Abstract: Techniques are described for dynamically establishing and scaling IPSec tunnels to connect hundreds of sites of a network by making use of the user intent of connecting certain applications for applying security policies and translating it dynamically based on the location and needs of the workloads to set up the network on demand. The techniques involve a tight loop between the network controller of a site (e.g., a cloud Application Policy Infrastructure Controller) and the inter-site or multi-cloud inter-connect controller, stitched through services that enable security and network automation at scale. In particular, to control the number of IPSec tunnels, IPSec tunnels are established only when required. Additionally, IPSec tunnels may be eliminated when no longer required. Thus, resources of a network may be used in a measured way that is necessary and sufficient to meet network traffic demand.

Abstract: An apparatus, related devices and methods, having a memory element operable to store instructions; and a processor operable to execute the instructions, such that the apparatus is configured to identify, on an electronic device, a phone number of an incoming caller device; request, via an out-of-band control channel, a digital certificate for the phone number from the incoming caller device; receive, via the out-of-band control channel, the digital certificate for the phone number from the incoming caller device; determine whether the digital certificate for the phone number is authentic; and indicate, on the electronic device, based on a determination that the digital certificate for the phone number is authentic or not authentic, whether the phone number is authentic or not authentic.

Abstract: A method includes determining, by a controller device that manages a plurality of network devices, device characteristic information for a network device of the plurality of network devices and selecting, by the controller device, one or more sensors from a plurality of sensors based on the device characteristic information for the network device. The method further includes outputting, by the controller device, an instruction to cause the network device to generate the one or more selected sensors at the network device and receiving, by the controller device, sensor information from the one or more selected sensors generated at the network device.

Abstract: Digital mirror systems for vehicles and methods of operating the same are disclosed. An example vehicle control system includes: a driver monitoring system including a head position determiner to determine at least one of a location of a head, an orientation of the head, or an eye gaze point of the head; a digital mirror system including a region-of-interest (ROI) detector to identify an ROI based on the at least one of the location of the head, the orientation of the head, or the eye gaze point of the head, and a cropper to extract a portion of a first image corresponding to the ROI to form a second image, the first image representing an area exterior to the vehicle; and a display within an interior area of the vehicle to present the second image.

Abstract: Embodiments disclosed herein are directed to methods and systems of password-based threshold authentication, which distributes the role of an authentication server among multiple servers. Any t servers can collectively verify passwords and generate authentication tokens, while no t?1 servers can forge a valid token or mount offline dictionary attacks.

Abstract: A diverter seal member for a diverter structure of a tub spout structure includes a central body, a first seal extension, and a second seal extension. The central body includes a first side, a second side, and an aperture extending completely through the central body between the first side and the second side of the central body. The first seal extension extends from the first side of the central body and around a central axis that extends axially through a center of the aperture. The first seal extension includes a first extension side, a second extension side, and an extension end. The extension end of the first seal extension extends substantially perpendicularly to the first extension side and the second extension side of the first seal extension. The second seal extension extends from the second side of the central body around the central axis of the aperture.

Abstract: A Relational Database Management System (“RDBMS”) as a service cluster may including a master RDBMS Virtual Machine (“VM”) node associated with an Internet Protocol (“IP”) address and a standby RDBMS VM node associated with an IP address. The RDBMS as a service (e.g., PostgreSQL as a service) may also include n controller VM nodes each associated with an IP address. An internal load balancer may receive requests from cloud applications and include a frontend IP address different than the RDBMS IP as a service addresses and a backend pool including indications of the master RDBMS VM node and the standby RDBMS VM node. A Hyper-Text Transfer Protocol (“HTTP”) custom probe may transmit requests for the health of the master RDBMS VM node and the standby RDBMS VM node via the associated IP addresses, and responses to the requests may be used in connection with a failover operation.

Abstract: Disclosed herein is a humeral head and cup trials, a system for humeral trialing, and a method for removing a humeral head and cup trial from a humeral stem. The humeral trial may include a first portion, a second portion, and a post extending from the second portion. The first portion may define an articular surface. The post may define a first length in a first configuration and a second length in a second configuration. The first length may be greater than the second length. The post may change from the first configuration to the second configuration by moving the first portion with respect to the second portion.

Abstract: A computing system identifies a media stream being received by a client, based on fingerprint matching conducted with query fingerprints generated by the client at a frame rate. The computing system then causes the client to increase the frame rate, in order to facilitate establishment by the computing system of synchronous lock between true time within the media stream and client time according to a clock of the client. The computing system then uses the established synchronous lock as a basis to map a true-time point at which a content revision should be performed in the media stream to a client-time point at which the client should perform the content revision. And the computing system causes the client to perform the content revision at the determined client-time point.

Abstract: A method, a system, and a computer program product are provided for analyzing an instructional video. Video data of an instructional video is analyzed to form multiple units of work. Each unit of work is a respective grouping of video frames of the instructional video based on a respective logical combination of activities associated therewith. Each unit of work is analyzed to produce a respective action graph of activities included in the unit of work, the respective action graph indicating interdependencies among the activities included therein. Interdependencies among activities across the units of work are determined to form a critical path graph. A received query is processed to provide troubleshooting assistance with respect to the instructional video based on the units of work, the action graphs, the critical path graph, and a knowledge base including information related to a subject matter of the instructional video.

Abstract: Systems and methods for a tightly coupled end-to-end multi-sensor fusion with integrated compensation are described herein. For example, a system includes an inertial measurement unit that produces inertial measurements. Additionally, the system includes additional sensors that produce additional measurements. Further, the system includes one or more memory units. Moreover, the system includes one or more processors configured to receive the inertial measurements and the additional measurements. Additionally, the one or more processors are configured to compensate the inertial measurements with a compensation model stored on the one or more memory units. Also, the one or more processors are configured to fuse the inertial measurements with the additional measurements using a differential filter that applies filter coefficients stored on the one or more memory units.

