Abstract: A method of filtering a URL against a blacklist includes receiving at least a portion of a Uniform Resource Locator (URL), and determining which of a plurality of XOR filters is applicable to the received at least a portion of a URL, where each of the plurality of XOR filters represents a different portion of a URL blacklist. At least a portion of a URL is forwarded to the applicable one of the plurality of XOR filters, and the at least a portion of the URL is processed in the applicable one of the plurality of XOR filters to produce an output indicating whether the URL is likely on the blacklist.

Abstract: A system, computer-readable storage medium, and method for secure network communication. A first device employs a first secret to establish a stream between the first and a second device. A third key, first ciphertext based on a first key, and hash of the first key are received from the second device by the first. A second key is applied to recover a second secret from the first ciphertext. The third key is encrypted to generate a second ciphertext including a third secret. Fourth and fifth keys are derived based on the first, second, and third secrets. A message authentication code is generated based on the fourth and third keys, first ciphertext, hash of the first key, and second ciphertext. The second ciphertext and message authentication code are transmitted by the first to the second device, and the fifth key is employed by the first device to modify the stream.

Abstract: A method of filtering a URL against a blacklist includes receiving at least a portion of a Uniform Resource Locator (URL), and determining which of a plurality of XOR filters is applicable to the received at least a portion of a URL, where each of the plurality of XOR filters represents a different portion of a URL blacklist. At least a portion of a URL is forwarded to the applicable one of the plurality of XOR filters, and the at least a portion of the URL is processed in the applicable one of the plurality of XOR filters to produce an output indicating whether the URL is likely on the blacklist.

Abstract: System and method for extending zones of control through a hotspot for communications to and from computing devices based on specific criteria corresponding to zones of control. An encrypted virtual private network (VPN) for a browsing session may be established at a first computing device and remote server computers matching the parameters of the established zone. Then, a user of the first computing device may further establish a wireless hotspot network suited to allow additional remote computing devices to piggy-back on the one or more established encrypted virtual private networks. Thus, other connected devices using the hotspot connection to reach a broader computer network (e.g., the Internet) are then also taking advantage of the encrypted VPN being provided by the host of the hotspot. Each connected computing device may then also have various communications isolated through zonal control from the hotspot device.

Abstract: System and method for establishing simultaneous zones of control for various communications to and from a computing devices based on specific criteria corresponding to more than one zone of control encompassing similarly-situated network locations. A browser (or any other common term for a networked computing session GUI) executing on a computing device may establish several zones of restricted data interaction based on specific user-defined criteria, thereby establishing simultaneous zones that respectively correspond to one or more specific parameters with regard to networked computer interactions. For example, a first zone may be associated with only other computers located in the United States (as determined by DNS records and the like) and a second zone may be associated with only other computers located with a specific domain (e.g., www.mybusiness.com).

Abstract: A system and method for establishing zones of control for communications among computing devices. Zones of control refer to the concept of unique user-controlled silos separating the interactions between computer devices over the network. When the user of a device connects to a networked computing environment of any kind, at least some data may be sent from the user's device onto the network, as well as downloaded to the user's device. These “data interactions” are usually frequent and numerous. With a private encrypted browsing session established, communications within an established zone of control may be isolated from all other communications and vice versa.

Abstract: The present invention provides ocular cells, genetically modified by a CRISPR system targeting the expression of B2M for ocular cell therapy. The invention further provides methods of generating an expanded population of genetically modified ocular cells, for example limbal stem cells (LSCs) or corneal endothelial cells (CECs), wherein the cells are expanded involving the use of a LATS inhibitor and the expression of B2M in the cells has been reduced or eliminated. The present invention also provides a cell populations, preparations, uses and methods of therapy comprising said cells.

Abstract: System and method for extending zones of control through a hotspot for communications to and from computing devices based on specific criteria corresponding to zones of control. An encrypted virtual private network (VPN) for a browsing session may be established at a first computing device and remote server computers matching the parameters of the established zone. Then, a user of the first computing device may further establish a wireless hotspot network suited to allow additional remote computing devices to piggy-back on the one or more established encrypted virtual private networks. Thus, other connected devices using the hotspot connection to reach a broader computer network (e.g., the Internet) are then also taking advantage of the encrypted VPN being provided by the host of the hotspot. Each connected computing device may then also have various communications isolated through zonal control from the hotspot device.

Abstract: A system and method for establishing zones of control for communications among computing devices. Zones of control refer to the concept of unique user-controlled silos separating the interactions between computer devices over the network. When the user of a device connects to a networked computing environment of any kind, at least some data may be sent from the user's device onto the network, as well as downloaded to the user's device. These “data interactions” are usually frequent and numerous. With a private encrypted browsing session established, communications within an established zone of control may be isolated from all other communications and vice versa.

