Abstract: Systems are provided for configuring applications in a distributed environment to enable more granular customization of application behavior. A centralized hierarchical configuration data store may be used to store configurations corresponding to a multi-level hierarchical model. The distributed environment may include a plurality of applications hosted by a plurality of application servers, where the application servers and/or applications are associated with an environment, an instance, and a category. The plurality of applications may load and apply configurations via a configuration control engine from the centralized hierarchical configuration data store based on the environment, instance, and category associated with the applications.

Abstract: In some examples, a first skeleton of a layout of a first version of an application screen may be compared with a second skeleton of a layout of a second version of the application screen. It may be determined whether the first version of the application screen is malformed based on the comparison.

Abstract: A first identity claim and a first attempt to prove password possession are received. As a result of determining that the first attempt to prove password possession is a match to a password in a set of passwords, but that the first identity claim is a mismatch to an identity that corresponds to the password, an authentication process that includes incrementing a counter associated with the password is performed. A second identity claim and a second attempt to prove password possession is received. As a result of determining that the second attempt to prove password possession is a match to the password, an authentication process that includes incrementing the counter associated with the password only if the second identity claim is a mismatch to the first identity claim is performed.

Abstract: A method begins by a dispersed storage (DS) processing module receiving a request to copy a data object in a dispersed storage network (DSN). The method continues with the DS processing module identifying one or more sets of at least a decode threshold number of slice names for one or more sets of encoded data slices of the data object and generating one or more sets of at least a decode threshold of new slice names. The method continues with the DS processing module sending the one or more sets of at least a decode threshold of new slice names to storage nodes of the DSN and instructing the storage nodes to link the one or more sets of at least a decode threshold of new slice names to the one or more sets of encoded data slices thereby producing a non-replicated copy of the data object.

Abstract: Disclosed herein are system, method, and computer program product embodiments for an analytic data export tool. An embodiment by visualizing, by a computing device, a plurality of available analytic data in a graphical user interface; receiving, by the computing device, a data selection input, wherein the data selection input comprises an interaction with the visualized plurality of available analytic data; packaging the plurality of available analytic data in a data package according to the data selection input; and exporting the data package according to one of a plurality of displayed export options displayed in the graphical user interface.

Abstract: Methods and systems for extracting sentences are provided, one of methods comprises, receiving a keyword, parsing a document, and identifying each of a plurality of sentences included in the parsed document, configuring a graph having vertices and edges, wherein each vertex corresponds to each sentence, and each edge has a first weight corresponding to similarity between each pair of the sentences, calculating importance of each sentence by applying a modified PageRank algorithm to the graph, wherein the modified PageRank algorithm is designed to reflect a second weight corresponding to whether the keyword is included in a sentence of each vertex adjacent to a first vertex and extracting important sentences from the document based on the calculated importance.

Abstract: A metadata synchronization system is provided. The metadata synchronization system may include a plurality of metadata elements included in a plurality of applications. The plurality of applications may be coupled to a plurality of application hubs. The plurality of application hubs may be coupled to a federated metadata repository. The plurality of application hubs may be coupled to a governed metadata repository. The system may include crawling the plurality of applications, the plurality of application hubs, the federated metadata repository and the governed metadata repository to ensure that the metadata elements are synchronized across all of the components. In the event that a metadata element is not synchronized across any one of the components, the system may notify interested parties and/or resolve the discrepancy.

Abstract: Technologies are described herein for reducing network traffic when replicating memory data across hosts. The memory data stored in a main memory of the host computer is replicated to a main memory of a second host computer. Memory data from the local data storage of the second host computer that is a duplicate of memory data from the main memory is identified. Instead of sending the memory data from the main memory that is duplicated, the duplicated memory is copied from the local storage to the main memory of the second host computer.

Abstract: Bookmarked web pages in a web browser are retrieved. A user selection of a bookmark is received. The bookmark is associated with a web page and a bookmarked URL having one or more path elements in a hierarchy for the web page. A determination is made that the web page is not located at the bookmarked URL. A modified URL is generated by deleting one or more path elements of the bookmarked URL according to the hierarchy. A second web page is retrieved at the modified URL. When a user has navigated to a third web page, the content of the third web page is compared to a stored version of the content of the first webpage to determine correspondence between the two web pages. The selected bookmark is updated to be associated with the URL of the third web page.

