Notice of Data Breach

Does anyone have a good offline FOSS for macro-nutrient lookup and tracking? Been thinking about starting one for myself.

Official release https://content.myfitnesspal.com/security-information/notice...

I hope the log of my sex activity resulting in losing 20 lbs wasn't breached!

It's funny you would mention that because I also got annoyed by this and submitted a feature request for https. This is the response I received:

Hello,

Thanks for writing into us regarding https on MyFitnessPal.

We have technical and organizational measures in place to protect your information. Specifically, we have a secure login process designed to protect your information as you access MyFitnessPal (i.e., login and profile data are submitted using HTTPS POST actions).

The login pages of the MyFitnessPal that are encrypted via https include:

http://www.myfitnesspal.com http://www.myfitnesspal.com/login http://www.myfitnesspal.com/logout

Although our home page at http://www.myfitnesspal.com may not indicate the presence of https in your browser's interface, the actual login "lightbox" or pop-over window on the home page does send your login credentials via https.

After login, the MyFitnessPal website does not always load in HTTPS only mode (i.e. padlock not fully closed or green). This is because we sometimes load public content like images, public text from Under Armour, images & text from our advertising partners, and other non-user data using HTTP. While we load that public content using HTTP, we load user content using HTTPS.

We also continue to evaluate the security of our platforms, and have a dedicated team of cybersecurity professionals focused on this area. We will continue to review our security protocols to protect personal data.

Please let us know if you have additional questions or concerns.

No notification via email or app for me as of yet... Seems like the sort of thing I should hear from them first, rather than the Baltimore Sun.