Notice of Data Breach • Hacker News Board

Re: Notice of Data Breach

#41

Post by nathanaldensr » Thu, Mar 29, 2018, 10:11 PM UTC

Thriptic wrote: post #17

internobody wrote: post #7

Perhaps this will also prompt them to start using HTTPS as well?

It's funny you would mention that because I also got annoyed by this and submitted a feature request for https. This is the response I received: Hello, Thanks for writing into us regarding https on MyFitnessPal. We have technical and organizational measures in place to protect your information. Specifically, we have a secure login process designed to protect your information as you access MyFitnessPal (i.e., login an…

It's hard to believe that not only are they this clueless, but they also are trying to justify their idiotic decisions. Jesus, how hard can it be to set up TLS? Let's Encrypt, anyone?

Re: Notice of Data Breach

#42

Post by sneak » Thu, Mar 29, 2018, 10:13 PM UTC

tragic wrote: post #3

> The affected data did not include government-issued identifiers, such as Social Security numbers and driver’s license numbers, information that the app does not collect from users Well, I suppose it wouldn't, would it? Is this supposed to be impressive? How many more of these before serious legislation gets through?

Legislation? Surely some of these intrusions are from national governments.

Re: Notice of Data Breach

#43

Post by bcongdon » Thu, Mar 29, 2018, 10:14 PM UTC

matthewmacleod wrote: post #31

BadassFractal wrote: post #25

I wonder if the daily progress photos were leaked as well. I imagine most people won't be thrilled to have their not-too-flattering progress selfies be out in public for the whole world to see. Side note: MyFitnessPal the app is awful, but many of us still use it because it has the most extensive database of food products out there. Outside of that it has no merit and has felt abandoned in forever. Can someone recomm…

What’s wrong with it, out of interest? It seems to work perfectly reliably for me, and I’m super happy that they aren’t getting all change-happy with it.

The iOS app has been pretty good (if a bit buggy and slow), but the desktop web interface is so bad to the point that I haven't used it in over a year -- and I use myfitnesspal daily.

Re: Notice of Data Breach

#44

Post by mvpu » Thu, Mar 29, 2018, 10:14 PM UTC

"On March 25, 2018, we became aware that during February of this year an unauthorized party acquired data associated with MyFitnessPal user accounts" => highly likely they stole more than what MFP thinks they stole.. we don't know what we don't know. Sigh.

Re: Notice of Data Breach

#45

Post by komali2 » Thu, Mar 29, 2018, 10:16 PM UTC

Somebody is about to come across 250 pictures of me in my boxers standing in front of a dirty mirror with my belly popping out. I only hope they don't judge me for the size of my belly not really changing over those 250 days...

Re: Notice of Data Breach

#46

Post by matthewmacleod » Thu, Mar 29, 2018, 10:20 PM UTC

bcongdon wrote: post #43

matthewmacleod wrote: post #31

Earlier quoted context omitted.

What’s wrong with it, out of interest? It seems to work perfectly reliably for me, and I’m super happy that they aren’t getting all change-happy with it.

The iOS app has been pretty good (if a bit buggy and slow), but the desktop web interface is so bad to the point that I haven't used it in over a year -- and I use myfitnesspal daily.

Fair, I also haven’t. I imagine barely anybody does.

Re: Notice of Data Breach

#47

Post by komali2 » Thu, Mar 29, 2018, 10:21 PM UTC

bhouston wrote: post #22

MyFitnessPal was horribly written app when I used it. The idea was good but God was it slow as hell when doing simple things.

When I first tried it in I think 2011/2012 it was garbage on android. Absolutely unusable. I used "Lose It!" for nearly 5 years because it performed much better, until it started getting extraordinarily slow when doing food searches. So I tried out MFP again and lo and behold, the app had improved tremendously!

I still am annoyed it doesn't open on diary by default. The picture+weight feature is nice though. Wish it let me track bodyfat too. As told I've got about 4 apps I use for fitness now:

MFP for food/calorie, weight, and picture tracking

Google Fitness for cardio maps and timing, and total gym time tracking. Also fun that it automatically records my bike rides. Not fun that I have to manually change my motorcycle rides from bike rides into not bike rides (when was the last time somebody got a bicycle up to 90mph on 280? shrug). Also track weight in there because I'm convinced one day google will implement some badass machine learning and I want the data there for when it happens.

"FitNotes" for setting lift routines and tracking weight in lifts. Also used for tracking bodyweight and bodyfat (only app in my list that tracks bodyfat). I add my bodyweight in there because it's cool to compare graphs of bodyweight to lifted weights. I've had great email conversations with the developer, he has a fantastic, simple development philosophy, and he has kept his app free for years now, with no ads or other BS.

Newly added "goodtime" for just a simple timer that will vibrate after 2 minutes, my break time between lifts. It was remarkably hard to find an app that just did this, as my default android alarm timer was tied to my alarm tone, so i'd have to switch it to vibrate and back when working out. Missed a morning alarm once before I decided enough of that...

Re: Notice of Data Breach

#48

Post by OldSchoolJohnny » Thu, Mar 29, 2018, 10:22 PM UTC

lev99 wrote: post #33

bhouston wrote: post #22

MyFitnessPal was horribly written app when I used it. The idea was good but God was it slow as hell when doing simple things.

I started using the app in 2012. I still use it. I'm under the impression it's the best nutrition tracking app. I've moved on to iHealth for tracking weight and exercise amounts, which I used MyFitnessPal in the past. This information is still in MyFitnessPal, and I will sometimes look at the graphs there, but not often. Apple Watch and a Bluetooth scale are great for the quantified self.

MFP is extremely limited when it comes to tracking micronutrients. If all you care about are very basic facts it's alright.

If you care about much more then Cronometer is commonly considered the best.

Re: Notice of Data Breach

#49

Post by loeg » Thu, Mar 29, 2018, 10:23 PM UTC

Ah, I had an account here. Checked Lastpass, and, great! They've got my six character don't-care-about-MyFitnessPal-security password. bcrypt will not save its secrecy in any way, but it hardly matters.

Re: Notice of Data Breach

#50

Post by rojobuffalo » Thu, Mar 29, 2018, 10:24 PM UTC

Someone1234 wrote: post #37

llccbb wrote: post #11

Does anyone have a good offline FOSS for macro-nutrient lookup and tracking? Been thinking about starting one for myself.

The biggest limitation seems to be getting the nutrient information itself. MyFitnessPal has a huge database of off the shelf food products built in (and restaurants) from all over the world. Much of that information provided to the company for free by its users. MyFitnessPal has a similar advantage to Google, they have the most and richest data, and anyone else entering that market starts at a huge disadvantage. You…

You're absolutely right about datasets being a constraint for any new entrant. The USDA SR28 is free and open but limited scope. OpenFoodFacts has a great dataset overall but ~~you can't download it (other than rate-limited scraping),~~ the license is ~~strict~~ share-alike; and there isn't an OFF personal consumption tracker.