Abstract: Displaying a visual representation of table, including generating a visual representation of a table including a plurality of dimensions, displaying the visual representation of the table, where a first dimension value corresponding to one of the plurality of dimensions is collapsed when the table is initially generated, and a second dimension value corresponding to one of the plurality of dimensions is expanded such that sub-dimension values for the first dimension value are not visible, and sub-dimension values for the second dimension value are visible, detecting that a user has placed a first dimension value manipulator corresponding to said first dimension value into an expand mode, and in response to detecting the first dimension value manipulator is in an expand mode, expanding the first dimension value in the displayed visual representation of the table such that the sub-dimension values for the first dimension value are visible.

Abstract: A computer-implemented method for accessing a hosted service on client devices is described. The client devices include client software that uses a remotely delivered policy to redirect network requests for hosted services to a server to enforce visibility, policy and data security for network delivered services. The method can be used in conjunction with existing VPN and proxy solutions, but provides distinct additional functionality, particularly suited to corporate needs. Policies allow entities to centralize enforcement of service-specific restrictions across networks and communication channels, e.g. only certain users can download client records from a service—irrespective of the network used to access the service.

Abstract: A computer-implemented method for accessing a hosted service on client devices is described. The client devices include client software that uses a remotely delivered policy to redirect network requests for hosted services to a server to enforce visibility, policy and data security for network delivered services. The method can be used in conjunction with existing VPN and proxy solutions, but provides distinct additional functionality, particularly suited to corporate needs. Policies allow entities to centralize enforcement of service-specific restrictions across networks and communication channels, e.g. only certain users can download client records from a service—irrespective of the network used to access the service.

Abstract: A self-describing data format capable of carrying payload information, such as Tuxedo payload information, as well as filter information. The data format can allow for expression of some or all of Tuxedo Typed Buffers, including STRING, CARRAY, MBSTRING, VIEW, VIEW32, FML, and FML32. The data format is also capable of supporting nesting and error-checking. The proposal of user payload collection can allow customers to siphon off user/payload data to be used in applications, such as Business Intelligence applications, without the need for additional information to be passed with the payload data.

Abstract: Techniques for encoding data in grid encoded data storage systems are described herein. Data is stored in a grid of shards using grid encoding techniques that store the data in a combination of data shards and derived shards. Because the data is redundantly encoded in the grid of shards, a plurality of distinct copies of the data are reproducible from the grid of shards where each distinct copy is reproducible from a non-overlapping set of shards of the grid of shards.

Abstract: Methods and systems disclosed herein may be used to determine the structure of a dataset comprising discrete-valued data corresponding to features and items. In some embodiments, a device may receive a discrete-valued matrix with a first dimension corresponding to items and a second dimension corresponding to features. The device may calculate an engineered features set and a weights set for the matrix. The device may update the engineered features set using the weights set, and update the weights set using the updated engineered features set based on the mutual information between the matrix and one of the updated engineered features set. The device may receive a request indicating at least one of the engineered features set, identify items based on the matrix and the indicated at least one of the engineered features set, and provide a response based on the identified items.

Abstract: Disclosed are various embodiments for inhibiting or preventing automated data extraction from network pages. A source for a network page having a document structure is obtained. An obfuscated network page is generated from the network page by altering the document structure to inhibit automated extraction of data. The obfuscated network page is configured to have a visual appearance that is the same as that of the network page when rendered by a client for display. The obfuscated network page is sent to the client in response to a request from the client for the network page.

Abstract: A session, consisting of multiple page views by a user with a web service, is monitored, analyzed, and diagnosed for a user. The session may include one or more requests or page views experienced by a user during the session. The session may be defined as the user experience on a series of network content pages visited through a single instance of a network browser. The session may be determined to end when no activity is detected from the user for a specified period of time. In other implementations, a session may be based on a user indication, a set period of time, or for some other reason. The data is collected by one or more agents throughout the system, reported to a controller, and correlated together at the controller for querying and reporting. The correlated data is reported by the controller to a user through an interface.

