The Wiki is running an older version of Wikimedia which is vulnerable to attacks is my best guess. 1.17 is really old.

On Sun, Oct 27, 2013 at 12:56 PM, Tom Bulten tom@oakdaleneighbors.orgwrote:

I'm getting a malware warning when I visit bikecollectives.org. Does anyone know the status of the site?

http://www.google.com/safebrowsing/diagnostic?site=http://www.bikecollective...

Tom

Oakdale Neighbors 1260 Kalamazoo SE Grand Rapids, MI 49507 www.oakdaleneighbors.org 616-248-2848

"Like" Oakdale Neighbors on Facebookhttps://www.facebook.com/OakdaleNeighbors. Join our Facebook Group https://www.facebook.com/groups/149531095642/. Connect on Nextdoor https://nextdoor.com/invite/10258b9c7bc69c1a6c4f.

---

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit:

http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

For what its worth, not to disrupt normal conversation or flow amongst the membership...I just attempted to access the site bikecollectives.org via a brandy new mac running a fresh download of Firefox and got the same warning.

Matt

Dedicated follower, Occasional contributor, and always bicycle and hpv advocate.

-----Original Message----- From: Ron Kellis ron.kellis@velocitycoop.org To: The Think Tank thethinktank@lists.bikecollectives.org Sent: Mon, Oct 28, 2013 1:05 pm Subject: Re: [TheThinkTank] malware on bikecollectives.org?

I got the same warning when I accessed the site on my Linux netbook over the weekend. I don't get the warning at work through either Chrome or IE 9.

Ron

On Sun, Oct 27, 2013 at 9:42 PM, David Oliver nowhere3@gmail.com wrote:

The Wiki is running an older version of Wikimedia which is vulnerable to attacks is my best guess. 1.17 is really old.

On Sun, Oct 27, 2013 at 12:56 PM, Tom Bulten tom@oakdaleneighbors.org wrote:

I'm getting a malware warning when I visit bikecollectives.org. Does anyone know the status of the site?

http://www.google.com/safebrowsing/diagnostic?site=http://www.bikecollective...

Tom

Oakdale Neighbors 1260 Kalamazoo SE Grand Rapids, MI 49507 www.oakdaleneighbors.org 616-248-2848

"Like" Oakdale Neighbors on Facebook. Join our Facebook Group. Connect on Nextdoor.

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit: http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit: http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit: http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

I believe you may be right, Ron (look at 'Next Steps' below). This is what I was able to see when I got the malware message from Chrome. I apologize if this is old news in this discussion.

-Matt

Safe Browsing*Diagnostic page for* www.bikecollectives.org

*What is the current listing status for www.bikecollectives.org?*

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

*What happened when Google visited this site?*

Of the 15 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2013-10-27, and the last time suspicious content was found on this site was on 2013-10-25.

Malicious software includes 1 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Malicious software is hosted on 1 domain(s), including wpbh.org/http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=wpbh.org/&client=googlechrome&hl=en-US .

4 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including cellulitecenter.info/http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=cellulitecenter.info/&client=googlechrome&hl=en-US , big-e-biz.net/http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=big-e-biz.net/&client=googlechrome&hl=en-US , cupcakelemon.biz/http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=cupcakelemon.biz/&client=googlechrome&hl=en-US .

This site was hosted on 1 network(s) including AS26347 (DREAMHOST-AS)http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=AS:26347&client=googlechrome&hl=en-US .

*Has this site acted as an intermediary resulting in further distribution of malware?*

Over the past 90 days, www.bikecollectives.org did not appear to function as an intermediary for the infection of any sites.

*Has this site hosted malware?*

No, this site has not hosted malicious software over the past 90 days.

*How did this happen?*

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

*Next steps:*

• Return to the previous

page.http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=http%3A%2F%2Fwww.bikecollectives.org%2F&client=googlechrome&hl=en-US#

• If you are the owner of this web site, you can request a review of

your site using Google Webmaster Toolshttp://www.google.com/webmasters/tools/. More information about the review process is available in Google's Webmaster Help Centerhttp://www.google.com/support/webmasters/bin/answer.py?answer=45432 .

