Abstract: The subject technology provides an in-place encoding of a network identifier that compresses the network identifier without mapping the network identifier to a another server or service, such as URL shortening service. The network identifier may be compressed using segmented encoding operations that segment the network identifier, and encode the characters of the network identifier using a first set of encoding operations for a first portion of the network identifier and a second set of encoding operations for a second portion of the network identifier. Template encoding may also be provided for network identifiers that conform to a predefined template format.

Abstract: The present disclosure generally relates to interfaces and techniques for media playback on one or more devices. In accordance with some embodiments, an electronic device includes a display, one or more processors, and memory. The electronic device receives user input and, in response to receiving the user input, displays, on the display, a multi-device interface that includes: one or more indicators associated with a plurality of available playback devices that are connected to the device and available to initiate playback of media from the device, and a media playback status of the plurality of available playback devices.

Abstract: This disclosure describes techniques for automating a system-level security review of a network-based service. The techniques may include generating and utilizing a machine-readable threat model to identify system-level security threats to the network-based service. The network-based service may be scanned upon being provisioned in a service-provider network, and the machine-readable threat model may be generated based on results of the scan. The machine-readable threat model may represent components of the network-based service, system-level security constraints configured to identify system-level security threats to the service, and mitigations to remedy violations to the system-level security constraints. The network-based service may be continuously, or periodically, scanned to identify changes in the network-based service.

Abstract: A system and method for selling product is provided. In accordance with one aspect, shoppers using an Internet-based commerce site may request custom designed products rather than mass produced products from willing sellers. Shoppers may provide terms under which the custom good must be manufactured. Various systems and methods may also provide a platform for shoppers and sellers to negotiate terms and/or to incorporate negotiated terms into such requests. According to some embodiments, the system and method for selling product facilitates fabrication, delivery and payment for customized goods. In one embodiment, requests for customized goods may be fulfilled by multiple sellers. One example includes multiple sellers fulfilling a custom request, and another includes multiple sellers each producing a part of a desired quantity for a custom request, among other options. One aspect also includes allowing shoppers to request custom made products from one or more manufacturers.

Abstract: According to examples, an apparatus may include a processor that may identify a navigation event responsive to a URL being entered into an address bar of a web browser, the URL having a domain and a URL component, and may determine whether the web browser received an instruction to navigate to a return URL, in which the return URL includes a suffix domain for a proxy and does not include the URL component. The processor may also, based on a determination that the web browser received the instruction to navigate to the return URL, generate a modified URL by appending the suffix domain to the URL to restore context of the URL for the proxy and navigate the web browser to the modified URL.

Abstract: The technology disclosed relates to a network security system (NSS) that reduces latency in security enforcement. The NSS comprises a deployer. The deployer periodically updates performance bypass lists deployed to endpoint routing clients running on devices. The performance bypass lists identify exempt connection identifiers that are not subject to routing through a traffic inspection proxy (abbreviated TIP) and being used by the endpoint routing clients to classify incoming connection access requests as non-exempt or exempt. The TIP, in dependence upon the performance bypass list-based classification by the endpoint routing clients, inspects non-exempt incoming connection access requests and applies a policy, and remains agnostic to exempt incoming connection access requests.

Abstract: A method for an information processing apparatus includes searching for a printer, determining whether a printer detected by the searching is capable of executing a process according to a predetermined specification conforming to Internet Printing Protocol, and setting the information processing apparatus so as to generate a print job to be sent to the detected printer according to the predetermined specification, based on a determination that the detected printer is capable of executing the process according to the predetermined specification. Downloading of software to be used for generating a print job to be sent to the detected printer is facilitated, based on a determination that the detected printer is not capable of executing the process according to the predetermined specification.

Abstract: Described embodiments provide systems and methods for pushing session information to a newly joined node in a cluster of nodes. In the cluster, each node may maintain a session table of existing sessions. One or more nodes may detect a new node has joined the cluster. Each node, responsive to the detection, may apply a hash function on a tuple of each session of the existing sessions in the session table of the node to determine whether one or more existing sessions are identified to be owned by the new node as a result of the hash function. Each node, responsive to identifying that one or more sessions are to be owned by the new node, may push corresponding session information to the new node. The new node may become configured to receive a packet corresponding to the one or more sessions and to process the packet.