Abstract: One or more techniques and/or systems are provided for detecting stale data and/or changed data. For example, a bitmap file may be maintained and mapped to an inofile describing various states of files of a file system. The bitmap file may be populated with bitmap records indicating whether files were accessed, modified, or have other states. The bitmap file may efficiently convey information used to determine whether files have not been accessed recently (e.g., stale data) or were recently modified (e.g., changed data) compared to the inofile because the bitmap file may comprise a fraction of the size of the inofile (e.g., a byte of information may be used to represent various states of one or more files). In this way, instead of evaluating a relatively larger inofile, the bitmap file may be evaluated to efficiently identify stale data for deletion or destaging and/or changed data for backup.

Abstract: A computing device including a screen; a memory configured to store an application for at least one of image acquisition, image uploading or image editing; and a processor configured to upload at least one of image or video file to a service center via a communication network, provide, in the screen, an option for allowing a first party or a first group to edit, view or download the uploaded image or video file, or append content to the uploaded image or video file based on the application stored in the memory, wherein the content corresponds to a text, titles or captions, and provide, in the screen, the option for allowing a second party or a second group to edit, view or download the uploaded image or video file, or append content to the uploaded image or video file based on the application stored in the memory, wherein the first party's right level or the first group's right level is different from the second party's right level or the second group's right level.

Abstract: A software plugin integrated with the development environment maintains a list of independently managed assets that are installed within the development environment. The independently managed assets are provided by an entity with which the software plugin can communicate to determine whether newer versions of the assets have been released. The software plugin automatically downloads and installs the newer version of the assets with minimal, if any, user intervention. Further, the software plugin monitors the interdependencies between different assets installed within the development environment. When updating to a newer version of an asset, the software plugin identifies any conflicts that may occur with regards to the interdependencies when the asset is updated.

Abstract: A server for offering a service targeting a user and a service offering method thereof, the method including: collecting data from a plurality of user devices; determining a unit zone partitioned from a service zone based on geographic information; adjusting the unit zone based on the amount of data collectable according to the determined unit zones; performing modeling to parse the data collected according to the adjusted unit zones; and offering a service targeting a user of the unit zone, based on results from the modeling.

Abstract: The present disclosure is directed toward systems and methods for managing electronic documents. For example, systems and methods described herein provide an electronic document owner with an analysis of one or more potential recipient's availability to review and sign the electronic document. Additionally, systems and methods described herein schedule the review and signing of an electronic document for a recipient such that the recipient does not miss the signing deadline for the electronic document.

Abstract: Techniques and mechanisms described herein facilitate the storage of digital media recordings. According to various embodiments, a system is provided comprising a processor, a storage device, Random Access Memory (RAM), an archive writer, and a recording writer. The archive writer is configured to retrieve a plurality of small multimedia segments (SMSs) in RAM and write the plurality of SMSs into an archive container file in RAM. The single archive container file may correspond to a singular multimedia file when complete. New SMSs retrieved from RAM are appended into the archive container file if the new SMSs also correspond to the singular multimedia file. The recording writer is configured to flush the archive container file to be stored as a digital media recording on the storage device once enough SMSs have been appended by the archive writer to the archive container file to complete the singular multimedia file.

Abstract: Methods, systems, and apparatus include computer programs encoded on a computer-readable storage medium for providing content to a user. A method includes: identifying a first resource, the first resource including one or more links to second, other resources and at least one slot for filling with third party content, wherein first selection criteria are associated with a first slot of the at least one slots; determining for at least one of the second other resources entities associated therewith, including evaluating a page associated with the second other resource to identify entities that are associated with content presented on the page; using the determined entities to either augment or filter the first selection criteria producing enhanced selection criteria; and determining one or more content items for presentation to a user in the first slot, wherein determining includes using the enhanced selection criteria to identify the one or more content items.

Abstract: Systems and methods are described for selecting a model for a simulated phishing campaign for a user based on classifying a user into a cluster of a plurality of clusters. A campaign controller may initiate a simulated phishing campaign for a user. In some examples, while initiating the simulated phishing campaign the campaign controller identifies a plurality of attributes of the user and/or a plurality of attributes of a company of the user, and sends the plurality of attributes to a serving module of the campaign controller. The serving module receives historical information on activity associated with the user during previous simulated phishing campaigns. The serving module uses the historical information as input into one or more clustering models and using the model, classifies the user into a cluster which contains users that are responsive to one or more specific models.

