Live data from Hacker News

Notice of Data Breach

content.myfitnesspal.com

21–30 of 160 posts

Re: Notice of Data Breach

#21
post #19

No notification via email or app for me as of yet... Seems like the sort of thing I should hear from them first, rather than the Baltimore Sun.

Ditto. When I logged into the web page to change my password (which I never use.. dear god, it's ugly, too), I got a warning. But nothing in the app.

Re: Notice of Data Breach

#23

I use my Facebook as the login mechanism for MyFitnessPal, I wonder if that means my Facebook password has been stolen as well. Better change it, sigh...

MyFitnessPal never had your Facebook password, so there's no way for it to be stolen by a breach.

They would have had a long lived token though

Re: Notice of Data Breach

#24

Perhaps this will also prompt them to start using HTTPS as well?

It's funny you would mention that because I also got annoyed by this and submitted a feature request for https. This is the response I received: Hello, Thanks for writing into us regarding https on MyFitnessPal. We have technical and organizational measures in place to protect your information. Specifically, we have a secure login process designed to protect your information as you access MyFitnessPal (i.e., login an…

tag Troy Hunt and underarmor on Twitter with a pic of this, sit back and enjoy.

Re: Notice of Data Breach

#25
I wonder if the daily progress photos were leaked as well. I imagine most people won't be thrilled to have their not-too-flattering progress selfies be out in public for the whole world to see.

Side note: MyFitnessPal the app is awful, but many of us still use it because it has the most extensive database of food products out there. Outside of that it has no merit and has felt abandoned in forever. Can someone recommend an actually superior alternative?

Re: Notice of Data Breach

#26

MyFitnessPal was horribly written app when I used it. The idea was good but God was it slow as hell when doing simple things.

It mostly works pretty well and looks okay, though the add actions have inexplicable lag on an iPhone X. The web page is horrendous, though.

Overall, the execution is good. I love the integration with iOS activity which means all my Strava and watch+activity and Wahoo cycling computer activities are tracked/integrated. I thought it would be a massive PITA and avoided tracking for years and years because of this, but I'm at something like 120 days straight and it's been a breeze.

Re: Notice of Data Breach

#28
post #3

> The affected data did not include government-issued identifiers, such as Social Security numbers and driver’s license numbers, information that the app does not collect from users Well, I suppose it wouldn't, would it? Is this supposed to be impressive? How many more of these before serious legislation gets through?

That’s a facile complaint. There are obviously classes of data that are far more sensitive than others; a breach of usernames and hashed passwords, while serious, is arguably distinct from a compromise of more sensitive information.

I don’t think there’s anything odd about clarifying that certain data wasn’t compromised.

Post reply on HN