Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Notice of Data Breach

content.myfitnesspal.com

Post reply on HN
Print view View original

71–80 of 160 posts

Re: Notice of Data Breach

#71

Post by rojobuffalo »

sl956 wrote: post #57
rojobuffalo wrote: post #50

Earlier quoted context omitted.

You're absolutely right about datasets being a constraint for any new entrant. The USDA SR28 is free and open but limited scope. OpenFoodFacts has a great dataset overall but ~~you can't download it (other than rate-limited scraping),~~ the license is ~~strict~~ share-alike; and there isn't an OFF personal consumption tracker.

No need to scrape Open Food Facts, they kindly offer a download of the whole database as csv, rdf or mongodb dump: https://world.openfoodfacts.org/data It is 100% crowd sourced open data under the ODbL licence (same as OpenStreetMap).

Thanks for that correction. I recall there being a clear reason why I couldn't use their data in my app. But maybe I had it wrong. I remember reading that if my app collected new data about foods and I was using the OFF db, I had to commit to making all my data free and open. I was worried about the possible case that personal food consumption data would be vulnerable to that share-alike constraint.

Re: Notice of Data Breach

#72

Post by craftkiller »

borne0 wrote: post #70
komali2 wrote: post #45

Somebody is about to come across 250 pictures of me in my boxers standing in front of a dirty mirror with my belly popping out. I only hope they don't judge me for the size of my belly not really changing over those 250 days...

Hi, even if a data breach hadn't happened, did you have any concerns about people within the company having access to those photos? I also use myfitnesspal and strava but I have a strong aversion to sharing that kind of info with anyone, period. I'm 36, is this a generational thing?

I'm 9 years your junior and I wouldn't care if pictures of me fully naked were all over the internet, but at the same time I'm a privacy freak. I think the division for me is: my image says nothing about me other than my love of gluttony, but my words and actions are my identity.

Re: Notice of Data Breach

#73

Post by Mononokay »

borne0 wrote: post #70
komali2 wrote: post #45

Somebody is about to come across 250 pictures of me in my boxers standing in front of a dirty mirror with my belly popping out. I only hope they don't judge me for the size of my belly not really changing over those 250 days...

Hi, even if a data breach hadn't happened, did you have any concerns about people within the company having access to those photos? I also use myfitnesspal and strava but I have a strong aversion to sharing that kind of info with anyone, period. I'm 36, is this a generational thing?

> I'm 36, is this a generational thing?

I wouldn't say so. I'm significantly younger than you and I feel the same way.

Re: Notice of Data Breach

#74

Post by asdsa5325 »

Someone1234 wrote: post #34

That's unfortunate. At least we didn't get the stereotypical "your passwords are hashed, so nothing to worry about" one liner I've been reading from a lot of companies during disclosures. All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt (although without knowing work-factor and percentage of passwords, it is hard to know just how strongly). It has become pretty difficu…

A hardware pepper / software implemented with existing integrated crypto hardware is a great idea.

Re: Notice of Data Breach

#75

Post by PuffinBlue »

Signed up to MFP yesterday to test it out. Immediately noticed they don't use https (though the login forms appear to be submitted over https).

I thought to myself - on the face of it they don't seem to hot on security, I wonder how long it will be before they get hacked or something?

Well, I wasn't expecting less than 24 hours.

Re: Notice of Data Breach

#76

Post by geerlingguy »

iamben wrote: post #19

No notification via email or app for me as of yet... Seems like the sort of thing I should hear from them first, rather than the Baltimore Sun.

I got an email an hour ago, but I signed up fairly recently. Maybe emails are in batch, reverse order.

Re: Notice of Data Breach

#77

Post by llccbb »

Someone1234 wrote: post #37
llccbb wrote: post #11

Does anyone have a good offline FOSS for macro-nutrient lookup and tracking? Been thinking about starting one for myself.

The biggest limitation seems to be getting the nutrient information itself. MyFitnessPal has a huge database of off the shelf food products built in (and restaurants) from all over the world. Much of that information provided to the company for free by its users. MyFitnessPal has a similar advantage to Google, they have the most and richest data, and anyone else entering that market starts at a huge disadvantage. You…

I understand that bootstrapping the database is probably the hardest part, but I haven't been so confident in MyFitnessPal's database anyways. It seems crowdsourced without much quality control and it is hard to trust. There is also the "too much specificity" problem. I don't always want to choose a certain restaurant's version of a food item when I could probably have a decent first pass at the nutrient levels using a generic version of the food item.

Re: Notice of Data Breach

#78

Post by pavel_lishin »

borne0 wrote: post #70
komali2 wrote: post #45

Somebody is about to come across 250 pictures of me in my boxers standing in front of a dirty mirror with my belly popping out. I only hope they don't judge me for the size of my belly not really changing over those 250 days...

Hi, even if a data breach hadn't happened, did you have any concerns about people within the company having access to those photos? I also use myfitnesspal and strava but I have a strong aversion to sharing that kind of info with anyone, period. I'm 36, is this a generational thing?

I'm 34, and I don't care. I also tend to walk around naked, without much care if someone spots me through a window - though I try not to obviously flash the neighbors through the kitchen window, which is the only real direct easy sightline.

I used to be really insecure about being nude - I requested, and got permission to, change somewhere besides the locker room in middle school - but I think I don't care anymore, and I don't really know when this change came about.

Re: Notice of Data Breach

#79

Post by celticninja »

pavel_lishin wrote: post #78
borne0 wrote: post #70

Earlier quoted context omitted.

Hi, even if a data breach hadn't happened, did you have any concerns about people within the company having access to those photos? I also use myfitnesspal and strava but I have a strong aversion to sharing that kind of info with anyone, period. I'm 36, is this a generational thing?

I'm 34, and I don't care. I also tend to walk around naked, without much care if someone spots me through a window - though I try not to obviously flash the neighbors through the kitchen window, which is the only real direct easy sightline. I used to be really insecure about being nude - I requested, and got permission to, change somewhere besides the locker room in middle school - but I think I don't care anymore, a…

I think there is a difference between the ephemeral nature of someone spotting you naked and naked pics.of you preserved online forever

Re: Notice of Data Breach

#80

Post by recursive »

Someone wrote: post #64
Someone1234 wrote: post #34

That's unfortunate. At least we didn't get the stereotypical "your passwords are hashed, so nothing to worry about" one liner I've been reading from a lot of companies during disclosures. All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt (although without knowing work-factor and percentage of passwords, it is hard to know just how strongly). It has become pretty difficu…

”All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt” The “majority” of the passwords was hashed with bcrypt. https://content.myfitnesspal.com/security-information/FAQ.ht... : ”The MyFitnessPal account information that was not protected using bcrypt was protected with SHA-1, a 160-bit hashing function.” That majority could be as low as 50.0000001%. I also couldn’t find ho…

> That majority could be as low as 50.0000001%

It could only be that low if they have about half a billion user accounts.

Post reply on HN