Saying "that sucks" is probably fine to say but it's not my first choice.

Really the best thing you can do is show that you're listening while they open up. I interpret that as listening mostly and making brief comments (something you can say in 5 seconds) relevant to their story.

Guess that's basically point 3 in more detail.

The practical stuff is cool too. It shows you care