On Mon, Oct 28, 2013 at 1:18 PM, mfen651@aol.com wrote:

For what its worth, not to disrupt normal conversation or flow amongst the membership...I just attempted to access the site bikecollectives.orgvia a brandy new mac running a fresh download of Firefox and got the same warning.

Matt

Dedicated follower, Occasional contributor, and always bicycle and hpv advocate.

-----Original Message----- From: Ron Kellis ron.kellis@velocitycoop.org To: The Think Tank thethinktank@lists.bikecollectives.org Sent: Mon, Oct 28, 2013 1:05 pm Subject: Re: [TheThinkTank] malware on bikecollectives.org?

I got the same warning when I accessed the site on my Linux netbook over the weekend. I don't get the warning at work through either Chrome or IE 9.

Ron

On Sun, Oct 27, 2013 at 9:42 PM, David Oliver nowhere3@gmail.com wrote:

...

The Wiki is running an older version of Wikimedia which is vulnerable to attacks is my best guess. 1.17 is really old.

On Sun, Oct 27, 2013 at 12:56 PM, Tom Bulten tom@oakdaleneighbors.orgwrote:

...

I'm getting a malware warning when I visit bikecollectives.org. Does anyone know the status of the site?

http://www.google.com/safebrowsing/diagnostic?site=http://www.bikecollective...

Tom

Oakdale Neighbors 1260 Kalamazoo SE Grand Rapids, MI 49507 www.oakdaleneighbors.org 616-248-2848

"Like" Oakdale Neighbors on Facebookhttps://www.facebook.com/OakdaleNeighbors. Join our Facebook Group https://www.facebook.com/groups/149531095642/. Connect on Nextdoor https://nextdoor.com/invite/10258b9c7bc69c1a6c4f.

---

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit:

http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

---

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit:

http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

---

Thethinktank mailing listThethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit:http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

---

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit:

http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

I apologize too for having forgot I too got the Google notification indicating that the servers had been cleaned up between the 25th & the 27th. Since Google reported their robots had visited the site over 90 days and hadn't found anything, then did, and then reported the site clean, I figured the issue was resolved till it was brought up. Is why I didn't say anything earlier.

If the message is still "The last time Google visited this site was on 2013-10-27, and the last time suspicious content was found on this site was on 2013-10-25." then to me there is no longer a problem.

Spam is a whole other issue, I mentioned to Dustin about setting the site to require registration email with a captcha/eCAPTCHA and he believes that is set. It's been too long since I set up my account for me to know. Anyone run a test lately?

On Mon, Oct 28, 2013 at 3:03 PM, momoko saunders analyst@bikefarm.orgwrote:

This is a lot of helpful de-bugging info. Thanks for taking the time to detail it!

I feel confident that Rich Points (community cycles) is already reading these emails, but incase he isn't, I've directly CC'd him on this email. (Rich is, as far as I can tell, the admin/owner of bike collectives wiki.)

Rich brought up some of the issues with the bike collective wiki at this year bikebike, stating that there is constant spam and need for more admins.

This may be a good time to directly address some of the issues regarding the wiki. If any one has any good ideas, or feel like they want to know more about the issues, we can form a group to discuss this.

-momoko

<Snip>

It it reporting the site is clean? Or re-infected?

Ron

Sorry for the double send Steve.

On Mon, Oct 28, 2013 at 3:19 PM, Steven Bradley stevencbradley@gmail.comwrote:

just got the notification in Chrome, right now. Steve B.

On Mon, Oct 28, 2013 at 12:19 PM, Ron Kellis ron.kellis@velocitycoop.orgwrote:

...

I apologize too for having forgot I too got the Google notification indicating that the servers had been cleaned up between the 25th & the 27th. Since Google reported their robots had visited the site over 90 days and hadn't found anything, then did, and then reported the site clean, I figured the issue was resolved till it was brought up. Is why I didn't say anything earlier.

If the message is still "The last time Google visited this site was on 2013-10-27, and the last time suspicious content was found on this site was on 2013-10-25." then to me there is no longer a problem.

Spam is a whole other issue, I mentioned to Dustin about setting the site to require registration email with a captcha/eCAPTCHA and he believes that is set. It's been too long since I set up my account for me to know. Anyone run a test lately?

On Mon, Oct 28, 2013 at 3:03 PM, momoko saunders analyst@bikefarm.orgwrote:

...