Abstract: In one embodiment, a cloud computer system is disclosed for controlling a plurality of remote devices comprising a cloud server including a cloud based operating system comprising a data model stored in a computer memory. The data model includes commands performed by a plurality of remote devices in a remote system and, for each remote device, one or more operations for triggering processes executed by the remote device. The cloud based operating system generates a set of instructions from the plurality of commands and corresponding operations to control a portion of the remote devices to perform a task.

Abstract: A network sanitization technology for enforcing a network edge and enforcing particular communication functions for untrusted dedicated-function devices such as internet protocol (IP) IP cameras. An untrusted network device is isolated from a network by a network sanitization system such that it cannot communicate with the network. Communications from the untrusted device are intercepted by the system and only allowed communications are used. Allowed communications are used to create new communications according to an allowed framework. Sanitization device may be in small two-port package with visual indicia indicating the untrusted device and the network side. The device may use and provide power over Ethernet (PoE) PoE to device. Abstract is not to be considered limiting.

Abstract: Providing a profile as a service is described herein. In an example, a computer system of stores account information for an account with a first service provider and profile information of a profile of the account. The computer system stores access control information that controls access to the account information and the profile information. The computer system receives an information request of a second service provider and determines, based at least in part on the access control information, a permission for the second service provider to access at least a portion of the profile information. The computer system sends, to the second service provider, the portion of the profile information in a response to the information request.

Abstract: Techniques are disclosed for securing traffic flowing across multi-tenant virtualized infrastructures using group key-based encryption. In one embodiment, an encryption module of a virtual machine (VM) host intercepts layer 2 (L2) frames sent via a virtual NIC (vNIC). The encryption module determines whether the vNIC is connected to a “secure wire,” and invokes an API exposed by a key management module to encrypt the frames using a group key associated with the secure wire, if any. Encryption may be performed for all frames from the vNIC, or according to a policy. In one embodiment, the encryption module may be located at a layer farthest from the vNIC, and encryption may be transparent to both the VM and a virtual switch. Unauthorized network entities which lack the group key cannot decipher the data of encrypted frames, even if they gain access to such frames.

Abstract: Embodiments of the present disclosure provide a system, including at least one processor and a memory component having instructions stored thereon, which, when executed by the processor, cause the processor to perform operations, including presenting data from a distributed network of data sources via a user interface of a user device, by identifying a set of frames associated with the user, the frames including data from the data sources loaded into frames of a container page, authenticating the set of frames, and generating the container page for display. Operations include facilitating secure communications between the authenticated frames of the container page, by receiving a message from one of the authenticated frames, verifying authenticated status of the sender frame, and transmitting the message to target frames. Operations further include presenting an updated version of the data from the data sources, based on the secure communications, by updating the container page.

Abstract: A system can determine that a mobile device, located at a physical place of business transmits a first electronic communication for redemption of an electronic offer at the physical place of business. The system can further detect a second electronic communication transmitted from the mobile device, which indicates a first identifier. The first identifier can be associated with a verifier of the electronic offer (e.g., a staff member) at the physical place of business. The system can further determine, based on analysis of the first identifier, a second identifier (e.g., contact data, a telephone number, etc.), that corresponds to the verifier, without providing the second identifier to the mobile device. The system can further electronically transmit, utilizing the second identifier, a third electronic communication that indicates information about the redemption of the electronic offer.

Abstract: A method and system for determining a path of data traffic based on a destination Internet Protocol (IP) address, the destination IP address being either private or public and belonging to any one of multiple organizations. In the method and system, a VPN is activated at a telecommunication endpoint. In response to activating the VPN, a service device on a private network interconnects with a VPN gateway. A subscriber identifier associated with the telecommunication endpoint and the destination IP address of one of the multiple organizations is received at a managed service platform. If both the subscriber identifier and the destination IP address of the one of the multiple organizations are not registered in a predetermined policy database at the telecommunication endpoint, a subscriber identified by the subscriber identifier is prompted to register the subscriber identifier associated with the telecommunication endpoint.