Abstract: Techniques are disclosed for improving management of user information in instant messaging systems. Expiration criteria are defined, whereby one or more users or user groups may be considered as having “expired” from consideration by instant messaging functions such as presence determination. In particular, instant messaging activity is preferably used as an expiration criterion. Absence of inbound or outbound messages for a specified amount of time (or since a particular date/time) can therefore be used as a trigger for treating a user or group of users as expired. As a result, efficiency of an instant messaging system is improved by omitting the expired users and groups from subsequent management operations. Optionally, an expired user or group may be revived upon occurrence of certain events (such as a newly-arriving instant message from, or a change in presence status of, the user or group).

Abstract: An electronic device that provides long-lived, but selectively ephemeral access to content is described. In particular, the electronic devices may provide secure content, which was generated based on protection information and the content, to a computer system. After receiving a share command, the electronic device may communicate, to the computer system, a unique token that is associated with a recipient in a communication network and an instruction to enable a recipient electronic device associated with the recipient to view the content. This unique token may allow the computer system to access the content in the secure content, so that the computer system has an ability to provide the content to the recipient electronic device. Moreover, after receiving an un-share command, the electronic device may temporarily or permanently disable the unique token on the computer system, so that the computer system is unable to access the content in the secure content.

Abstract: A system on chip structured in a second network device is provided. The system on chip includes: a first resource which is structured as at least one of hardware and software; a resource management module; and a processor configured to control or execute the resource management module to monitor a state of the first resource, and manage a sharing condition of the first resource to be shared by a first network device and the second network device and shared information of at least one second resource which is hardware and/or software, currently shared by the second network device and a third network device.

Abstract: The present disclosure involves systems, software, and computer implemented methods for providing quality-driven processing of out-of-order data streams based on a configurable quality metric. In one example, the method includes identifying a configurable quality metric defined by a user or application for executing continuous queries over a sliding window, the metric specifying a user requirement for the quality of the continuous query result. A quality threshold metric is calculated based on the configurable quality metric, the configurable quality metric associated with a size of an adaptation buffer for incoming tuples of the query. In response to receiving a signal indicating a new query result, a sliding window prior to a current time is identified. A runtime quality metric associated with the incoming tuples for the sliding window is measured, and the adaptation buffer is modified based on a difference between the quality threshold metric and the measured runtime quality metric.

Abstract: Embodiments of the present disclosure provide methods and apparatuses for controlling data reading from a storage system. The storage system includes a plurality of storage devices and a backup of the data is stored in each of the plurality of storage devices. A method comprises: receiving a read request for reading data from the storage system; determining, from the plurality of storage devices, a target storage device for processing the read request according to the number of outstanding read requests and the number of completed read requests recorded for each storage device; and sending the read request to the target storage device. The methods or apparatuses according to the embodiments of the present disclosure can reduce I/O response time and improve I/O performance.

Abstract: Creating a platform architecture can include receiving, using a computer, user input specifying a plurality of attributes of the platform architecture, wherein the platform architecture is adapted for implementation in a system-on-chip, and determining, based on the attributes and using the computer, a processing domain of the platform architecture, wherein the processing domain includes a processor, a software operating context, a device, and a memory. A hardware description of the platform architecture is generated using the computer. The hardware description specifies the processing domain, wherein the operating context is adapted for execution by the processor, and the device and the memory are addressable by the processor.

Abstract: Data conversion circuitry receives structured records including normalized data and performs a data conversion process on the structured records to generate unstructured records including unstructured syntax. The data conversion circuitry performs the data conversion process according to an unstructured syntax requirement including a syntax field mapping between the structured records and the generated unstructured records.

Abstract: A system, method, and apparatus are provided for visualizing quotas on resources within a computing environment (e.g., a data center, a computing cluster) that includes multiple brokers, gateway servers, or other entities that control access to the resource(s). Through a visualization interface, an operator of a quota system can set, change, and/or delete quotas on resources and/or sub-resources for any number of clients or consumers of the resources. The visualization interface may also enable access to a log of changes to quotas and/or graphs or other displays of statuses of any selected quotas for any selected clients and resources/sub-resources.

