Hi Barbara, Switzerland is missed.

Please add it.

I will send you also another separate email to align the organization of Switzerland and to know what can be done centrally and what we should do locally.

Liechtenstein at the moment is on the way because we asked to have the list of monuments but the local administration missed it until now, we hope to have it sooner.

Regards

On Wed, Aug 15, 2012 at 2:52 PM, Barbara Fischer < barbara.fischer@wikimedia.de> wrote:

thank You Platonides for checking through all URLs. This is actually also the base to be able to update the list of participating countries on http://www.wikilovesmonuments.org/. We should all strive for having the sites updated to the end of August.

If You save problems or have questions, please ask them here.

It is going to work!!

Barbara Fischer Kuratorin für Kulturpartnerschaften

Wikimedia Deutschland e.V. | NEU: Obentrautstr. 72 | 10963 Berlin Tel. (030) 219 158 26-0

http://wikimedia.de

Wikimedia Deutschland - Gesellschaft zur Förderung Freien Wissens e.V. Eingetragen im Vereinsregister des Amtsgerichts Berlin-Charlottenburg unter der Nummer 23855 B. Als gemeinnützig anerkannt durch das Finanzamt für Körperschaften I Berlin, Steuernummer 27/681/51985.

2012/8/12 Platonides platonides@gmail.com

...

I have been retrieving the list of websites for each participating country. There were 8 countries for which I didn't find a url at the linked page from https://commons.wikimedia.org/wiki/Commons:Wiki_Loves_Monuments_2012/Partici...

I saw a number of sites using outdated software. If your country is listed below, you should update your CMS or bring this mail to the person in charge of the website.

I also found a couple of pages linked to the https version of their website, but the server provided the wrong certificate. If you provide https urls they should work.

Finally, a few statistyics: 18+1 countries* are using WordPress and 5-1 MediaWiki**. Hungary seems to be the only one to be doing something different and not to use a CMS.

The following errors were encountered: https://wikilovesmonuments.at/ Bad https cert http://www.wikilovesmonuments.be/ Please update MediaWiki from 1.17.0 to 1.19.1 http://www.wikilovesmonuments.cz/ Please update Wordpress from 3.3.1 to 3.4.1 http://wikilovesmonuments.fr/ Please update Wordpress from 3.3.1 to 3.4.1 https://wikilovesmonuments.de/ Bad https cert http://www.wikilovesmonuments.in/ Please update WordPress from 3.2.1 to 3.4.1 http://www.wikilovesmonuments.nl/ Please update WordPress from 3.2.1 to 3.4.1 http://wikizabytki.pl/ Please update WordPress from 3.1 to 3.4.1 http://wikilovesmonuments.ro/ Please update WordPress from 3.1.2 to 3.4.1 http://wikilovesmonuments.co.za/ Please update MediaWiki from 1.19.0 to 1.19.1 http://wlm.org.ua/ Please update WordPress from 3.3.1 to 3.4.1 http://www.wikilovesmonuments.org/ Please update Wordpress from 3.3.2 to 3.4.1

Also, the following sites identified themselves as "WordPress 3.4", which could either mean version 3.4.1 (good) or 3.4.0 (outdated).

http://www.wikilovesmonuments.cat/ http://www.wikilovesmonuments.co/ http://wlmpanama.org.pa/ http://wikilovesmonuments.ru/

Best regards

• 18 countries + international website

** 5 countries but 4 websites, Belgium & Luxembourg sharing the same site.

---

Wiki Loves Monuments mailing list WikiLovesMonuments@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikilovesmonuments http://www.wikilovesmonuments.org

---

Wiki Loves Monuments mailing list WikiLovesMonuments@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikilovesmonuments http://www.wikilovesmonuments.org

On Wed, Aug 15, 2012 at 3:00 PM, Ilario Valdelli valdelli@gmail.com wrote:

Liechtenstein at the moment is on the way because we asked to have the list of monuments but the local administration missed it until now, we hope to have it sooner.

