Abstract: A method in a computing device includes: capturing, via a sensor, an image of an indicium; determining a confidence level associated with machine recognition of the indicium; based on the confidence level, selecting a feedback attribute; prior to outputting content encoded in the indicium, generating, via an output device, a feedback signal having the feedback attribute, wherein the attribute is configured to indicate a likelihood of success of a decode event to decode the content encoded in the indicium.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed for text extraction from a receipt image. An example apparatus for clustering vertices, the apparatus comprises machine-readable memory, instructions, and processor circuitry to execute the machine-readable instructions to calculate a centroid corresponding to coordinates, calculate distances for respective ones of the coordinates relative to the centroid, calculate differences between the distances, determine whether ones of the differences satisfy a set of thresholds, in response to determining that ones of the differences satisfy the set of thresholds, calculate bearing angles for ones of the coordinates, determine an efficiency metric associated with respective ones of the bearing angles, sort each of the bearing angles based on the associated efficiency metric, and form coordinate clusters based on the sorted bearing angles.

Abstract: An organometallic chemistry-based compound for preventing coke formation in a hydrocarbon fluid system. The organometallic chemistry-based compound includes a coordination complex that interrupts an autoxidative pathway of coke formation. A component and a system for mitigating coke formation during delivery or circulation of a hydrocarbon fluid. The component includes a contact surface configured to be in contact with the hydrocarbon fluid. The contact surface is functionalized with an inhibitor ligand to form an inhibitor ligand-functionalized surface. The inhibitor ligand-functionalized surface interrupts an autoxidative pathway of coke formation.

Abstract: A molded semiconductor package includes: a semiconductor die; a substrate attached to a first side of the semiconductor die; a plurality of leads electrically connected to a second side of the semiconductor die opposite the first side; a heat sink clip thermally coupled to a pad at the second side of the semiconductor die; and a molding compound encapsulating the die, part of the leads, part of the heat sink clip, and at least part of the substrate. The molding compound has a first main side, a second main side opposite the first main side and at which the substrate is disposed, and an edge extending between the first main side and the second main side. The leads protrude from opposing first and second faces of the edge of the molding compound. The heat sink clip protrudes from opposing third and fourth faces of the edge of the molding compound.

Abstract: Systems and techniques for operating cooling system assemblies in a vehicle are discussed herein. The vehicle may receive a direction of travel and a speed. The vehicle may determine based on the direction of travel a leading cooling system assembly at a first end of the vehicle and a trailing cooling system assembly at a second end of the vehicle. The vehicle may determine, based on the direction of travel of the vehicle and/or whether the speed meets or exceeds a threshold speed, an action associated with the leading cooling system assembly and/or the trailing cooling system assembly and may perform the action.

Abstract: Various embodiments include methods and vehicles that may include managing driving policies in a vehicle advanced driver assist system (ADAS) that include obtaining vehicle sensor data, determining a current vehicle context based on the vehicle sensor data, selecting a modified vehicle driving policy from a plurality of saved modified vehicle driving policies based on the determined current vehicle context, and controlling vehicle behavior by the ADAS based upon the selected modified vehicle driving policy. Methods may also include receiving user voice inputs from a vehicle microphone, using a generative AI to infer relevance of the user voice inputs to vehicle driving policies or actions of the ADAS, adjusting a vehicle driving policy of the ADAS based on the inferred relevance of the user voice inputs, and commanding vehicle behavior based upon the adjusted vehicle driving policy.

Abstract: Techniques for offload device address translation fetching are disclosed. In the illustrative embodiment, a processor of a compute device sends a translation fetch descriptor to an offload device before sending a corresponding work descriptor to the offload device. The offload device can request translations for virtual memory address and cache the corresponding physical addresses for later use. While the offload device is fetching virtual address translations, the compute device can perform other tasks before sending the corresponding work descriptor, including operations that modify the contents of the memory addresses whose translation are being cached. Even if the offload device does not cache the translations, the fetching can warm up the cache in a translation lookaside buffer. Such an approach can reduce the latency overhead that the offload device may otherwise incur in sending memory address translation requests that would be required to execute the work descriptor.

