threat events that appear to be relevant to one or more files or dependencies incorporated into a program.

Abstract: Systems are provided for generating, modifying and using SBOMs for facilitating risk assessment and threat mitigation for corresponding programs, and particularly for large programming builds. The creation and modification of the SBOMs includes processes for omitting declarations referenced in chunk SBOMs of program chunks incorporated into a final programming build associated with a build SBOM, but which are not actually utilized by the final programming build, as well as processes for adding new declarations for code segments that are not declared in the related chunk SBOMs, even though the code segments are utilized by the final programming build. Systems are also configured to use SBOMs in combination with configuration restriction records to assess and resolve threat events in a manner that can prevent unnecessary remedial actions for threat events that appear to be relevant to one or more files or dependencies incorporated into a program.

Abstract: An absorbent article having a longitudinal centerline, a lateral centerline, a machine direction (MD) generally oriented parallel to the longitudinal centerline and a cross direction (CD) generally oriented parallel to the lateral centerline is described. The absorbent article includes a topsheet, a backsheet, and an absorbent core disposed therebetween. A plurality of composition elements is disposed on the topsheet, wherein each of the composition elements comprise an element width and an element spacing between adjacent elements, and wherein a ratio of element spacing to element width is between about 0.5 to about 8, as measured by the Composition Pattern Analysis.

Abstract: A method of laser processing including generating a laser beam having, at different longitudinal positions in a propagation direction, first and second transverse beam profiles of energy density. The first transverse beam profile is different to the second transverse beam profile and is non-Gaussian. The method includes carrying out a scan of the laser beam across a working surface, wherein, during the scan, the laser beam and/or working surface is adjusted such that, for a first part of the scan, the first transverse beam profile is located at the working surface and, for a second part of the scan, the second transverse beam profile is located at the working surface.

Abstract: A computer device performs operations for managing registry access. The computing device can determine a set of registry access rules relevant to the user process. The computing device can perform an evaluation of a registry operation requested by the user process using the set of registry access rules. The computing device can determine an action based on the evaluation. The action can include one of blocking the registry operation in relation to a particular key in a registry of the operating system, and enabling access to a particular key in the registry of the operating system to perform the requested registry operation.

Abstract: An optical fibre unit includes one or more optical fibres; an outer jacket surrounding the one or more optical fibres, made of a fibre reinforced polymer comprising inorganic fibres embedded in a polymer matrix in an amount comprised between 5 and 25 wt % with respect to the weight of the fibre reinforced polymer, the inorganic fibres having a median length (d50) comprised between 50 and 250 ?m; and a skin layer surrounding the outer jacket and in direct contact thereto, having a thickness comprised between 0.05 mm and 0.5 mm and being free from fibres.

Abstract: Methods for upcycling crosslinked sodium polyacrylate to pressure sensitive adhesives via (a) mechanochemical chain-shortening and esterification or (b) esterifying with high conversion with a Fischer esterification process are disclosed. Also disclosed is a pressure sensitive adhesive prepared by the disclosed methods and articles comprising the pressure sensitive adhesive, including, but not limited to, pressure sensitive tape, a bandage, a label, note pads, a decal, a stamp, an envelope, a sticker, packaging, automobile trim, and a film.

Abstract: A through-air thermally bonded nonwoven fabric is provided. The nonwoven fabric can include a first surface and a second surface and a visually discernible pattern of three-dimensional features on one of the first or second surface. Each of the three-dimensional features can define a microzone comprising a first region and a second region. The first and second regions can have a difference in values for an intensive property, wherein at least one of the surfaces has a TS7 value of less than about 15 dB V2 rms, and wherein the first surface has a TS7 value that is higher than the second surface TS7 value.

Abstract: Techniques and mechanisms to reduce double encryption of packets that are transmitted using encrypted tunnels. The techniques described herein include determining that portions of the packets are already encrypted, identifying portions of the packets that are unencrypted, and selectively encrypting the portions of the packets that are unencrypted prior to transmission through the encrypted tunnel. In this way, potentially private or sensitive data in the packets that is unencrypted, such as information in the packet headers, will be encrypted using the encryption protocol of the encrypted tunnel, but the data of the packets that is already encrypted, such as the payload, may avoid unnecessary double encryption. By reducing (or eliminating) the amount of data in data packets that is double encrypted, the amount of time taken by computing devices, and computing resources consumed, to encrypted traffic for encrypted tunnels may be reduced.