Abstract: In one embodiment, a particular device in a deterministic network performs classification of one or more packets of a traffic flow between a source and a destination in the deterministic network. The particular device determines, based on the classification of the one or more packets, a requirement of the traffic flow. The particular device performs, based on the requirement, a packet operation on at least one packet of the traffic flow. The particular device sends packets of the traffic flow towards the destination via two or more paths in the deterministic network.

Abstract: In some implementations, a user device can maintain a multi-device context store. For example, the user device can receive device and/or user context information from multiple devices and store the context information in a local data store. The user device can collect local device and/or user context information and store the context information in the local context store. The user device can receive user/device context queries from client processes and send the client processes user/device context information from multiple devices in response to the queries.

Abstract: Systems and methods for a continuous monitoring of analyte values received from an analyte sensor system are provided. One method for a wireless data communication between an analyte sensor system and a mobile device involves storing identification information associated with a transceiver of the analyte sensor system, the identification information entered by a user of the mobile device via a custom application running on the mobile device; causing the custom application to enter a background mode; searching for advertisement signals; receiving an advertisement signal from the transceiver; authenticating the transceiver based on the identification information; prompting the user to bring the custom application to a foreground mode; causing the custom application to request a confirmation from the user that a data connection with the transceiver is desired; receiving the confirmation from the user; and completing the data connection with the transceiver.

Abstract: Certain aspects of the present disclosure provide techniques for generating a user experience for a software program product based on a knowledge engine. Techniques for generating the user experience include a UI builder tool providing a set of tabular UI views and receiving in each tabular UI view corresponding input data for generating a calculation graph, a completeness graph, and a client UI view. Based on the input data, the UI builder tool and knowledge engine can generate a set of artifact files. The knowledge engine can generate and/or execute the calculation and completeness graphs as defined in the corresponding artifact files. The UI builder tool can generate an instance of the client UI view. With the generated calculation graph(s), completeness graph(s), and an instance of the client UI view, the user experience can be provided to a computing device.

Abstract: Described embodiments provide systems, methods, non-transitory computer-readable medium for using a single sign-on (SSO) to access an application. A client application on a client device in communication with an identity provider and an application on a remote computing device. The client application can authenticate a user via an identity provider to establish an authentication session. The client application can identify a request to access a uniform resource locator (URL) of the application hosted on the remote computing device. The client application can determine that a configuration of the client application identifies a remapped URL for the URL is available. The client application can access the remapped URL instead of the URL to cause the user to use the authentication session of the identity provider and be redirected from the identity provider to a link of the application on the remote computing device.

Abstract: Disclosed are various embodiments for integrating client applications with hosted applications. For example, an email can be received from an email client. It can then be determined whether the email is associated with a hosted application. In response to a determination that the email is associated with the hosted application, a request can be made to a connector for a calendar object. The calendar object is then received and returned to the email client.

Abstract: A function executing device is configured to send a wireless identifier to a communication device via a first type of wireless communication interface for setting up a wireless connection. The function executing device is configured to determine whether the function executing device is in an error state and, if not, to establish the wireless connection via a second type of wireless communication interface. The function executing device operates in a parent state in the wireless connection. Additionally, print data may be received from the communication device. However, if the function executing device is in an error state the wireless connection is not established via the second type of wireless communication interface.

Abstract: The present application describes a user equipment including a processor and a memory, where the memory stores computer-executable instructions that, when executed by the processor, cause the user equipment to perform a set of instructions. The instructions include transmitting, to a network, a message requesting to modify or establish flow that is not to be charged to the user equipment. The instructions also include receiving, from the network, an indication based on the message request. The instructions further include determining, based on the indication, whether to make the flow being associated with the message.

Abstract: Techniques are described for dynamic multi-user media streaming for client systems in a media session. In an embodiment, a local client system receives a media stream originated from a remote client system which is in the same media session. The local client system displays a local participant user interface (UI) control representing the local user at a first position on its local UI and further displays, a remote participant UI control representing the remote user on a second position on the local UI. When the local participant UI control is moved to a new position, the proximity to the remote participant UI control changes. Based at least in part on the change in proximity, the media stream originated from the remote client system is modified. For example, as local and remote participant UI controls are moving closer, the local client system may increase the volume of the audio track. Techniques further include other media session interactive features.