This is a lot of helpful de-bugging info. Thanks for taking the time to detail it!

I feel confident that Rich Points (community cycles) is already reading these emails, but incase he isn't, I've directly CC'd him on this email. (Rich is, as far as I can tell, the admin/owner of bike collectives wiki.)

Rich brought up some of the issues with the bike collective wiki at this year bikebike, stating that there is constant spam and need for more admins.

This may be a good time to directly address some of the issues regarding the wiki. If any one has any good ideas, or feel like they want to know more about the issues, we can form a group to discuss this.

-momoko

<Snip>

---

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit:

http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

-- Steven C. (Steve) Bradley 619-442-8833 XT 119 Office 619-442-8039 FAX See my websites: Real Estate and Financial wisdom http://www.investors-web.com/

Relationship with God: http://www.godlovespeople.org/ http://realestateandfinancialwisdom.blogspot.com/

"The problem with socialism is that eventually you run out of other people's money." --Margaret Thatcher "The true measure of a man is how he treats someone who can do him absolutely no good." - Samuel Johnson

Hi,

It looks like the website has been heavily attacked. I have a bit of
time this winter and would happily spend it trying to sort out the
site (looking at the most recent version spam had been added before
every link..) How can I help? Who has admin for the dreamhost server
the wiki is hosted on?

I'm involved in Pedallers' Arms (pedallers-arms.org) in the UK.

Cheers,

nab

Quoting Jonathan Morrison jonathan.morrison@gmail.com:

Megan Odett megan@peoplepoweredmovement.org of the Alliance for Walking and Biking is in charge of the site. Make sure you email her.

Sincerely,

Jonathan Morrison c: 801-688-0183

On Mon, Oct 28, 2013 at 1:32 PM, Ron Kellis
ron.kellis@velocitycoop.orgwrote:

...

It it reporting the site is clean? Or re-infected?

Ron

Sorry for the double send Steve.

On Mon, Oct 28, 2013 at 3:19 PM, Steven Bradley
stevencbradley@gmail.comwrote:

...

just got the notification in Chrome, right now. Steve B.

On Mon, Oct 28, 2013 at 12:19 PM, Ron Kellis <ron.kellis@velocitycoop.org

...

wrote:

...

I apologize too for having forgot I too got the Google notification indicating that the servers had been cleaned up between the 25th & the 27th. Since Google reported their robots had visited the site over 90 days and hadn't found anything, then did, and then reported the site clean, I figured the issue was resolved till it was brought up. Is why I didn't say anything earlier.

If the message is still "The last time Google visited this site was on 2013-10-27, and the last time suspicious content was found on
this site was on 2013-10-25." then to me there is no longer a problem.

Spam is a whole other issue, I mentioned to Dustin about setting the site to require registration email with a captcha/eCAPTCHA and he believes that is set. It's been too long since I set up my account for me to know. Anyone run a test lately?

On Mon, Oct 28, 2013 at 3:03 PM, momoko saunders
analyst@bikefarm.orgwrote:

...

This is a lot of helpful de-bugging info. Thanks for taking the time to detail it!

I feel confident that Rich Points (community cycles) is already reading these emails, but incase he isn't, I've directly CC'd him on this email. (Rich is, as far as I can tell, the admin/owner of bike
collectives wiki.)

Rich brought up some of the issues with the bike collective wiki at this year bikebike, stating that there is constant spam and need for more admins.

This may be a good time to directly address some of the issues regarding the wiki. If any one has any good ideas, or feel like they want to know more about the issues, we can form a group to discuss this.

-momoko

<Snip>

---

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit:

http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

-- Steven C. (Steve) Bradley 619-442-8833 XT 119 Office 619-442-8039 FAX See my websites: Real Estate and Financial wisdom http://www.investors-web.com/

Relationship with God: http://www.godlovespeople.org/ http://realestateandfinancialwisdom.blogspot.com/

"The problem with socialism is that eventually you run out of other people's money." --Margaret Thatcher "The true measure of a man is how he treats someone who can do him absolutely no good." - Samuel Johnson

---

Thethinktank mailing list Thethinktank@lists.bikecollectives.org To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org To manage your subscription, plase visit:

http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...