Abstract: Systems and methods for conducting a sign-up process according to configuration data are presented. As indicated, the sign-up process is driven by configuration data, typically though not exclusively contained in an accessible configuration file, to conduct a sign-up process. According to the configuration data, the sign-up process utilizing the base set of executable code may conduct a sign-up process that includes presentation of data according to thematic elements, control the ordering of data aggregation and presentation, provide conditional branching among configuration items/instructions based on a variety of factors including user-provided input, validation of sign-up information including third-party validation of sign-up information, nesting sign-up processes, access to remotely located information, and external execution of functionality from or by external third-party services.

Abstract: A method by which a proxy server of a wireless communication system transmits and receives packets, according to one embodiment of the present specification, comprises the steps of: receiving a data request from a terminal; receiving a packet corresponding to the data request from a data server; receiving feedback related to a transmission state from a network entity comprising a base station and/or an access point (AP); determining a redundancy rate on the basis of the feedback; encoding the received packet on the basis of the determined redundancy rate; and transmitting the encoded packet to the network entity. According to the embodiment of the present description, limited wired and wireless resources can be efficiently used, and loads to be applied to the base station or the AP can be efficiently controlled.

Abstract: A key master service capable of operating on a service provider in a network enables is disclosed. The key master enables authorized parties to securely exchange client information without compromising client security. One feature of the key master service is the generation of a unique key for each client. All parties in an authorized universe access, exchange and modify client information by referencing the universal key, rather than using known client identifiers. Client information is further secured by advantageously applying an obfuscation function to the data. Obfuscated client information is stored together with the universal key as keyed client data at the client and/or server, where it may be directly accessed by the service provider or third parties. Because client information is stored and exchanged without the ability to discern either the client identity or the nature of the information, such information is secured against malicious third-party interception.

Abstract: Disclosed are various embodiments for inhibiting or preventing automated data extraction from network pages. A source for a network page having a document structure is obtained. An obfuscated network page is generated from the network page by altering the document structure to inhibit automated extraction of data. The obfuscated network page is configured to have a visual appearance that is the same as that of the network page when rendered by a client for display. The obfuscated network page is sent to the client in response to a request from the client for the network page.

Abstract: Disclosed aspects relate to structured data and unstructured data integration management to provide a valid Java Database Connectivity (JDBC) results-set. A query is received by a database driver. In response to receiving the query, a single data frame having both a set of structured data and a set of unstructured data is constructed in a dynamic fashion by the database driver. Based on the single data frame, a valid JDBC results-set for the query is compiled by the database driver. Accordingly, a query response having the valid JDBC results-set is provided by the database driver.

Abstract: Computer implemented systems and methods, and computer program products, for determining one or more proposed configurations of a computing system upon which a software application will be deployed. A proposed configuration may include a computing system having virtualized information technology resources deployed across an enterprise. For example, a method may include receiving software application information, such as information including software application identification information and software application licensing information. The method may further include receiving current computing system requirements information and future computing system requirements information, wherein the future computing system requirements information includes future computing system growth information and future computing system target utilization information.

Abstract: Systems, apparatuses, and methods for managing cluster-level performance variability without a centralized controller are described. Each node of a multi-node cluster tracks a maximum and minimum progress across the plurality of nodes for a workload executed by the cluster. Each node also tracks its local progress on its current task. Each node also utilizes a comparison of the local progress to reported maximum and minimum progress across the cluster to identify a critical, or slow, node and whether to increase or reduce an amount of power allocated to the node. The nodes append information about the maximum and minimum progress to messages sent to other nodes to report their knowledge of maximum and minimum progress with other nodes. A node updates its local information if the node receives a message from another node with more up-to-date information about the state of progress across the cluster.

Abstract: Data elements from data sources and having a data value set are linked by using hash functions to determine a dimensionally reduced instance signature for each data element based on all data values associated with that data element to yield a plurality of dimensionally reduced instance signatures of equivalent fixed size such that similarities among the data values in the data value sets across all data elements is maintained among the plurality of instance signatures. Candidate pairs of data elements to link are identified using the plurality of instance signatures in locality sensitive hash functions, and a similarity index is generated for each candidate pair using a pre-determined measure of similarity. Candidate pairs of data elements having a similarity index above a given threshold are linked.

Abstract: A system uses agents to monitor a distributed business transaction as well as monitor changes in software configuration. An agent may detect a file load, such a class load, obtain portions of the file such as functions, and perform a hash on the byte code functions. A hash tree may then be constructed and compared to previous states of the system. The hash tree may be generated, for example, at each file loading detected, so that system states can be compared. Differences in hash trees are detected and the changes are reported to an administrator of the system that provides the distrusted business transaction.

