Picture

Paul MARTY @0xPaulm

AppSec and bug bounty @doctolib yeswehack.com/programs/docto… Toulouse Joined April 2009
  • Tweets
    113
  • Followers
    422
  • Following
    4K
  • Likes
    775
Paul MARTY retweeted
nmartignole Profile Picture

Nicolas Martignole @nmartignole

3 months ago

Témoignage des équipes Sécurité de @doctolib sur YouTube youtube.com/watch?v=m0FLBb… avec Cédric et Clément.

Paul MARTY retweeted
cedric_infosec Profile Picture

Cedric Voisin @cedric_infosec

3 months ago

#cybersecurite on vous raconte le quotidien d'une équipe sécu chez @doctolib demain soir à 20h sur Twich @Micode

Paul MARTY retweeted
doctolib Profile Picture

Doctolib @doctolib

7 months ago

🧑‍💻 We doubled the maximum reward for our public #BugBounty* program for a limited time only – up from €25,000 to €50,000 throughout October. *="Public reward system for finding and reporting #software vulnerabilities." 👀 doctolib.fr/sante/bug-boun…

yeswehack Profile Picture

YesWeHack ⠵ @yeswehack

7 months ago

🧑‍💻 We doubled the maximum reward for our public #BugBounty* program for a limited time only – up from €25,000 to €50,000 throughout October. *="Public reward system for finding and reporting #software vulnerabilities." 👀 doctolib.fr/sante/bug-boun…

Paul MARTY retweeted
yeswehack Profile Picture

YesWeHack ⠵ @yeswehack

7 months ago

Have you noticed? @doctolib has doubled the max reward for its public #BugBounty program to €50K in October! Perfect timing to share our must-watch interview with CISO @cedric_infosec & Senior Product Security Engineer @0xPaulm on #Doctolib’s five-year Bug Bounty journey ⤵

Paul MARTY retweeted
aheritier Profile Picture

Arnaud Héritier @aheritier

8 months ago

If you have a blue screen of the death at startup time with @doctolib on iOS 17 , let us know if 17.0.1 solves it. We don’t (yet) reproduce the issue internally and it seems it could be a safari issue (dirty caches or similar)

Benjamin_Budet Profile Picture

Benjamin Budet @Benjamin_Budet

8 months ago

If you have a blue screen of the death at startup time with @doctolib on iOS 17 , let us know if 17.0.1 solves it. We don’t (yet) reproduce the issue internally and it seems it could be a safari issue (dirty caches or similar)

Paul MARTY retweeted
fredcharpsec Profile Picture

Fred Sec @fredcharpsec

8 months ago

At @doctolib , cybersecurity is a top priority. Our website and APIs are under permanent attack, either from botnets, black-hat hackers. Today, I want to take the opportunity to explain why does Doctolib use @Cloudflare? medium.com/doctolib/why-d…

Paul MARTY retweeted
jfslowik Profile Picture

Joe Słowik 🌻 @jfslowik

3 years ago

Am I doing this right?

Paul MARTY retweeted
RaffaeleDiPalma Profile Picture

Raffaele Di Palma 🤌🏼 @RaffaeleDiPalma

3 years ago

You are driving back home, and then...

Paul MARTY retweeted
cyb3rops Profile Picture

Florian Roth @cyb3rops

3 years ago

If you work in a SOC, print out this screenshot & pin it to a wall in your office Two important observations 1. Generic rule matches can uncover unknown threats 2. It’s hard to distinguish threats from legitimate software (mainly b/c the latter is often crap)

vxunderground Profile Picture

vx-underground @vxunderground

3 years ago

If you work in a SOC, print out this screenshot & pin it to a wall in your office Two important observations 1. Generic rule matches can uncover unknown threats 2. It’s hard to distinguish threats from legitimate software (mainly b/c the latter is often crap)

Paul MARTY retweeted
a_greenberg Profile Picture

Andy Greenberg (@agreenberg at the other places) @a_greenberg

3 years ago

In 2011, RSA was hacked by Chinese spies, who stole the "seed" values used to generate codes on SecurID 2fa tokens, shocking the security world. Now, after 10 years, the NDAs of the staff involved have expired. This is the untold story they shared with me: wired.com/story/the-full…

