Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Notice of Data Breach

content.myfitnesspal.com

Post reply on HN
Print view View original

61–70 of 160 posts

Re: Notice of Data Breach

#61

Post by Someone »

ISL wrote: post #6
tragic wrote: post #3

> The affected data did not include government-issued identifiers, such as Social Security numbers and driver’s license numbers, information that the app does not collect from users Well, I suppose it wouldn't, would it? Is this supposed to be impressive? How many more of these before serious legislation gets through?

The article is likely to be repeating what was in a press release or statement from the company. It's there to bound above the impact of the breach.

This is the statement from the company.

Re: Notice of Data Breach

#63

Post by propman »

Should be a fine every time this happens and a major fine if it was found due to negligence or not having the appropriate security measures aka yahoo. Yahoo leadership new they were understaffed, cut staffing anyways, got rid of any executive who disagreed, and got no penalty for their mistakes.

Make it more costly to get fined than it is to get hacked. Or some white collar jail time if it wss negligence or covering it up.

Re: Notice of Data Breach

#64

Post by Someone »

Someone1234 wrote: post #34

That's unfortunate. At least we didn't get the stereotypical "your passwords are hashed, so nothing to worry about" one liner I've been reading from a lot of companies during disclosures. All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt (although without knowing work-factor and percentage of passwords, it is hard to know just how strongly). It has become pretty difficu…

”All they said here is that the passwords are hashed and with a reasonably secure method -- bcrypt”

The “majority” of the passwords was hashed with bcrypt. https://content.myfitnesspal.com/security-information/FAQ.ht...: ”The MyFitnessPal account information that was not protected using bcrypt was protected with SHA-1, a 160-bit hashing function.”

That majority could be as low as 50.0000001%. I also couldn’t find how many accounts were affected. I guess they don’t know, so we must assume all of them.

Re: Notice of Data Breach

#65

Post by Distant_horizon »

BadassFractal wrote: post #25

I wonder if the daily progress photos were leaked as well. I imagine most people won't be thrilled to have their not-too-flattering progress selfies be out in public for the whole world to see. Side note: MyFitnessPal the app is awful, but many of us still use it because it has the most extensive database of food products out there. Outside of that it has no merit and has felt abandoned in forever. Can someone recomm…

Alternative: Cronometer's database is almost always more accurate.

https://cronometer.com/

Re: Notice of Data Breach

#66

Post by Distant_horizon »

OldSchoolJohnny wrote: post #48
lev99 wrote: post #33

Earlier quoted context omitted.

I started using the app in 2012. I still use it. I'm under the impression it's the best nutrition tracking app. I've moved on to iHealth for tracking weight and exercise amounts, which I used MyFitnessPal in the past. This information is still in MyFitnessPal, and I will sometimes look at the graphs there, but not often. Apple Watch and a Bluetooth scale are great for the quantified self.

MFP is extremely limited when it comes to tracking micronutrients. If all you care about are very basic facts it's alright. If you care about much more then Cronometer is commonly considered the best.

Co-sign your cronometer rec. Once I cared about my health, for real, it was the obvious choice.

Re: Notice of Data Breach

#67

Post by dictum »

bhouston wrote: post #22

MyFitnessPal was horribly written app when I used it. The idea was good but God was it slow as hell when doing simple things.

I begrudgingly use it when I'm focused on losing weight. As soon as I reach my goal, I'm out. It's too frustrating to use it multiple times a day, everyday. I should use it for bulking too, but I'd rather live with the inefficiency of not tracking things perfectly.

This leak disappoints me because my oat obsession should be known only by those who truly know me, like my family and the NSA.

Re: Notice of Data Breach

#68

Post by lazyasciiart »

asadjb wrote: post #60
komali2 wrote: post #45

Somebody is about to come across 250 pictures of me in my boxers standing in front of a dirty mirror with my belly popping out. I only hope they don't judge me for the size of my belly not really changing over those 250 days...

That was my first thought as well. But as per the article, only usernames, emails, and hashed passwords were taken.

It doesn't say 'only' - it implies by omission that your content was not part of the breached data, but does not assert it. It says the data breach 'includes' usernames, emails and passwords.

Re: Notice of Data Breach

#69

Post by artichikin »

OldSchoolJohnny wrote: post #48
lev99 wrote: post #33

Earlier quoted context omitted.

I started using the app in 2012. I still use it. I'm under the impression it's the best nutrition tracking app. I've moved on to iHealth for tracking weight and exercise amounts, which I used MyFitnessPal in the past. This information is still in MyFitnessPal, and I will sometimes look at the graphs there, but not often. Apple Watch and a Bluetooth scale are great for the quantified self.

MFP is extremely limited when it comes to tracking micronutrients. If all you care about are very basic facts it's alright. If you care about much more then Cronometer is commonly considered the best.

thanks! cronometer founder here :-) my indie hackers interview for anyone that cares: https://www.indiehackers.com/interview/03874047f2

Re: Notice of Data Breach

#70

Post by borne0 »

komali2 wrote: post #45

Somebody is about to come across 250 pictures of me in my boxers standing in front of a dirty mirror with my belly popping out. I only hope they don't judge me for the size of my belly not really changing over those 250 days...

Hi, even if a data breach hadn't happened, did you have any concerns about people within the company having access to those photos? I also use myfitnesspal and strava but I have a strong aversion to sharing that kind of info with anyone, period.

I'm 36, is this a generational thing?

Post reply on HN