I use my Facebook as the login mechanism for MyFitnessPal, I wonder if that means my Facebook password has been stolen as well. Better change it, sigh...
How would you even think this would happen?
Notice of Data Breach
51–60 of 160 posts
Re: Notice of Data Breach
#52Those of you affected by this breach, have you noticed any unusual spam/emails recently, that may be related to MFP? I’m wondering if they got the tip-off from their users.
Re: Notice of Data Breach
#53Ah, I had an account here. Checked Lastpass, and, great! They've got my six character don't-care-about-MyFitnessPal-security password. bcrypt will not save its secrecy in any way, but it hardly matters.
Re: Notice of Data Breach
#54Use of a salt makes all the difference, guarding against the use of rainbow tables to look up precomputed hashes of common passwords.
Re: Notice of Data Breach
#55Re: Notice of Data Breach
#56The breach notice indicates that hashed passwords were compromised but doesn't mention whether a salt was used when computing the hashes. Use of a salt makes all the difference, guarding against the use of rainbow tables to look up precomputed hashes of common passwords.
If they're using bcrypt, then they're using salts since salts are built in to bcrypt.
Re: Notice of Data Breach
#57Earlier quoted context omitted.
The biggest limitation seems to be getting the nutrient information itself. MyFitnessPal has a huge database of off the shelf food products built in (and restaurants) from all over the world. Much of that information provided to the company for free by its users. MyFitnessPal has a similar advantage to Google, they have the most and richest data, and anyone else entering that market starts at a huge disadvantage. You…
You're absolutely right about datasets being a constraint for any new entrant. The USDA SR28 is free and open but limited scope. OpenFoodFacts has a great dataset overall but ~~you can't download it (other than rate-limited scraping),~~ the license is ~~strict~~ share-alike; and there isn't an OFF personal consumption tracker.
It is 100% crowd sourced open data under the ODbL licence (same as OpenStreetMap).
Re: Notice of Data Breach
#58Re: Notice of Data Breach
#59Earlier quoted context omitted.
What’s wrong with it, out of interest? It seems to work perfectly reliably for me, and I’m super happy that they aren’t getting all change-happy with it.
The iOS app has been pretty good (if a bit buggy and slow), but the desktop web interface is so bad to the point that I haven't used it in over a year -- and I use myfitnesspal daily.
It also fails at the iOS quick access menu about 80% of the time. e.g. you hard-press the app icon, go to "log food" and it goes back to the home page. Or you do the same for "scan barcode" and again most of the time it opens the app and sends you to the home page again. This has been the case for months.
Re: Notice of Data Breach
#60Somebody is about to come across 250 pictures of me in my boxers standing in front of a dirty mirror with my belly popping out. I only hope they don't judge me for the size of my belly not really changing over those 250 days...