Abstract: Embodiments of apparatuses, methods, and systems for unified address translation for virtualization of input/output devices are described. In an embodiment, an apparatus includes first circuitry to use at least an identifier of a device to locate a context entry and second circuitry to use at least a process address space identifier (PASID) to locate a PASID-entry. The context entry is to include at least one of a page-table pointer to a page-table translation structure and a PASID. The PASID-entry is to include at least one of a first-level page-table pointer to a first-level translation structure and a second-level page-table pointer to a second-level translation structure. The PASID is to be supplied by the device. At least one of the apparatus, the context entry, and the PASID entry is to include one or more control fields to indicate whether the first-level page-table pointer or the second-level page-table pointer is to be used.

Abstract: Systems, methods, and computer-readable media are provided for performing secure frame encryption as a service. For instance, a network edge device can determine at least a first path and a second path for routing a data packet. The network edge device can obtain a first plurality of values for at least one network metric, wherein the first plurality of values corresponds to the first path and at least a first backup path associated with the first path. The network edge device can obtain a second plurality of values for the at least one network metric, wherein the second plurality of values corresponds to the second path and at least a second backup path associated with the second path. The network edge device can select a path for routing the data packet based on a comparison of the first plurality of values and the second plurality of values.

Abstract: Methods and devices configure edge nodes of a virtual network overlay to continuously forward data plane traffic flows between client devices of a common subnet over the course of at least some of the edge nodes being EF-configured. TF-configured edge nodes and EF-configured edge nodes both play roles in unilaterally inducing address discovery by sending to client devices address discovery responses that were not prompted by address discovery requests. TF-configured edge nodes then handle ensuing address discovery requests by proxy, and subsequently handle certain traffic flows according to an EF-compatible forwarding mode, while EF-configured edge nodes continue to forward traffic flows by IP routing normally. This averts throughput of data plane traffic over the network overlay being reduced as a side effect of the heterogeneously configured edge nodes, and averts the possibility of client devices broadcasting address discovery protocol requests as a result of remote client devices being unreachable.

Abstract: Embodiments determine event, e.g., security breach, etc., occurrence based on telemetry data. One such method receives telemetry data, e.g., data based on an HTTP transaction, and a rule associated with the telemetry data. The rule defines at least one perimeter filter and at least one deep filter for processing the telemetry data. In turn, a rule engine is modified in accordance with the received rule. The modified rule engine is configured to automatically switch between the at least one perimeter filter and the at least one deep filter. The received telemetry data is processed with the modified rule engine to determine event occurrence.

Abstract: In some implementations, an application programming interface (API) management platform may receive, from a user equipment (UE), a request to a unified application programming interface (API) proxy that supports multiple users with different certifications, different sets of registered endpoints, different API keys, and different authentication tokens, wherein the request is associated with a user of the multiple users. The API management platform may perform an evaluation of the request based on a comparison of information indicated in the request and information associated with the user, wherein the request is accepted based on a validation of the request or the request is blocked based on an invalidation of the request.

Abstract: A method of cross-domain policy orchestration may include executing, with a cross-domain automation (CDA) controller, a macro-segmentation of a plurality of domains based at least in part on metadata defining a mapping to a corresponding plurality of domain controllers, and executing, with the CDA controller, a micro-segmentation of policies within a group based at least in part on a merged policy matrix obtained from policies of the domain controllers.

Abstract: A native cloud-based VM in a cloud computing environment of choice is live-mounted without requiring nesting techniques. All operating system data needed to live-mount the VM is accessed over ISCSI. The disclosed technology: supports both Windows and Unix-like (e.g., Linux) operating systems; handles any number of partitions of the root file system without repeated mounting, exporting, and unmounting; and uses only internet protocols (e.g., HTTP, (SCSI) to live-mount the VM. The live-mounted VM gains access to a variety of secondary copies, e.g., made with file-level techniques or with block-level techniques, made within or outside the public cloud computing environment, made from other VMs having the same or a different hypervisor than the public cloud computing environment, and/or made from non-virtualized sources. Access to snapshots as a data source for the live-mounted VM is also disclosed. Thus, a streamlined and source-agnostic technology is disclosed for live-mounting VMs in a public cloud.

