Dug Song
@dugsong
Followers
12K
Following
16K
Media
1K
Statuses
6K
Founder & Funder, @duosec, @songfoundation ☰☲☷☵ 🦋 https://t.co/DpoRlWfEVc
Joined June 2007
@ava @VinceSchilling @IndianCountry #Michigan stands tall with one of our own, Omaha elder Nathan Phillips. Portrait by #Ypsi's @cstranadphoto cc: @gretchenwhitmer @garlin
12
78
475
We've committed $1 million to help bridge small businesses in #Washtenaw County to newly-announced state & federal funding, and protect their workers. 1 page form, grants in days, not weeks: Tell your favorite local business in #AnnArbor #Ypsi . .
17
67
305
Worked 3 jobs as a line cook, resident advisor, and security admin to pay my way (and my sister’s) through 5 years of @UMich undergrad, after my dad died freshman year. We see you @geo3550! #Solidarity
We worked 2-3 jobs as undergrads so that we could afford to attend @umich, met while working at a restaurant. My parents took turns for cmmty college, then @UM_Dearborn. Mom graduated right before I finished HS. Students with kids, no childcare, and side jobs, we hear you.
2
21
269
43
48
284
Timewarp to 2010, when George was CTO of McAfee, not CEO of Crowdstrike. Old security architectures, old problems
1/The global IT outage caused by a failed Crowdstrike software update can apparently be fixed by booting Windows into Safe Mode and deleting a file. This means millions of Windows machines need to be booted and fixed by hand.
10
95
244
Dan Kaminsky’s Loveletter to Hacking.
This thread is absolutely a love letter to everything I’ve treasured, being an Infosec nerd. A *lot* of people were kinder than they had to be. I’m proud to say I did everything I knew to return the favor, and not ashamed to admit I didn’t always know how. But I can document :).
1
36
170
👏 Duo never had noncompetes, which I felt were immoral and offensive (though standard in Michigan). Culture, opportunity, & rewards retained our folks, not some lousy contract.
1. Today @FTC issued a final rule banning noncompetes for workers across the country. The rule will ensure that Americans have the freedom to pursue a new job, start a new business, or bring a new idea to market.
1
17
171
Among the meta-problems infosec has to get over 1st:. 1. Blaming users.2. Learned helplessness.3. Zero-risk thinking
Among the problems infosec has no clue how to solve:.1. phishing.2. SQL injection.3. authentication.
7
102
147
Good choice :-)
We are pleased to announce Rob Joyce as our next @NSACyber Director and are excited about the expertise he brings to continue the #cybersecurity mission!
2
31
148
At $1B+ valuation, we hung carved foam letters by the #RSAC bathrooms, built wooden tabletops, only did demos, and were cashflow+, having spent $14m to achieve $100m+ ARR, while offering market rate comp+equity, a fully-paid healthcare plan, 4-month parental leave, etc. #WeAreDuo
When you spend a small fortune on a digital display to wrap around your entire booth just so you can show your logo and your funding and valuation numbers. I see that $200M is being well spent. #RSAC #RSAC2020
9
14
145
@wendynather We are a team, not a family at @duosec because families admit dysfunctional behavior we would never accept at work. You can't fire your abusive uncle, but we will. #WeAreDuo.
2
11
136
A tribute to Bob Abbott, father of software security research, by @TheRealSpaf in 2010. In the movie #Sneakers, @JamesEarlJones played #NSA agent “Bernard Abbott” in his honor 🖥🕵🏾♂️ #BlackHistoryMonth
4
55
134
Blackhat vs whitehat? More like druids, paladins, wizards, and rogues in this game.
5
97
120
Help us protect our most vulnerable in #AnnArbor & #Ypsilanti - my wife and I are matching donations to the @UWwashtenaw #COVID19 Community Relief Fund: #WashtenawCounty.
@UWwashtenaw has established a COVID-19 Community Relief Fund to help meet critical and emerging needs of the local community amid the coronavirus pandemic. The fund has grown to more than $150,000 since March 10 with a goal of reaching $1 million.
