Length extension attacks were actually used to attack a number of commercial web message authentication schemes such as one used by Flickr.
The reference mentions that attackers utilized length extension attacks to target various commercial web message authentication schemes, specifically mentioning one used by Flickr.