Abstract: An integrated circuit (IC) includes one or more active transistors and multiple series-coupled dummy transistors. The dummy transistors are coupled between two active transistors and/or at the ends of each active transistor. When the dummy transistors are coupled between two active transistors, apart from two conductive regions that are coupled to two active transistors, each remaining conductive region of the dummy transistors is maintained in a floating state to control a leakage current between the two active transistors. Similarly, when the dummy transistors are coupled at an end of one active transistor, apart from one conductive region that is coupled to the active transistor, each remaining conductive region of the dummy transistors is maintained in the floating state to control a leakage current between the active transistor and the dummy transistors.

Abstract: This technology enables directed broadcasts in network fabrics. A control plane node is configured to resolve directed broadcast addresses by mapping the directed broadcast address to a subnet address. A fabric border node receives a directed broadcast, extracts a destination address, and transmits a request to the control plane node to resolve the destination address. The control plane node retrieves the stored mapping and generates a map reply with a multicast destination. The fabric border node encapsulates and forwards the directed broadcast to fabric edge nodes, which decapsulate the directed broadcast and deliver a data set from the directed broadcast to appropriate end point devices. Each fabric edge node may be enabled to determine if the fabric edge node may be connected to a silent host and, based on that determination, request the fabric border node to be added to the multicast destination to receive the directed broadcast.

Abstract: A time-division multiplexed (TDM) communication system has a dynamic bandwidth allocation (DBA) controller that is configured to reduce demand overestimation so that more optimal bandwidth allocation is achieved. Upon receiving load information from a transceiver, the DBA controller is configured to estimate an amount of change to the transceiver's reported load based on previous allocations of bandwidth to the transceiver for frames that occur during a reporting delay (e.g., the delay from the time that the load information is transmitted until it is received and processed). That is, the estimated load is reduced in an effort to account for transmissions made by the transceiver during the reporting delay, thereby preventing or reducing the amount of demand overestimation that would otherwise occur. Thus, the transceiver may be allocated less bandwidth according to a desired DBA algorithm so that more network bandwidth is available for other transceivers.

Abstract: Embodiments determine event, e.g., performance degradation, security breach, etc., occurrence based on telemetry data. An embodiment receives telemetry data, e.g., data based on an HTTP transaction, and a rule associated with the telemetry data. The rule defines one or more filters for processing the telemetry data. In turn, a rule engine is modified in accordance with the received rule. The received telemetry data is processed with the modified rule engine to determine event occurrence.

Abstract: Techniques and architecture are described for L2 service insertion in a network. More particularly, the techniques and architecture provide for monitoring a L2 service, e.g., firewall, MAC address (instead of learning the MAC address) and registering/de-registering the service node (e.g., fabric border or edge or LISP service_etr) to the service control plane (e.g., LISP MSMR) based on this. This not only load-balances the traffic (per L2 flow) but also tracks it for node's liveliness. The techniques and architecture also provide L2 service insertion connected to a service border to allow for dynamic SGT based service, e.g., firewall, insertion for both software defined access (SDA) fabric and non-fabric deployments.

Abstract: Techniques for a Software-Defined Networking (SDN) controller associated with a multisite network to implement jurisdictional data sovereignty polices in a multisite network, route network traffic flows between user sites and destination services over one or more provider sites, and/or perform a routing operation on the network traffic flow(s) based on the jurisdictional data sovereignty policies. The jurisdictional data sovereignty polices may be implemented using destination group tags (DGTs) and/or source group tags (SGTs). A secure access service edge (SASE) associated with the network controller may generate, store, and distribute the DGTs to provider sites and/or the SGTs to user sites. Based on the SGT and/or DGT associated with a network traffic flow, one or more services may be applied to the network traffic flow, and the network traffic flow may be routed through a particular region of a software-defined access (SDA) transit.