4
24
111
Sign in my front yard, up for months, torn down last week. Our neighbors bought 75 more to join us. #RESIST #RefugeeBan #MuslimBan #AnnArbor
3
33
101
Proud to stand with Asian American business leaders in today’s @WSJ in support of our friends & family, colleagues & community #StopAsianHate #Enough
3
20
103
Exciting addition to #Detroit’s skyline, straight outta Tatooine! #jawasrule
NEW: The Board of Regents has signed off on construction of the $250 million University of Michigan Center for Innovation in downtown Detroit
7
7
93
Trying my best to be (chaotic) good. .
Ask anyone with inside knowledge: much of the growth of Michigan’s tech industry in the past decade can be directly linked to @duosec’s success and the broad mentorship of @dugsong and his team - by @XconomyDET_AA .
4
5
97
Corporate photo shoot gone wrong. #NatasSpin #DistalRadiusFracture #ScreamingHand #NoRagrets #WeAreDuo
14
4
97
Happy 9th birthday @duosec, the company formerly known as Scio Security (now @CiscoSecurity)! #WeAreDuo
5
7
89
Happy #NationalInternDay! My @arbornetworks intern from 2006 (top left) co-founded @duosec with me in 2010 :-) #WeAreDuo
2
5
93
Bannon wins again, the most skilled political hacker of our time. What happens next:
5
27
86
Decades ago in a Vegas nightclub, @dotMudge introduces me to @granick, hacker lawyer extraordinaire. She recoils in outrage when I whisper in her ear. Mudge demands to know what I said. It was her password, improperly secured on the Internet. Bad Dug, I know. #WhatHappensInVegas.
A quick thread of cases I personally worked on involving people discovering information improperly secured on the Internet and getting in trouble for it:.
6
6
94
Honoring #BlackHistoryMonth in #CyberSecurity: 14 founders, hackers, academics, executives, & investors to know!
2
63
93
Alcohol use disorder is prevalent in the security community, and our society. What companies, colleagues, and individuals can do to support sobriety. #Blackhat2018 #BHUSA18 #WeAreDuo #FriendsOfBillW
3
20
89
🚞🚉🚂🚆🚄🚅🛤️🚝🚋🚈
Michigan may spend big on passenger trains, eying service to Canada, Up North
6
3
84
We're no #kpopstans, but I'm proud of our @duosec team for raising $300,000 in 1 week for @NAACP_LDF, @SPLCenter, @ColorOfChange, @justcitydetroit, and many others! 💚 #WeAreDuo #WeAreCisco #BlackLivesMatter.
The #BTSArmy matched donations within 24 hours.
4
8
85
"There’s nothing more fulfilling than hearing a new founder say 'We want to do what @duosec did', because I know they’re not talking about *what* we did, but *how* we did it." -- @jonoberheide on @DecibelVC #WeAreDuo.
2
19
84
Congrats to @window on @ThistleSec's seed round to address #IOTsecurity, with the support of friends at @trueventures & @OperatorCollect 💜💙💛
2
12
85
Important partner meeting at #CiscoPS19. Ruthless and toothless, cookies are for closers! #WeAreCisco
5
1
81
The bridge to possible. but why?? @jonoberheide's innovative @Webex+#Peloton kit 😳 cc: @gerri_elliott @_amychang #WeAreCisco #WorkFromHomeGym
12
7
82
@MichelleObama The amazing Lethal Ladies of @BLSYWgirls at the first @BMoreHomecoming in 2018! #Baltimore #CharmCity #StepIsLife
0
11
71
NERD CITY USA
Ann Arbor has been ranked as the most educated city in the United States for the third year in a row!
0
8
77
Proud of our team for raising $50k (w/ @duosec + @Cisco match) for our Texas weather disaster relief fund & #Austin’s @AAULTX this week 🙏 #WeAreDuo #WeAreCisco #LoveWhereYouWork.
