Abstract: A food container system is disclosed that includes a food container lid. The lid has a beverage container coupling structure that removably attaches to a beverage container. The beverage container coupling structure circumscribes a footprint of the lid. The lid also has a drink-hole surface within the lid footprint and an annular surface above the beverage container coupling structure and within the lid footprint. The annular surface is connected to the drink-hole planar surface and includes food container coupling structure that removably attaches to a second food container. A food compartment is formed from a food compartment inner wall extending from the annular surface, and a bottom connected to the food compartment inner wall. The lid also includes a drink hole extending through the drink-hole surface.

Abstract: A food container system is disclosed that includes a food container lid. The lid has a beverage container coupling structure that removably attaches to a beverage container. The beverage container coupling structure circumscribes a footprint of the lid. The lid also has a drink-hole surface within the lid footprint and an annular surface above the beverage container coupling structure and within the lid footprint. The annular surface is connected to the drink-hole planar surface and includes food container coupling structure that removably attaches to a second food container. A food compartment is formed from a food compartment inner wall extending from the annular surface, and a bottom connected to the food compartment inner wall. The lid also includes a drink hole extending through the drink-hole surface.

Abstract: Various embodiments provide techniques and devices for protecting application secrets from operating system attacks. In some examples, applications execute with an isolated user mode of a secure execution environment, while relying on an operating system executing within a separate execution environment for resource management and system services. A proxy kernel can control access by the operating system to data associated with the secure execution environment. Further, the proxy kernel can act as a transparent interface between isolated user mode applications and the operating system during the provision of resource management and system services.

Abstract: Various embodiments provide techniques and devices for protecting application secrets from operating system attacks. In some examples, applications execute with an isolated user mode of a secure execution environment, while relying on an operating system executing within a separate execution environment for resource management and system services. A proxy kernel can control access by the operating system to data associated with the secure execution environment. Further, the proxy kernel can act as a transparent interface between isolated user mode applications and the operating system during the provision of resource management and system services.