Fabio Franchino abusedmedia

Common setup for engineers with
- laptop with encrypted hard drive
- automatic updates (possibly forced, disabling delay)
- password manager
- 2FA everywhere
- dedicated browser for development without extensions except for the ones approved by devsec ops
- VPN to access internal properties
- work (dedicate) GitHub account
- rotate passwords and tokens / keys
remote dev machines on premise that can be kept secure and up to date by IT - might reduce chances to compromise engineer machine (accessible only via vpn)

Chrome Headless on EC2

How to setup an EC2 instance to run Chrome Headless for usage with Puppeteer

ssh ubuntu@ec2-3-21-123-234.compute-1.amazonaws.com

	/**
	* Convert PDFDocument to Base64
	*/
	const PDFDocument = require('pdfkit');
	const stream = require('./stream');

	// crate document and write stream
	let doc = new PDFDocument();
	let writeStream = new stream.WritableBufferStream();

	<!doctype html>
	<html lang="en">
	<body>
	<span id="output"></span>
	</body>
	<script>
	(function () {
	var workerBlob = new Blob(
	[workerRunner.toString().replace(/^function .+\{?\|\}$/g, '')],
	{ type:'text/javascript' }