Abstract: The techniques discussed herein relate to providing a highly available and reliable secret distribution infrastructure. In an implementation, a key master service (KMS) system is disclosed. The KMS system includes one or more computer readable storage media having program instructions stored thereon which, when executed by one or more processing systems, direct the one or more processing systems to identify a hydration event and, responsive to the hydration event, determine if other KMS systems are running in a secret distribution infrastructure. The program instructions, when executed by one or more processing systems, further direct the KMS system to hydrate the KMS system with secret information obtained from the one or more of the other KMS systems when the other KMS systems are running in the secret distribution infrastructure.

Abstract: Systems and methods for creating training data for a software application that executes automated tasks such as operating system shell. One example provides a system that comprises at least one electronic processor configured to access a file repository that contains programming files. The electronic processor is also configured to extract data from documentation associated with at least one of the programming files to generate extracted data, extract attributes associated with at least one of the programming files to generate extracted attributes, convert the extracted data and the extracted attributes to training data, and store the training data in a training data repository. The electronic processor is also configured to update the documentation and attributes in the programming files (for example, by providing a user interface to allow a user to do so or in another fashion).

Abstract: Systems and methods for creating training data for a software application that executes automated tasks such as operating system shell. One example provides a system that comprises at least one electronic processor configured to access a file repository that contains programming files. The electronic processor is also configured to extract data from documentation associated with at least one of the programming files to generate extracted data, extract attributes associated with at least one of the programming files to generate extracted attributes, convert the extracted data and the extracted attributes to training data, and store the training data in a training data repository. The electronic processor is also configured to update the documentation and attributes in the programming files (for example, by providing a user interface to allow a user to do so or in another fashion).

Abstract: The techniques discussed herein relate to providing fault tolerant automatic secret rotation for secrets maintained in a secret distribution infrastructure. In an implementation, an apparatus includes one or more computer readable storage media and a secret rotation service including program instructions stored on the one or more computer readable storage media. The program instructions, when executed by one or more processing systems of a key master service (KMS) system, direct the one or more processing systems to rotate one or more secrets being served by the KMS system and provide other components of the secret distribution infrastructure with rotation information identifying the one or more secrets. The instructions, when executed, further direct the one or more processing system to validate that the one or more secrets have been rotated at the other components of the secret distribution infrastructure and, once validated, publish the rotation information to a metadata storage service.

Abstract: The techniques discussed herein relate to providing a highly available and reliable secret distribution infrastructure. In an implementation, a key master service (KMS) system is disclosed. The KMS system includes one or more computer readable storage media having program instructions stored thereon which, when executed by one or more processing systems, direct the one or more processing systems to identify a hydration event and, responsive to the hydration event, determine if other KMS systems are running in a secret distribution infrastructure. The program instructions, when executed by one or more processing systems, further direct the KMS system to hydrate the KMS system with secret information obtained from the one or more of the other KMS systems when the other KMS systems are running in the secret distribution infrastructure.

Abstract: Techniques for sharing of items from online storage (e.g., cloud storage) are described herein. In at least some embodiments, sharing links can be configured as one-time sharing links that provide recipients with limited, one-time access to a shared item for the purpose of selecting or registering an account to use for subsequent access to the item. Recipients are able to select accounts they find most convenient for accessing a shared item without the owner/sharer of the item necessarily having contact information for those accounts or sending a link to the accounts. Selection of a one-time link initiates an authentication sequence that selectively provides an option to select a particular account. Once the one-time sharing link is redeemed, the one-time sharing link is invalidated for subsequent access to the item.

Abstract: Techniques for sharing of items from online storage (e.g., cloud storage) are described herein. In at least some embodiments, sharing links can be configured as one-time sharing links that provide recipients with limited, one-time access to a shared item for the purpose of selecting or registering an account to use for subsequent access to the item. Recipients are able to select accounts they find most convenient for accessing a shared item without the owner/sharer of the item necessarily having contact information for those accounts or sending a link to the accounts. Selection of a one-time link initiates an authentication sequence that selectively provides an option to select a particular account. Once the one-time sharing link is redeemed, the one-time sharing link is invalidated for subsequent access to the item.

Abstract: Techniques for sharing of items from online storage (e.g., cloud storage) are described herein. In at least some embodiments, sharing links can be configured as one-time sharing links that provide recipients with limited, one-time access to a shared item for the purpose of selecting or registering an account to use for subsequent access to the item. Recipients are able to select accounts they find most convenient for accessing a shared item without the owner/sharer of the item necessarily having contact information for those accounts or sending a link to the accounts. Selection of a one-time link initiates an authentication sequence that selectively provides an option to select a particular account. Once the one-time sharing link is redeemed, the one-time sharing link is invalidated for subsequent access to the item.

Abstract: Techniques are described to provide revocable object access. In an implementation, a user may provide content and an object (e.g., a picture) to be published with the content. The object is uploaded to a storage location, and a uniform resource locator (URL) that includes a token is generated for the object. The token is registered in an access control list (ACL), and token permission settings in the ACL are utilized to control access to the object. The URL may be embedded in the content. When a viewer requests the content, the object may be retrieved from the storage location using the URL. The user may revoke access to the object by changing the token permission settings in the ACL.