Paul MARTY retweeted
USCPSC Profile Picture

US Consumer Product Safety Commission @USCPSC

3 years ago

#FridayVibes

Paul MARTY retweeted
waxzce Profile Picture

Quentin '🐧' ADAM @waxzce

3 years ago

Biscuit, the foundation for your authorization systems clever-cloud.com/blog/engineeri… // This is the future of authentication and authorization at @clever_cloud and we open source everything around it :-)

Paul MARTY retweeted
SaharAmarir Profile Picture

Sahar Amarir @SaharAmarir

3 years ago

The latest scandal in lockdown France is that a Parisian chef was organizing illegal fancy private dinners (400€ menus) for a priviledged few & people are of course outraged about it, but they're more outraged by how ugly the dishes look & this is why I still love France 🇨🇵♥️

Paul MARTY retweeted
sec_r0 Profile Picture

Rohit @sec_r0

3 years ago

Web Authentication Methods, there are a lot of them. The most confusing one is OAuth. I have it covered in my Zine. Here is the Teaser, Releasing soon. Follow for updates. 😉 #infosec #security #BugBountyTips #BugBounty #BugBountytip #web #webcomics

Paul MARTY retweeted
JackRhysider Profile Picture

Jack Rhysider 🏴‍☠️ @JackRhysider

4 years ago

Me: Here you go boss. Boss: What's this? Me: This is the best I could do with the security budget you gave me. Maybe next quarter we can make it better.

Paul MARTY retweeted
nil0x42 Profile Picture

nilØx42 🚫 @nil0x42

4 years ago

ReconNote - Modern target recon automation for bug-bounty hunters 🤩 github.com/0xdekster/Reco… - by @0xdekster #AttackSurface #InfoSec #hacking #bugbounty #bugbountytips

Paul MARTY retweeted
H_Miser Profile Picture

Hash Miser @H_Miser

4 years ago

Threat level: very préoccupé CVE-2020-16947 - Microsoft Outlook RCE Vulnerability” allows attackers to send specially crafted emails that can execute commands when opened in the Microsoft Outlook software. This attack also works when an email is viewed in the preview pane.

Paul MARTY retweeted
FrankMcG Profile Picture

Frank McGovern @FrankMcG

4 years ago

When someone says they’re an expert in cybersecurity, remember this.

Paul MARTY retweeted
clintgibler Profile Picture

Clint Gibler @clintgibler

4 years ago

💰 How to make cyber crime more profitable @thegrugq describes how FIN7's operational innovations (resources/personnel), not technical ones, made them more 💸 * Scaling your attacks across many targets * JIRA used to track victims * and more sec.okta.com/articles/2020/…

Paul MARTY retweeted
k8em0 Profile Picture

Katie🌻Moussouris (she/her/she-ra/she-hulk) @k8em0

4 years ago

Security Comms fail: If you have enough info to know I’m not affected, don’t send a security notice. Doing so trains users to click through & take no action. Don’t do it. Example of unnecessary security communication that will drive target users to ignore warnings over time:

Trends for United States

Superman
83,2 B posts
Pat Riley
8.129 posts
Hades 2
10,1 B posts
Rafah
1,5 Mn posts
#TeacherAppreciationWeek
11,1 B posts
Met Gala
464 B posts
Egypt and Qatar
12,3 B posts
#MondayMotivation
36,7 B posts
New 52
5.562 posts
$MOL
1.486 posts
James Gunn
8.884 posts
Adou
1.093 posts
Darth Jar Jar
4.065 posts
Happy Nurses Week
6.942 posts
Judge Merchan
56,4 B posts
#NoDumbQuestions
Maxine Waters
7.296 posts
Supes
#MEGANMONDAY
15,8 B posts
#okwx
8.591 posts

You might like

Twit Nut
@twitnutttt
28 Followers
On the degen to regen pathway. Have seen the light, drawn by the promise.
yoma
@dawjiaw
762 Followers
Fondateur Agence Pickbeam. jamstack lover .
Benoit El Amrani
@benoit_elamrani
134 Followers
Paria. Artist. x86/64 to JS. Distributed systems. P2P. Architect. Dev. Sec. Ops. Speaker. Trainer. https://t.co/Z9gnjNp0Di ⚡🦀
Arnaud
@ltearno
570 Followers
⚪️⚫️
Eugen
@eugengnt
149 Followers