Abstract: A method for a computing device. The method includes periodically transmitting a beaconing data packet via a first wireless communication protocol. The first wireless communication protocol supports low bandwidth, one-directional communication. The computing device receives a request to pair from a peripheral computing device via a second wireless communication protocol. The second wireless communication protocol supports higher bandwidth, two-directional communication. The request to pair includes information that was included in the beaconing data packet. Responsive to receiving the request to pair, the computing device initiates pairing with the peripheral computing device via the second wireless communication protocol.

Abstract: Technologies for binary data distribution include a source computing device and a recipient computing device. The source computing device profiles a binary file payload to generate a payload fingerprint and generates a text-encoded payload as a function of the binary file payload. The source computing device combines the text-encoded payload and metadata including the payload fingerprint to generate a message data structure, and serializes the message data structure to generate a serialized message. The source computing device may sign the text-encoded payload and the metadata to generate a signature included in the serialized message. The source computing device transmits the serialized message to the recipient computing device, which loads the text-encoded payload and the payload fingerprint from the serialized message, decodes the text-encoded payload to recover the binary file payload, and verifies the binary file payload with the payload fingerprint. Other embodiments are described and claimed.

Abstract: One example system for providing notifications to videoconferencing sub-meetings includes a processor and at least one memory device. The processor establishes a videoconferencing session associated with a host. The videoconferencing session can include a main meeting, a sub-meeting, and a waiting queue. The processor can move the host from the main meeting to the sub-meeting, and subsequently move a new participant into the waiting queue. The processor can generate a notification that the participant has entered the waiting queue and determine that the host has moved to the sub-meeting. The processor can route, to the host in the sub-meeting using a stored connection of the host to the main meeting, a notification of the participant entering the waiting queue, and subsequently allow the host to admit the new participant.

Abstract: The present disclosure describes a system, method, and computer readable medium for providing information to a receiving party in a communications network. The method includes receiving a message from a sending party and performing a lookup of information relating to the sending party in a database via an Internet Protocol connection. The lookup is based on an identifier of at least one of the sending party and the receiving party. Subsequently, the information is provided to the receiving party based on the availability of the information in the database.

Abstract: A request for a page is received. In response to the request, content comprising the page is provided. The content includes an element which when executed by a browser with which the page request is associated causes the page as rendered by the browser to send a request initiated by the page to obtain an associated requested content. The request initiated by the page is received. A metric associated with the request initiated by the page is determined. Data reflecting the metric associated with the request initiated by the page is stored.

Abstract: Describe herein are techniques for providing cloud-based discovery. For example, a device may be configured to provide device registration and de-registration notifications to a cloud-based discovery service. The cloud-based discovery service may be configured to respond to discovery request by identifying registered devices that meet the criteria of the discovery request. The cloud-based discovery service may also be configured to provide endpoint information associated with registered devices in response to the discovery request, such that a device is able to utilize the endpoint information to connect with one or more of the registered devices.

Abstract: In general, the disclosure describes techniques for adaptively determining one or more parameters of a service level agreement of an application. For instance, a network device may monitor round-trip times of a plurality of packets of a data flow of an application being transmitted over a link between an application server and a client device. The network device may determine an amount of retransmission of packets occurring during transmission of the plurality of packets of the data flow. The network device may predict, based at least in part on the round-trip times of the plurality of packets of the data flow and the amount of retransmission of packets occurring during transmission of the plurality of packets of the data flow, a round-trip time parameter for a service level agreement associated with the application.

Abstract: A variety of techniques are disclosed for detection of advanced persistent threats and similar malware. In one aspect, the detection of certain network traffic at a gateway is used to trigger a query of an originating endpoint, which can use internal logs to identify a local process that is sourcing the network traffic. In another aspect, an endpoint is configured to periodically generate and transmit a secure heartbeat, so that an interruption of the heartbeat can be used to signal the possible presence of malware. In another aspect, other information such as local and global reputation information is used to provide context for more accurate malware detection.