Are you also collaborating for Liechtenstein? Is it a joint effort by Wikimedia Austria and Wikimedia CH? Liechtenstein is peculiar in that it is the only participating country which doesn't even have a Wikimedia Commons page.

We will have the pages for WLM Liechtenstein soon. Kind regards Beppo -------- Original-Nachricht --------

Datum: Wed, 15 Aug 2012 15:35:07 +0200 Von: Ilario Valdelli valdelli@gmail.com An: Wiki Loves Monuments Photograph Competition wikilovesmonuments@lists.wikimedia.org Betreff: Re: [Wiki Loves Monuments] Local websites, missing urls and vulnerable versions

Yes, There is Alexander Wagner who looked for the list and he is waiting it.

Officially it is a joint effort of both wikimedias. The domain is owned by WM CH.

On 15.08.2012 15:26, Platonides wrote:

...

Are you also collaborating for Liechtenstein? Is it a joint effort by Wikimedia Austria and Wikimedia CH? Liechtenstein is peculiar in that it is the only participating country which doesn't even have a Wikimedia Commons page.

-- Ilario Valdelli Wikimedia CH Verein zur Förderung Freien Wissens Association pour l’avancement des connaissances libre Associazione per il sostegno alla conoscenza libera Switzerland - 8008 Zürich Tel: +41764821371 http://www.wikimedia.ch

---

Wiki Loves Monuments mailing list WikiLovesMonuments@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikilovesmonuments http://www.wikilovesmonuments.org

2012/8/15 Tomasz Ganicz polimerek@gmail.com Well - what's the problem that we are using older version of WordPress or MediaWiki? Does it harm anyone?

It wouldn't be a problem if you were just missing new features, but when you miss security patches, it probably is. MediaWiki has a better security track than WordPress. When there's a MW security fix, it is more likely to be "someone could trick a user to steal their credentials", not "someone can abuse your install to send spam".

Still, you can end up with the webpage sending Viagra and Cialis keywords and links with an insecure install of almost any CMS.

If you are certain your install is patched, fine. You can disregard this or even send a note of how you're using Debian Potato and that has the vulnerabilites patched. If you have installed WordPress a year ago and forgot about it, and now think you are secure, then you're not.

WordPress 3.1.1 fixes three security issues [1] Another one in 3.1.2 although not relevant if you don't have untrusted contributors [2] WordPress 3.1.3 fixes some more security issues, wlthough changelog is quite vague [3] WordPress 3.1.4 is similar to 3.1.2 "fixes an issue that could allow a malicious Editor-level user to gain further access to the site" [4] WordPress 3.3.1 "fix for a cross-site scripting vulnerability" [5] WordPress 3.3.2, six different security fixes [6] WordPress 3.3.3, "an unannounced security fix release", probably the same as 3.4.1 [7] WordPress 3.4.1 "fixes a few security issues", although seem more relevant for multisite installs [8]

From Wordpress 3.1 to 3.4.1 you missed 12 releases. Are you sure your

install is secure? We got cracked with a newer WordPress release than the one you're using, with two shellcodes installed in our web. Your "what's the problem" attitude is a dangerous one.

Regards

1- http://wordpress.org/news/2011/04/wordpress-3-1-1/ 2- http://wordpress.org/news/2011/04/wordpress-3-1-2/ 3- http://wordpress.org/news/2011/05/wordpress-3-1-3/ 4- http://wordpress.org/news/2011/06/wordpress-3-1-4/ 5- http://wordpress.org/news/2012/01/wordpress-3-3-1/ 6- http://wordpress.org/news/2012/04/wordpress-3-3-2/ 7- http://codex.wordpress.org/Version_3.3.3 8- http://wordpress.org/news/2012/06/wordpress-3-4-1/

Hi Platonides, thanks for the reminder -- I recently updated the two websites that are being run from a server belonging to Wikimedia Polska, so http://wikizabytki.pl and http://wikilovesmonuments.by are now using the latest version of Wordpress available.

Regards