Abstract: An electronic device includes a microphone recording audio data comprising first and second sections, a screen capable of detecting input of strokes on a surface thereof, a receiver configured to receive stroke data representing strokes input on other electronic devices during a period of the recording, and a hardware processor. The hardware process is configured to determine a first number of users who performed or devices that processed handwriting inputs in the first section, determine a second number of users who performed or devices that processed handwriting inputs in the second section, conditionally display on the screen a first object representing the first section in a first display style, and conditionally display on the screen a second object representing the second section in a second display style, the first and second numbers being different and the first and second display styles being visually distinguishable from each other.

Abstract: A method at a server includes: receiving a user request to clarify audible verbal information associated with a media content item playing in proximity to a client device, where the user request includes an audio sample of the media content item and a user query, and the audio sample corresponds to a portion of the media content item proximate in time to issuance of the user query; in response to the user request: identifying the media content item and a first playback position in the media content corresponding to the audio sample; in accordance with the first playback position and identity of the media content item, obtaining textual information corresponding to the user query for a respective portion of the media content item; and transmitting to the client device at least a portion of the textual information.

Abstract: A system, for example, an online system or a database system schedules requests received for execution. The system maintains consumer groups and receives a measure of amount of resources allocated for each consumer group. The system maintains a measure of accumulated elapsed time of execution of requests received from each consumer group. If the system determines that resources are available for executing a request, the system selects a request for execution from a consumer group based on the measure of accumulated elapsed time for processing queries for the consumer group and the measure of amount of resources allocated for the consumer group. The system maintains relative cumulative elapsed times of queries across consumer groups in the same ratio as the allocated share for the consumer groups. Accordingly, the system schedules requests such that each consumer group approaches its allocation of resources compared to other groups smoothly over time.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for displaying reduced and detailed visual representations of calendar items based on mouse cursor movement. A database storing data objects identifying calendar items can be maintained. Each calendar item can comprise a subject, a date, and a time range. A reduced visual representation of a first calendar item can be displayed in a first region of a user interface on a display of a device. The reduced visual representation of the first calendar item can comprise an at least partially obscured presentation of the subject, the date, and/or the time range of the first calendar item. Mouse cursor movement in the first region of the user interface can be detected. A detailed visual representation of the first calendar item can be displayed in the first region of the user interface in response to detecting the mouse cursor movement.

Abstract: The present disclosure provides a hierarchical storage management system for storing data. A first controller receives a request to migrate a data item to a first storage tier. The data item is associated with at least an initial object ID. The first controller, in response to the request, generates a new object ID and identifies a first record in a data structure, wherein the initial object ID is identical to an object ID of the first record and to a parent object ID of the first record. The first controller replaces the object ID of the first record with the new object ID, creates in the data structure a new record that is associated with the data item, sets an object ID of the new record and a parent object ID of the new record to the initial object ID, and stores the data item to the first storage tier.

Abstract: Techniques are disclosed for restoring application services following a service disruption to a computer network. A faster service restoration (FSR) engine identifies one or more services hosting at least one of the services. The FSR engine identifies dependencies between the service and other application services. The FSR engine generates a run list comprising one or more healing scripts for restoring the services in one or more successive phases. Each successive phase is determined based on the dependencies. Each healing script is associated with one of the services and includes instructions for starting, stopping, and restarting the service. The run list is invoked on each of the servers to restore the application.

Abstract: Embodiments of the present invention disclose a method, computer program product, and system for reducing network traffic. In one embodiment, a computer determines that a webpage has changed and that an amount of data to be transmitted to update the portion of the webpage that has changed is smaller than an amount of data to be transmitted to update the entire webpage.

Abstract: The present teaching relates to generating an identifier for a person. In one example, an actual name of the person is received. The identity of the person that is associated with the actual name of the person is proved at a pre-determined level of assurance (LOA) required by an identity management system. When the identity of the person has been proved, a peripheral name is solicited from the person. An identifier that includes the actual name and the peripheral name of the person is created. Whether the identifier is unique is determined. The steps of soliciting, creating, and determining are repeated until the identifier is unique. The peripheral name is associated with the person. The identifier is associated with the person.