Abstract: One embodiment provides a method, including: receiving, at an information handling device, an indication to open a text object; identifying, based upon analysis of context data associated with the text object, at least one article of key information contained within the text object; ascertaining, using a camera sensor, an aspect of user gaze within the text object; determining, based on the identified at least one article of key information and the ascertained aspect of user gaze, a degree to which a user is apprised of the at least one article of key information contained within the text object; and providing, based on the determining, a visual indication of the degree to which the user is apprised of the at least one article of key information. Other aspects are described and claimed.

Abstract: A computer implemented method includes receiving partially created software defined network (SDN) policy state information at a backup software defined network (SDN) appliance in response to the sending of a synchronize packet to establish a connection. The state information corresponds to a state of the connection between two endpoints that include a first active SDN appliance and a second active SDN appliance. A replica of the SDN policy state information is saved at the backup SDN appliance. An update to the SDN policy state information is received in response to the sending of an acknowledgement packet. The replica of the SDN policy state information updated at the backup SDN appliance to enable the backup SDN to transition to active.

Abstract: Embodiments of the present disclosure provide a system and method for providing a virtual media gateway in which an Information Handling Systems (IHSs) configured on a private network may be managed using a systems management console. One embodiment of the virtual media gateway system includes a systems manager in communication with multiple server IHSs configured in a data center. The systems manager includes executable code to establish a first login session with a public network configured in the data center, and using the first login session, receive a request to communicate with one of the computing devices. The executable code is further executable to authenticate the systems manager with the one server IHS on behalf of the end-user to establish a second login session through a private network, and generate a console for providing user interaction with the one computing device via the second login session.

Abstract: A method, system and apparatus for authenticating target recipients for digital certificates. A certificate authority authentication system receives a request from an entity for a digital certificate including untrusted certificate validation data. The authentication system initiates a communication link using to untrusted certificate validation data to generate verified untrusted certificate validation data. Subsequently or concurrently, the system obtains, from a confirmation computing system, trusted certificate validation data. The authentication system compares the verified untrusted certificate validation data with the trusted certificate validation data and, based on the comparison, authenticates the entity and issues the requested digital certificate.

Abstract: A communication channel merging system detects that a first communication session that is provided via a first communication channel between a first user and a first service provider is concurrent with a second communication session that is provided via a second communication channel between the first user and a second service provider. The system then generates a user score based on information associated with the first and second communication sessions and determines that the user score satisfies a condition that causes the first and second communication sessions to be merged into a merged communication session. The system generates a first channel score for the first communication channel and a second channel score for the second communication channel and determines based on those channel scores that the first communication channel should provide the merged communication session. The system directs the merged communication session to be provided on the first communication channel.

Abstract: The disclosed computer-implemented method includes determining that incoming media item requests are to be skewed from a random distribution among server nodes, using a random distribution algorithm, to a directed distribution among the server nodes. The method then includes identifying, in a loading assignment, which media items are to be loaded onto specific server nodes to produce the directed distribution of media item requests. The method next includes preloading the identified media items onto the server nodes according to the loading assignment and receiving media item requests for the preloaded media items. The method then includes routing the received media item requests to the server nodes using the random distribution algorithm, where the random distribution algorithm is skewed to the directed distribution based on the preloading of the media items according to the identified loading assignment. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method may include receiving a domain name system (DNS) query at a network device, where the DNS query may be associated with a traffic flow identified for rerouting through an alternative path utilizing an alternative network device instead of a default path. The method may also include rewriting the DNS query such that the DNS query is routed through the alternative network device along the alternative path and to a DNS server associated with the alternative path. The method may additionally include receiving a DNS response from the DNS server, where a resource identified in the DNS response may be based on the DNS query coming through the alternative network device.

Abstract: Methods and systems for connecting client devices to anonymous sessions via helpers are described herein. One or more anonymous sessions may be generated on one or more target machines. Configuration information for generating an anonymous session may be used to initiate generation of the anonymous session on a target machine. A helper process may be created and associated with the anonymous session. A request to start a virtual application or desktop may be received from a client device, and the client device may be connected to the anonymous session on the target machine. The helper associated with the anonymous session may retrieve credentials associated with a user of the client device and/or may use the credentials associated with the user to start the virtual application or desktop on the target machine as the user.