2
5
75
2
5
78
In honor of @akgood’s board election, my @DetroitTransit morning - @RTAmichigan #D2A2 bus from #AnnArbor to #Detroit, @qlinedetroit to @pholucky, @MoGoDetroit to @Newlab via @DetroitRvrfrnt & @JoeLouisGreenwy 🚌🚉🚲👊 #BringEverybody #StateOfTransit
It was an honor to participate in this legislative panel on transit in Michigan. We need a real, rapid transit system in the Detroit Metro area. Support the great eork of @DetroitTransit.
0
14
74
Opening @umsi’s commencement was truly an honor - especially as I never walked my own! Congratulations to the #ClassOf2023! 💛💙 #GoBlue #LeadersAndBest
3
1
77
“Why is #Reindustrialize in #Detroit? Represents both the challenge and the opportunity at hand” — @aphysicist But also because Michigan has always made things, and never looked down on manufacturing…
5
13
80
"I can only hope that more companies will be like Duo, where being a woman is unremarkable because there are so many of us" - @wendynather 💚
Wise Words from Women in Tech at Duo Security: #WomenInSTEM #WomensHistoryMonth #WomenInInfosec #WeAreDuo
1
18
73
In the business of offensive security, there are no black hats - only black budgets. @nicoleperlroth breaks the omertà of offense to expose the global exploit economy, interviewing many primary sources & old friends:
6
12
72
We don't have noncompete agreements at @duosec on principle. They're just wrong.
Companies Compete but Won’t Let Their Workers Do the Same.
0
22
71
Think of the best teacher you've ever had. In addition to leading corporate security at Duo, Facebook, & Oculus, and "being evil, for good" at the legendary iSEC Partners, Josh was also a middle school teacher. Be part of a positive security culture where we all learn together!.
2
12
73
"Ann Arbor and Detroit are closer than San Jose and San Francisco, yet that's one Silicon Valley. We need the same connectedness here." —@dugsong in @detstartupweek #StartupDetroit happy hour talk, 3 Key Startup Ingredients Detroit's Ecosystem is Missing #DETSW18
2
10
71
I appreciate living in #AnnArbor where @zingermans sets the standard for positive, ethical culture in business, and @umich elevates the value of learning as a team. #WeAreDuo.
.@dugsong "We close each company meeting w/ 3-5 minutes of appreciations, where any team member can give thanks to a fellow employee. This helps us surface & bring attention to the great things happening in our org, & model the behavior we want to see." #SaaStr #SaaStrAnnual2019.
4
7
70
@guyhturner @duosec, from our earliest days, has always had a strictly defined 9-5 office culture (excepting time-shifted support). By 5:30pm everyone is gone, by design. People need to have outside interests and complete lives to bring new ideas and energy to work. #WeAreDuo.
4
9
71
BSides is the new DEFCON, DEFCON is the new Blackhat, Blackhat is the new RSAC, and RSAC. .
11
11
70
It’s another @Cisco #DayForMe, Charlie Brown! ❄️☀️🛹 #WeAreDuo #WeAreCisco #Security #LoveWhereYouWork
7
0
75
Chinese baker & Korean line cook: Dug Song, co-founder & CEO #WeAreDuo
Many Duo team members have traveled a long and winding road to get where they are today. Learn why we welcome people with non-traditional backgrounds and believe in the power of diverse teams to make better products:
0
1
72
Wu-Tang is for the children 👐.
We’re dropping a different kind of track: a new ice cream truck jingle. Sound UP to hear why I collabed with @GoodHumor. Check out the full track here: .#GoodHumorPartner
1
15
67
Grateful for the support & partnership of so many @Cisco friends & colleagues, one year later at #CiscoIMPACT! #WeAreCisco #WeAreDuo #BetterTogether
2
2
68
#TonyHsieh was a role model for reluctant CEOs like me to embrace leadership with empathy and humility. "Create fun and a little weirdness" he said - and inspired us all to help each other live our best lives. RIP Tony 😢🙏
1
2
67
We open for coffee Tuesday, November 27th! 6:30am-2pm nearly every day. Open for booze in a couple of weeks too!