Abstract: Techniques are described to share items from a favorites list. In an implementation, a list entry for a favorites list may be associated with content from a third party source by a first user. The favorites list may be presented in a webpage to display the list entry and the associated content to another user. A control operable to share the list entry with the other user may be exposed with the list entry. Responsive to operation of the control, the content and/or related data may be obtained from the third party source and data may be stored to associate the list entry including the obtained content with the other user. In at least some embodiments, the control is operable by a single-click to cause the sharing of the list entry.

Abstract: Communication abuse prevention techniques are described. In an implementation, a reputation level for a communication is determined based on relation information for a sender and an intended recipient of the communication. A challenge is invoked that is to be completed by the sender before the communication is sent. The challenge is selected based on the reputation level for the communication. The communication is caused to be available for access based on successful completion of the challenge. Access to the communication is inhibited in response to a subsequent determination of the reputation level that indicates that the reputation level for the communication has changed to a new reputation level prior to the communication being accessed by the intended recipient. The subsequent determination is based on additional information associated with the sender of the communication.

Abstract: Techniques for asynchronous task execution are described. In an implementation, tasks may be initiated and executed asynchronously, thereby allowing a plurality of calls to be made in parallel. Each task may be associated with a respective timeout that triggers an end to execution of the task. If a timeout for a low priority task expires without completing both the low priority task and a relatively higher priority task, then the low priority task may use the relatively higher priority task to extend execution time of the low priority task in order to allow additional time to perform the low priority task.

Abstract: Techniques for sharing of items from online storage (e.g., cloud storage) are described herein. In some embodiments, sharing links can be configured as group opt-in links designed to provide recipients with an option to join a group having permissions on a corresponding shared item. A sharing link to an item may be generated and provided to a user for distribution to recipients in various ways. When selected by recipients, the sharing link causes an option to be exposed to the recipients to opt-in to a group having permissions on a corresponding item. Group membership is determined by recipients that exercise the option and recipients that opt-in are granted permissions on the item established for the group. Subsequently, an owner of the item/group may view a list of recipients who have opted-in as members and manage corresponding permissions on an individual basis.

Abstract: Techniques for sharing of items from online storage (e.g., cloud storage) are described herein. In one approach, distinct sharing links to an item can be generated for multiple different publish targets through a single publishing user interface exposed to a user. Through the publishing user interface, a user may submit a request having a selection of different social networks and/or other sites/targets to receive a sharing link for an item. In response to the request, a distinct sharing link is generated for each selected recipient and the generated sharing links are published to appropriate targets. Thus, a user is able to easily send links for a shared item to multiple targets through a single request and can separately manage permissions associated with each distinct sharing link.

Abstract: Techniques for sharing of items from online storage (e.g., cloud storage) are described herein. In at least some embodiments, sharing links can be configured as one-time sharing links that provide recipients with limited, one-time access to a shared item for the purpose of selecting or registering an account to use for subsequent access to the item. Recipients are able to select accounts they find most convenient for accessing a shared item without the owner/sharer of the item necessarily having contact information for those accounts or sending a link to the accounts. Selection of a one-time link initiates an authentication sequence that selectively provides an option to select a particular account. Once the one-time sharing link is redeemed, the one-time sharing link is invalidated for subsequent access to the item.

Abstract: Communication abuse prevention techniques are described. In an implementation, a reputation level for a communication is determined based on relation information for a sender and an intended recipient of the communication. A challenge is invoked that is to be completed by the sender before the communication is sent. The challenge is selected based on the reputation level for the communication. The communication is caused to be available for access based on successful completion of the challenge. Access to the communication is inhibited in response to a subsequent determination of the reputation level that indicates that the reputation level for the communication has changed to a new reputation level prior to the communication being accessed by the intended recipient.

Abstract: Communication abuse prevention techniques are described. In an implementation, a reputation level for a communication is determined based on relation information for a sender and an intended recipient of the communication. A challenge is invoked that is to be completed by the sender before the communication is sent. The challenge is selected based on the reputation level for the communication.

Abstract: A plurality of modules which provide a user with tools for engaging in social networking are created. The plurality of modules are associated with a service. A server hosting the web space receives a selection from the user corresponding to a first module. In response to the selection, the server associates the service with the web space. The first module renders the web space on a client accessing the web space. The server enables a visitor to the web space to access a second module form the plurality of modules associated with the service. The accessed second module will display the web space in a second format on the client of the visitor.

Abstract: Techniques for asynchronous task execution are described. In an implementation, tasks may be initiated and executed asynchronously, thereby allowing a plurality of calls to be made in parallel. Each task may be associated with a respective timeout that triggers an end to execution of the task. If a timeout for a low priority task expires without completing both the low priority task and a relatively higher priority task, then the low priority task may use the relatively higher priority task to extend execution time of the low priority task in order to allow additional time to perform the low priority task.

Abstract: Techniques are described to deliver client content on a webpage. In implementations, client content is retrieved to be presented in a webpage to be served to a client. A presentation template is also retrieved. The presentation template includes at least one server-side tag configured to define a presentation of the client content in the webpage. The client content is then integrated with the presentation template by the server as defined by the at least one tag to generate the webpage.