Abstract: Methods and systems provide for dynamically generating a note with captured content from a communication session. In one embodiment, a method presents, to each of a number of participants within a communication session, a UI which includes session content produced during the communication session. The method records at least a portion of the session content. The method receives a request from one of the participants to generate a note. In response to receiving the request, the method generates a note which includes at least a designated portion of the recorded session content. Finally, the method provides access to the requesting participant to the portion of the session content in the note upon demand.

Abstract: A system for validating an authorization request to facilitate controlling access to content or computer commands, in which the access is requested by multiple entities operated on discrete computing environments. The techniques make use of a system including a switchboard and a rule engine that collect parameter sets required for validation from the entities and dynamically generate a lock and key combination based on the collected parameter sets. The key of the lock and key combination allows the system to validate each entity independently regardless of the required parameters specified in the lock and key combination.

Abstract: The present disclosure provides computing systems and techniques for indicating an emotional and/or environmental state of a user in a digital messaging application. A computing device can determine an emotional and/or environmental state of a first user responsive to reading or responding to a message and can convey the determined emotional and/or environmental state to a second computing device, to be transiently presented by the second computing device.

Abstract: The cyber security appliance can have at least the following components. A phishing site detector that has a segmentation module to break up an image of a page of a site under analysis into multiple segments and then analyze each segment of the image to determine visually whether a key text-like feature exists in that segment. A signature creator creates a digital signature for each segment containing a particular key text-like feature. The digital signature for that segment is indicative of a visual appearance of the particular key text-like feature. Trained AI models compare digital signatures from a set of key text-like features detected in the image of that page under analysis to digital signatures of a set of key text-like features from known bad phishing sites in order to output a likelihood of maliciousness of the unknown site under analysis.

Abstract: Embodiments include methods performed by a processor of a mobile device for allocating resources to a plurality of mobile devices in communication with an Edge network. The processor may receive from the plurality of mobile devices one or more capabilities of each mobile device related to a computing task in which the plurality of mobile devices are participating. The processor may determine a fairness result for the plurality of computing devices based on the one or more capabilities of each mobile device and the computing task. The processor may allocate resources to each of the plurality of mobile devices based on the determined fairness result.

Abstract: A system includes a plurality of computer devices connected to a network. The computer devices are operable by a plurality of users. The system further includes a server connected to the network. The server is to communicate data with the plurality of computer devices. The system further includes a bridge device connected to the network. The bridge device is to receive connection requests from the plurality of computer devices via the network. The bridge device is further to receive connection requests from the server via the network. The bridge device is further to mediate data communications between the plurality of computer devices and the server by communicating data through open connections made based on connection requests received from the plurality of computer devices and the server.

Abstract: The present disclosure is directed systems and methods for control embedding data packets for ARP queries, the methods including the steps of receiving a data plane packet from a first user device, the data plane packet requesting a hardware address associated with a second user device; generating a northbound control plane packet for transmission to a control plane node, the northbound control plane packet for requesting from the control plane node the hardware address associated with the second user device; embedding the data plane packet in the northbound control plane packet; and forwarding the northbound control plane packet with the data plane packet to the control plane node for respective processing of the northbound control plane packet and the data plane packet.

Abstract: A method for establishing network connections includes connecting a device to a first network, retrieving voice input of a user, sending a message including data related to the voice input to at least one gateway device on the first network, receiving configuration data for a second network via the first network in response to the message, and establishing a connection of the device to the second network using the configuration data received via the first network. Furthermore, an electronic device, a network gateway device and a system are defined.

Abstract: An online system receives video data items from users and encodes the video data items using various codecs. To account for different computational resources used for encoding using different codecs, the online system ranks combinations of video data items by ratios of encoding video data items with different codecs to computational costs of encoding different video data items with different codecs. The benefit of encoding a video data item with a codec is based on a compression efficiency of the codec and a predicted aggregate amount of the video data item displayed to various users of the online system. Encoding video data items with codecs based on the determined ratios allows the online system to optimize a duration of video data having at least a threshold video quality to users.

Abstract: A computer-implemented method, computer program product and computing system for recording video information on the computing device during a monitored event. Execution information is recorded on the computing device during the monitored event. The video information and the execution information are temporally synchronized to form temporally-synchronized diagnostic content.