Abstract: In some embodiments, techniques for computer security comprise receiving an email message; determining a sender of the email message; determining whether the sender of the email message is trusted, wherein determining whether the sender of the email message is trusted includes determining whether the sender of the email message is associated with a whitelist; retrieving domain-related information by performing a DNS query on a domain associated with the sender; based at least in part on the domain-related information, determining whether the sender of the email message is verified; determining whether the sender is both trusted and verified; and when it is determined that the sender is both trusted and verified, treating the email message as trustworthy, wherein treating the email message as trustworthy includes bypassing a classifier.

Abstract: In some embodiments, techniques for computer security comprise parsing an electronic document; determining that a first element of the electronic document specifies immutability of a second element of the electronic document; setting an immutability indicator associated with the second element of the electronic document; receiving a request to modify the second element of the electronic document; determining that the immutability indicator associated with the second element of the electronic document is set; and responsive to determining that the immutability indicator associated with the second element of the electronic document is set, preventing the second element of the electronic document from being modified.

Abstract: Methods, systems, and computer storage mediums for reducing navigation redirect latency by using speculative preconnection. A redirect speculation value is retrieved in response to a request for a source Uniform Resource Locator (URL), where the redirect speculation value is based on the source URL. The redirect speculation value includes the source URL, a target URL, and a probability factor. A preconnection to the target URL's hostname is then initiated based on the probability factor. Next, a response from the request to the source URL is received, where the response includes a redirect URL. Finally, the preconnection is used to process the redirect URL when the redirect URL is similar to the target URL.

Abstract: Methods, systems, and techniques for reducing web page load time are provided. An exemplary method for reducing web page load time includes detecting, in a browser, a cursor in a region of a web page. The region surrounds a selectable item associated with a URL. The exemplary method includes determining whether the cursor is present in the region for a threshold period of time. The exemplary method further includes performing a speculative action when it is determined that the cursor has been present in the region for the threshold period of time, without modifying underlying code of a web page associated with the URL.

Abstract: Personalizing communications for a first communication platform includes accessing status information for communication sessions by a communication identity that leverage a first communication platform other than an instant messaging platform. A participant list associated with the communication identity and the first communication platform is passively configured to persistently reflect a list of participant identities from communication sessions in which the communication identity recently participated using the communication platform.

Abstract: In some embodiments, techniques for computer security comprise parsing an electronic document; determining that a first element of the electronic document specifies immutability of a second element of the electronic document; setting an immutability indicator associated with the second element of the electronic document; receiving a request to modify the second element of the electronic document; determining that the immutability indicator associated with the second element of the electronic document is set; and responsive to determining that the immutability indicator associated with the second element of the electronic document is set, preventing the second element of the electronic document from being modified.

Abstract: This disclosure is directed to providing directional feedback to a user. For example, this disclosure describes techniques for determining at least one characteristic of a device in space. For example, a device may be configured to determine, using one or more sensors, one or more characteristics of the device in space. For example, the device may be configured to determine one or more of a direction, and/or geographical position of the device as pointed by a user in space. The device may compare one or more of the determined one or more characteristics of the device in space to a desired destination or path specified by the user, and provide the user with directional feedback if the determined one or more characteristics of the device in space are consistent with the desired destination or path.

Abstract: Embodiments of the present invention include methods and systems for accelerated application startup. A method for accelerating startup of an application is provided. The method includes persistently storing a number of uniform resource locator (URL) hostnames based on one or more hostname requests made by one or more users during use of the application. The method further includes, upon startup of the application, making a DNS lookup call for at least one of the stored hostnames prior to a hostname request initiated by the application, wherein a resolution result for at least one of the stored hostnames is cached in the operating system DNS cache in preparation for the hostname request. A system for accelerating startup of an application is provided. The system includes a hostname storage device, a DNS pre-fetcher and a startup DNS pre-cacher.

Abstract: Systems and methods for generating a unified certificate revocation list (UCRL) are provided. A method for generating a unified certificate revocation list includes identifying revocation servers associated with public key certificates. The method also includes aggregating server information of the identified revocation servers into revocation server lists (RSLs). The method further includes combining revoked certificates of the RSLs into a unified certificate revocation list (UCRL). The method also includes compressing the UCRL into a compressed UCRL. Lossy compression may be used. Compressed UCRLs may be used to test for revocation status. A system for generating a unified certificate revocation list includes a revocation server identifier, a revocation server list generator and a UCRL filter.

Abstract: Embodiments of the present invention include methods and systems for domain name system (DNS) pre-caching. A method for DNS pre-caching is provided. The method includes receiving uniform resource locator (URL) hostnames for DNS pre-fetch resolution prior to a user hostname request for any of the URL hostnames. The method also includes making a DNS lookup call for at least one of the URL hostnames that are not cached by a DNS cache prior to the user hostname request. The method further includes discarding at least one IP address provided by a DNS resolver for the URL hostnames, wherein a resolution result for at least one of the URL hostnames is cached in the DNS cache in preparation for the user hostname request. A system for DNS pre-caching is provided. The system includes a renderer, an asynchronous DNS pre-fetcher and a hostname table.

