121–130 of 160 posts
The MyFitnessPal database has been compromised for years . I register with a unique email address for every website and app that I use so that I can tell when somebody's database gets compromised or they sell my data. I started getting an influx of spam to my MyFitnessPal email years ago. I told them about it at the time but they didn't care.
The MyFitnessPal database has been compromised for years . I register with a unique email address for every website and app that I use so that I can tell when somebody's database gets compromised or they sell my data. I started getting an influx of spam to my MyFitnessPal email years ago. I told them about it at the time but they didn't care.
Maybe they just sold your email, they don't need to have been breached for that.
I never agree to sharing my email address with partners, so if that's the case, then it was without my consent.
However generally speaking, I've noticed there's a big difference in the spam you get from somebody selling your data and the spam you get from a database compromise. When somebody sells your data, you get spam from real organisations who happen to be acting in a sleazy way (e.g. bulk promo emails sent to people without their consent). When somebody's database gets compromised, you get things like phishing emails and V14gr4-style emails designed to bypass spam filters. The MyFitnessPal spam was the latter sort.
Here's an example:
****Quailty Medstore 2017****
--Low Pr1ce$ For Pills--
--Fsat Delivery Wroldwide--
--Trusetd Onlline Shhop--
[0] https://www.reddit.com/r/unitedkingdom/comments/888ds3/under...
That's unfortunate. At least we didn't get the stereotypical "your passwords are hashed, so nothing to worry about" one liner I've been reading from a lot of companies during disclosures. All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt (although without knowing work-factor and percentage of passwords, it is hard to know just how strongly). It has become pretty difficu…
> All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt (although without knowing work-factor and percentage of passwords, it is hard to know just how strongly) Speaking of proper password hashing--are there any methods similar to bcrypt but where you can increase the work factor on the currently stored passwords without having to have access to the plain password? E.g., su…
No info either way about whether peoples very personal fitness data was breached, eating habits, weight, other measurements. Appaling PR speak.
I hope the log of my sex activity resulting in losing 20 lbs wasn't breached!
Which is just why breach of this data is dangerous.
That's unfortunate. At least we didn't get the stereotypical "your passwords are hashed, so nothing to worry about" one liner I've been reading from a lot of companies during disclosures. All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt (although without knowing work-factor and percentage of passwords, it is hard to know just how strongly). It has become pretty difficu…
> All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt (although without knowing work-factor and percentage of passwords, it is hard to know just how strongly) Speaking of proper password hashing--are there any methods similar to bcrypt but where you can increase the work factor on the currently stored passwords without having to have access to the plain password? E.g., su…
Interestingly, a similar scheme could be used to offload some of the hashing work to the client machine - send the first salt to the client and have them do the 4 hash, then do a serverside 2 hash on the client's result.
Imagine this happening in any other industry. "Oh hi users, the things you gave to us and we were supposed to keep safe, well, someone came and took them." Say the bank sent all their customers a similar message, how would their customers be expected to react? Why is it any different in the tech industry? Basically these apology messages amount to: "Someone accessed your private stuff, please change the special key y…
You mean like when Home Depot lost thousands of credit card numbers? Or when Target did the same? Or when Equifax lost millions of people's private data?
The response is always "Welp, sorry! We'll do better next time!" and the tech industry isn't alone here.
Earlier quoted context omitted.
Same here - my new roommate is constantly closing the blinds at night because he doesn't want the old lady in the building across from us see us sit around and play video games, I guess. I remember refusing to shower after the gym because I didn't want people to see my wiener. I think it changed when my friend's bathroom's door lock was broken. His brother was about to go in and was the kind of guy that liked to anno…
Back in Roman times you'd go to the communal bathroom with your friends, sitting side by side and having a chat while doing your business. They didn't even bother with cubicles back then.
Earlier quoted context omitted.
Hi, even if a data breach hadn't happened, did you have any concerns about people within the company having access to those photos? I also use myfitnesspal and strava but I have a strong aversion to sharing that kind of info with anyone, period. I'm 36, is this a generational thing?
Pretty sure there's pics of my butthole on the internet, idgaf at this point
Can anyone more versed in this do a quick look for abnormal behavior?
E.g. I don't think i would really care about pics of my dick being made public, but plenty of women get routinely harrassed (often to the point of sexual assault or suicide) because of sexy selfies some idiot shared with friends.