Abstract: System and method for establishing simultaneous zones of control for various communications to and from a computing devices based on specific criteria corresponding to more than one zone of control encompassing similarly-situated network locations. A browser (or any other common term for a networked computing session GUI) executing on a computing device may establish several zones of restricted data interaction based on specific user-defined criteria, thereby establishing simultaneous zones that respectively correspond to one or more specific parameters with regard to networked computer interactions. For example, a first zone may be associated with only other computers located in the United States (as determined by DNS records and the like) and a second zone may be associated with only other computers located with a specific domain (e.g., www.mybusiness.com).

Abstract: System and method for establishing zones of restricted data interaction based on specific user-defined parameters. In an embodiment, a first zone may be established having user-selected parameters for a first type of network traffic such as traffic associated with only other computers located in the United States (as determined by DNS records and the like) and a second zone may be established having user-selected parameters for a second type of network traffic such as network traffic associated with only other computers located with a specific domain (e.g., www.mybusiness.com). In such an established and zoned interaction environment, data that is free to be shared in one zone will not be free to be shared in any other zone. Thus, one may establish a virtual private network (VPN) using encrypted communications for a work session with specific user-selected parameters in establishing various zones of control.

Abstract: A customizable sleep system includes a mattress, a mattress topper, and/or a pillow for accommodating the needed or desired body support and cooling of users. The system may include a mattress comprising one or more upper support members, each upper support member including multiple foam layers having at least one of different thermal conductivity characteristics and different glass transition temperature (Tg) characteristics and one or more lower support members, each lower support member including multiple foam layers having different support characteristics. The system may include one or more pillows each including multiple distinct foam layers differing in at least one of a support characteristic, a thermal conductivity characteristic, and a Tg characteristic. The system may include a mattress topper with one or more support members which each include multiple foam layers differing in at least one of a support characteristic, a thermal conductivity characteristic, and a Tg characteristic.

Abstract: A recloseable package is provided having a tamper-indicating element. The tamper-indicating element include one or more self-terminating shapes that form one or more chads after opening the recloseable package. Advantageously, the self-terminating shapes provide a simple, visual cue of graphical alignment in the seal to show the customer whether or not a package has been opened.

Abstract: A recloseable package is provided having a tamper-indicating element. The tamper-indicating element include one or more self-terminating shapes that form one or more chads after opening the recloseable package. Advantageously, the self-terminating shapes provide a simple, visual cue of graphical alignment in the seal to show the customer whether or not a package has been opened.

Abstract: A parasol heater comprising a moveable dish provided above a gas burner, wherein the dish is pivotably coupled to a first side of the burner, the heater comprising an actuator coupled to the dish and configured in use to effect movement of the dish relative to the gas burner, the actuator extending downwardly from the dish along a second side of the burner, the second side being opposite to the first side.

Abstract: A parasol heater comprising a moveable dish provided above a gas burner, wherein the dish is pivotably coupled to a first side of the burner, the heater comprising an actuator coupled to the dish and configured in use to effect movement of the dish relative to the gas burner, the actuator extending downwardly from the dish along a second side of the burner, the second side being opposite to the first side.

Abstract: A container comprising a plastic container base, a plastic container lid, and a pair of first and second tracks is provided. The container base has a bottom, front and back ends, and a pair of sidewalls that define a storage area. The container lid is slideably disposed on the plastic container base and includes a cover portion that encloses the storage area when the plastic container is in a closed position. The pair of first tracks are included one on each of the sidewalls. The pair of second tracks depend downwardly from opposing sides of the cover portion and slideably engage the pair of first tracks. As such, the container lid is slideable from the closed position to an open position to form a dispensing opening between the front end of the container base and a forward edge of the cover portion.

Abstract: Installing computer software components on a client device for enabling connectivity to a host system by at least one of several different hardware devices typically includes receiving a connectivity component for enabling connectivity to a host system by at least one of several different hardware devices and detecting whether installation of the connectivity component is needed to enable connectivity between the client device and the host system. The connectivity component is typically installed on the client device when installation of the connectivity component is needed.

Abstract: A container comprising a plastic container base, a plastic container lid, and a pair of first and second tracks is provided. The container base has a bottom, front and back ends, and a pair of sidewalls that define a storage area. The container lid is slideably disposed on the plastic container base and includes a cover portion that encloses the storage area when the plastic container is in a closed position. The pair of first tracks are included one on each of the sidewalls. The pair of second tracks depend downwardly from opposing sides of the cover portion and slideably engage the pair of first tracks. As such, the container lid is slideable from the closed position to an open position to form a dispensing opening between the front end of the container base and a forward edge of the cover portion.