Abstract: A method for determining conditions in a wellbore extending through a subterranean formation includes: (a) deploying a plurality of sensor pods in the wellbore, wherein each sensor pod includes a housing and a plurality of sensors disposed in the housing; (b) measuring and recording a plurality of pressures and a plurality of temperatures with plurality of sensors of each sensor pod; (c) dissolving the housings of the pods to release the plurality of sensors from the pods after (b); and (d) lifting the sensors to the surface after (c).

Abstract: A transmission system for an electric vehicle. The system includes a gearbox containing gears and a lubricating fluid. A pump is provided for supplying and removing lubricating fluid from the gear box. The operation of the pump is controlled by a controller. A reservoir is provided for storing lubricating fluid. The controller is configured to control the pump so that a portion of the lubricating fluid is removed from the gear box when the vehicle is involved in a high acceleration event.

Abstract: Mechanisms for split tunneling are provided. The mechanisms identify user devices and determine that communications for a first device of the user devices are to be tunneled. These mechanisms also receive a DNS request from a second device of the user devices, modify the DNS request to request meta information corresponding to a domain identified in the DNS request, and send the DNS request to a DNS server. The mechanisms further receive a response to the DNS request, wherein the response includes the meta information, determine that communications for the second device are not to be tunneled based at least in part on the meta information, and cause the communications for the first device to be tunneled and the communications for the second device to not be tunneled.

Abstract: When a media client is receiving a media stream, the media client determines an upcoming time point at which the media client is to perform a content revision involving insertion (e.g., substitution or overlaying) of new content. The media client further determines an advanced time point when the media client should initiate a process of acquiring the new content, setting the advanced time point sufficiently in advance of the upcoming content-revision time point to enable the media client to obtain at least enough of the new content to be able to start the content revision on time. In an example implementation, the media client could determine the advanced time point by predicting how long the content-acquisition process will take, based on consideration of past instances of content acquisition, possibly correlated with operational factors such as content source, processor load, memory load, network speed, and time of day.

Abstract: One embodiment is a system comprising an engine including a dedicated EGR cylinder configured to provide EGR to the engine via an EGR loop, a non-dedicated cylinder, a plurality of injectors, an ignition system including a plurality of spark plugs, an intake throttle, and an electronic control system. The electronic control system is configured to control combustion during transient operation of the engine by determining one or more combustion control parameters compensating for variation of one or more of inert matter, unburned air and unburned fuel in EGR output by the dedicated EGR cylinder during transient operation of the engine, and an effect of the EGR loop on inert matter, unburned air and unburned fuel provided to the plurality of cylinders, and controlling operation of at least one of the throttle, the ignition system and the plurality of injectors in response to at least one of the one or more combustion control parameters.

Abstract: Some embodiments may be associated with a cloud computing environment. A serverless runtime workload may execute an eBPF program via a kprobe which gets invoked when function code is executed as a Linux process. The system may determine, by the kprobe function associated with an identifier, that an orchestrator is evicting the serverless runtime workload. Responsive to the determination, a userspace program may be invoked via the eBPF in tandem with the kprobe acting as an interception mechanism. The system may then capture the current workload process state data associated with the serverless runtime workload based on the identifier. A clustered memory-based storage component may store the captured current workload process state data in association with the identifier. A subsequent serverless runtime workload may determine that the orchestrator is restoring the serverless runtime workload.

Abstract: Systems, methods, and apparatuses of using biometric information to authenticate a first device of a user to a second device are described herein. A method includes storing, by the first device, a first key share of a private key and a first template share of a biometric template of the user. The second device stores a public key, and one or more other devices of the user store other key shares and other template shares. The first device receives a challenge message from the second device, measures biometric features of the user to obtain a measurement vector, and sends the measurement vector and the challenge message to the other devices. The first device receives partial computations, generated using a respective template share, key share, and the challenge message, from the other devices, uses them to generate a signature of the challenge message and send the signature to the second device.

Abstract: Programmable guide RNAs (gRNAs) play a central role in the CRISPR revolution sweeping biology and medicine by directing the function of a Cas protein effector to a target gene of choice. To achieve programmable control over regulatory scope, the activity of a conditional guide RNA (cgRNA) depends on the presence or absence of an RNA trigger, allowing for cell-selective regulation of CRISPR/Cas function. Unlike a standard gRNA, a cgRNA is programmable at multiple levels, with the target-binding sequence controlling the target of Cas activity (edit, silence, induce, or bind a gene of choice) and the trigger binding sequence controlling the scope of Cas activity. cgRNA mechanisms that are allosteric allow for independent design of the target and trigger sequences, providing the flexibility to select the regulatory target and scope independently.

Abstract: Systems and methods for forecasting cashflows across one or more accounts of a user disclosed. One example method may include retrieving a data set for each of a plurality of accounts from a database, constructing a graph including a plurality of nodes linked together by a multitude of edges, wherein each node identifies a time series value corresponding to one of the accounts, and each edge indicates a time series value of a corresponding set of transactions occurring between a corresponding pair of accounts, determining a plurality of constraints, determining a specified loss function based on the plurality of constraints, back-propagating a derivative of the specified loss function into a deep neural network (DNN) to determine a set of neural network parameters, forecasting, using the DNN, a time sequence for one or more of the nodes and one or more of the edges, and providing the forecasted time sequences to the user.