5
5
69
Congrats to @atomic_inc founders (@aphysicist, Lou, Austin), team, & investors (Narya & Acequia) on their grand opening near the #Detroit Arsenal! Exascaling the US industrial base through AI-powered manufacturing…
6
12
72
5
16
68
Nailed it: "Too many startup security software vendors offer complicated products solving outlier issues, when buyers typically wanted streamlined solutions addressing major problems." Love you guys! 💚.
We're thrilled to celebrate #LECbacked @DuoSec as they join forces with @Cisco. Mitchell Green and Brian Neider share why success was inevitable
1
11
66
So much grace, wisdom, and *intensity* from legendary @Cisco chairman & CEO @JohnTChambers at #CloudNY ☁️🗽🌉 #WeAreCisco
1
3
70
Risen from ruin, the iconic Michigan Central Station honored #Detroit culture & innovation last night! Thank you Bill @Ford, @MayorMikeDuggan, Josh Sirefman & MCS team for your leadership! #MichiganCentralOPEN
7
8
68
Back in Austin for #SXSW at (née @Michigan_House :-) with #MichiganFoundersFund, @Venture313, @EndeavorDetroit, @CityGrandRapids, @AnnArborSPARK, @MEDC, etc. founders, funders, & supporters!
5
1
69
@SleeplessByte @yevgenydevine @sarahmei @WilsonEricN We provide 4 months paid parental leave for a primary caregiver, 2 months for secondary, however you choose to elect this. We have offered paid parental leave since @duosec was under 20 employees and are now over 600. IMO, these are not "extra benefits", but basic inclusion.
2
6
62
The GDP of metro #Detroit alone is larger than the GDP of the country of Greece, which also has high speed rail. Why can’t we have nice things?.
@DE_Gifford Taking the high speed trains (KTX, SRT) across Korea is easier than taking a city bus. Seoul to Busan is only 2 hrs on the bullet trains - same distance between Ann Arbor and Traverse City!
16
7
56
Stooges, Breeders, Pixies, & Beasties, oh my! 🤘🎸🔥.#AnnArbor's @BlindPigAA & @jmalcoun for @JoeBiden! #VoteEarly #Michigan #GoBlue #VoteBlue 🇺🇸
2
8
62
If NY = money.LA = fame.DC = power.SF = “disruption”. well, #Detroit = defiance. Fuck all y’all. #DetroitVsEverybody #DetroitIsForDoers #NothingStopsDetroit.
3
2
61
@messypixels From @duosec: “The scene playing out in DC is an unconscionable attack on our democracy. This is not politics as usual. If you need to step away from work to take care of yourself as we collectively process these events, we understand and support you in doing so.” #WeAreDuo.
1
2
59
This OpenSSH RCE advisory is a classic example of hacker craftsmanship, generosity of spirit, & community contribution - a regression of duke’s 2006 vuln, inspiration from @lcamtuf’s 2001 paper, etc. The legacy of @Qualys’ hacker founder @philpraxis continues! 🫡 #hackerhistory
The award-winning Qualys Threat Research Unit (TRU) has discovered a critical vulnerability in OpenSSH, designated CVE-2024-6387 and aptly named "regreSSHion." This Remote Code Execution bug grants full root access, posing a significant exploitation risk.
1
13
65
Niels spent 15 years building security at Google, and is deeply committed to growing a diverse, world-class team at Stripe. I'd work for him if I could still write code ;-).
I am looking for great engineers who want to work on Security @Stripe:
0
4
58
As Eisenhower said, plans are worthless, but planning is everything! Proud of our #NACIE strategy for the US to out-innovate *with* everyone, a matter of economic & national security: #techequity #economicpatriotism
Today, the National Advisory Council on Innovation and Entrepreneurship (NACIE) released 10 recommendations to foster an entrepreneurship ecosystem that ensures the United States leads in critical technology innovation. 📄Read more #NACIE
4
7
56
How was this not the Daily Double??? 🤦🤦.
2
1
57