Abstract: In some embodiments, techniques for computer security comprise preventing and/or mitigating identity theft such as phishing.

Abstract: Methods and systems for reducing web page load time include obtaining speculative information associated with a uniform resource locator (URL). The method and system also include determining whether to prefetch content of the URL based on the speculative information. The method and system further include providing an instruction to prefetch the URL content when a determination to prefetch results. The method and system also include prerendering the URL content when the instruction to prefetch the URL content is provided.

Abstract: Methods, systems, and computer program products for cloud-based adaptive configuration and control of a network device include, detecting an access by a user through the network device to a cloud-based service; and responsive to the detected access, configuring the network device to be controlled by the user via a cloud-based configuration controller. Further implementations include, receiving a configuration request from the network device, wherein the configuration request includes access information pertaining to an access made by a user to a cloud-based service; determining a cloud-based identity of the user based upon the received access information; associating the cloud-based identity with an ownership identifier; forming one or more instructions to configure the network device with the ownership identifier as an owner of the network device; and transmitting the one or more instructions to the network device.

Abstract: In some embodiments, techniques for data security may include encoding and decoding unreadably encoded data, such as data encrypted with a public key or tokenized. In some embodiments, techniques for data security may include distributing an encrypted private key. In some embodiments, unreadable data may be encrypted and/or decrypted using time-varying keys. In some embodiments, techniques for data security may include combining information and a policy, and encoding the combined information and policy, wherein encrypting the combined information and policy is performed using a public key, or via tokenization. In some embodiments, techniques for data security may include receiving data, wherein the data has been encoded, decoding the data, determining a first datum and a second datum, wherein the first datum and the second datum are associated with the decoded data, and determining a policy, wherein the policy is associated with the first datum.

Abstract: In some embodiments, techniques for protecting a network may include detecting an insecure condition on a first host that has connected or is attempting to connect to a protected network, including contacting a trusted computing base and determining whether a response includes a valid digitally signed attestation of cleanliness (an attestation that the first host is not infested and/or that the presence of a patch or patch level of a software component on the first host); if not, quarantining the first host, including by re-routing a service request sent by the first host by responding with a redirect that causes a browser on the first host to be directed to a quarantine server configured to serve a quarantine notification page that provides remediation information; and permitting the first host to communicate with a remediation host configured to provide data usable to remedy the insecure condition.

Abstract: Methods, systems, and computer program products for configuring wireless local area network gateways to provide visitors with network access, are provided. A nearby client device of a user is provided a first level of access through the wireless local area network gateway to access a cloud-based service provider in a remote network. A determination is made whether a source Internet Protocol (IP) address associated with a request for authentication received from the nearby client device is matched to a public IP address of the wireless local area network gateway. If a match is determined, a configuration setting associated with the nearby client device of the user is received from the cloud-based service provider and the wireless local area network is reconfigured to provide a second level of access to the nearby client device of the user. Corresponding system and computer readable mediums are also provided.

Abstract: Methods and systems for validating online certificate status are provided. A method for validating online certificate status may include storing data associated with a first certificate beyond an expiration time of a second certificate. The second certificate was used to validate the first certificate. The method may further include validating the first certificate upon a host connection request or prior to expiration of a second certificate. A system for validating online certificate status may include a certificate data acquirer and a certificate validator. Another method for validating online certificate status may include obtaining a hostname and selecting a first certificate based upon an association between the hostname and data associated with the first certificate. The method may also include providing the first certificate data for validation. A system for validating online certificate status may include a speculator.

Abstract: Methods, systems, and computer program products for cloud-based adaptive configuration and control of a network device include, detecting an access by a user through the network device to a cloud-based service; and responsive to the detected access, configuring the network device to be controlled by the user via a cloud-based configuration controller. Further implementations include, receiving a configuration request from the network device, wherein the configuration request includes access information pertaining to an access made by a user to a cloud-based service; determining a cloud-based identity of the user based upon the received access information; associating the cloud-based identity with an ownership identifier; forming one or more instructions to configure the network device with the ownership identifier as an owner of the network device; and transmitting the one or more instructions to the network device.

Abstract: In some embodiments a system is provided, comprising a playback device, configured to play a piece of multimedia content, stop playing the piece of multimedia content, wherein the playing of the piece of multimedia content is stopped at a first point, connect to a server, and synchronize information relating to the first point to the server; the server, configured to save the information relating to the first point in a profile associated with an individual user, connect to a recipient device, and synchronize the information relating to the first point to a recipient device; the recipient device, configured to play the piece of multimedia content, wherein playing the piece of multimedia content on the recipient device starts from a second point related to the first point at which the playing of the piece of multimedia content on the playback device is stopped.

Abstract: In some embodiments, a technique for providing location-based functionality comprises providing functionality, wherein the functionality uses information provided by a location-aware device.