The Leadership Letter

Real correspondence from the people running real companies — and what it reveals about leadership.

When You Find a Rival's Bug, Slow Down Before You Act

A security vulnerability in a competitor's product is also a political and legal grenade — handle it before you pull the pin.

On Mon, Aug 13, 2018, Edward Cunningham wrote: I took a deeper look on Friday and discovered a vulnerability in the Fortnite Installer (and Galaxy Apps private installer API) which allows a malicious app to install a fake version of Fortnite with arbitrary permissions auto-granted.

Jamie Rosenberg responded: Very interesting...and concerning. I'll set up a meeting for a few of us today to discuss. We're setting up an internal discussion for this morning to discuss next steps — lots of pieces to coordinate (PR, partners, Epic, etc.), so pls continue to investigate but hold off on any actions/comms until we have a chance to meet.

On Aug 15, 2018, Edward Cunningham clarified: The bug is not public. It is in the public issue tracker so could be made public (hence the big yellow warning). It is in a new restricted component, so only those directly CC'd can see it (i.e. restricted to Epic Games). We won't make public until they fix.

This edition is for members — but the daily letter is free.

One real corporate email, and the lesson it teaches, in your inbox every weekday morning. Free. Unsubscribe in one click.

Want this edition and the full searchable archive?

Start your free week →What members get →
Court Exhibit
In re Google Play Store Antitrust Litigation (Epic v. Google)
3:21-md-02981 (CAND), Doc. 886-55, filed 2023-12-21
August 15, 2018
Public domain
View the primary source →