OpenStreetMap logo OpenStreetMap

Users' Diaries

Recent diary entries

🍾 YouthMappers UFRJ comemora 1 ano de registro!


Read in English

O capítulo YouthMappers UFRJ (Rio de Janeiro, Brasil) completou, no dia 14 de março de 2024, 1 ano de registro internacional.

Para comemorar esta data especial, entrevistamos o Dr. Rogério Luís R. Borba, analista da Fundação IBGE e gerente do Diretório Brasileiro de Dados Geoespaciais (DBDG) da Infraestrutura Nacional de Dados Espaciais (INDE).

🎥 Assista no canal do IVIDES no YouTube.

entrevista_youtube

Rogério conversou conosco sobre a importância dos dados abertos e como os mapeamentos colaborativos podem auxiliar o Brasil na produção de dados cartográficos. A entrevista foi conduzida pela Dra. Raquel Dezidério Souto e os detalhes podem ser conhecidos em:

🔗 https://ivides.org/youthmappers-entrevista-rogerio-borba

See full entry

Posted by NorthCrab on 15 March 2024 in English. Last updated on 18 March 2024.

As part of my commitment to OpenStreetMap-NextGen migration, I undertook a comprehensive security review of the existing OpenStreetMap website. I followed the principles of coordinated vulnerability disclosure, working directly with the maintainers to responsibly report my findings. Today, I’m making the details of this process public and verifying the status of the fixes.

Disclosure Timeline

  • 2023-11-04 - Contacted Ruby security maintainers & disclosed the timeline publicly
  • 2023-11-08 - Maintainers acknowledged the report
  • 2023-12-04 - Reported additional vulnerabilities with a 3-month deadline
  • 2023-12-06 - Maintainers acknowledged the additional report
  • 2024-03-02 - Publicize vulnerability details
  • 2024-03-15 - Publicize vulnerability details

1. Plain-Text Authentication Token Storage

Authorization tokens (oauth, session, user tokens) are stored in plain text. Read access to the database allows full impersonation of any user.

Status as of 2024-03-15: Partially vulnerable (oauth still depends on plain text storage)

NextGen Codebase Status: Fixed (all authorization tokens and credentials are hashed or encrypted for secure storage)

2. Insecure Email Reply Address Tokenization

The tokens used to ensure the authenticity of email replies are too short (24-bit), making them susceptible to brute-force attacks. An attacker could potentially guess the token and impersonate a legitimate user in email conversations. This vulnerability is especially dangerous if the attacker already has access to a conversation’s metadata (allowing for complete security bypass).

Status as of 2024-03-15: Fixed (now with 48-bit security)

NextGen Codebase Status: Fixed (128 or 256-bit security; undecided)

3. Unbounded GPX Extraction Denial of Service

See full entry

Posted by Tommybara on 15 March 2024 in English. Last updated on 21 March 2024.

Apparently, OSM in Vietnam is in a very poor condition. And one of the reasons would be the absence of several nature reserve areas, even compared to the two neighboring Indochinese brothers, Laos and Cambodia. Despite the fact that the Department of Forestry has published a document stating that there are 34 national parks and 56 nature reserves, until now (15 March) only half of them have been mapped to OSM.

Here’s the list:

National parks

Nature reserves

Nature reserves with official “Nature Reserve” title

Official “Nature Reserve” title refers to the fact that these areas have their own management board (ban quản lý) and is usually a division of the provincial departments of agriculture and rural development (Sở Nông nghiệp và Phát triển Nông thôn). These includes:

See full entry

Posted by ENGELBERT MODO on 15 March 2024 in French (Français).

Please also share/blast in your socials/network :)

—— 👂👀 Have you heard? 📢 We have launched 🚀 the #OSMFMembershipCampaign 2024!

Help us grow and diversify #OSMF members in regions 🌍🌏🌎 where there are no or very few OSMF members! You can support! 🎯 https://blog.openstreetmap.org/2024/03/12/call-to-action-help-us-grow-and-diversify-osmf-membership/

Join ✍️https://supporting.openstreetmap.org/#Membership-Categories

openstreetmap

presentation of the Mapeaia Belém project to the Brazilian Openstreetmap community

we present the Mapeia Belém project to the Brazilian openstreetmap community, which is an initiative of UMBRAOSM União dos Mapeadores Brasileiros do Openstreetmap and partners such as Meninas da GEO, Capitulos Youthmappers and other groups and in addition to the Brazilian Openstreetmap community and aims to update data in city ​​of Belém for the Major Events that the city will host in 2024 and 2025 such as FOSS4G and COP 30.

See full entry

Location: São Brás, Belém, Região Geográfica Imediata de Belém, Região Geográfica Intermediária de Belém, Pará, North Region, Brazil
Posted by Infra-Simon on 14 March 2024 in German (Deutsch).

Hallo zusammen,

ich habe auf der Arbeit die Aufgabe das Parken in Frankfurt mithilfe des Rapid Editors zu taggen. Dafür möchte und soll ich so präzise wie möglich vorgehen. In vielen Straßen kommt es aber vor, dass verschiedene Parkrichtlinien oder Ausrichtungen bestehen. Außerdem sind einige Straßen sehr lang in OSM.

Eine Möglichkeit ist, die Straßen mithilfe eines Punkts zu teilen, um verschiedene parktags einzufügen. Das zerstückelt aber oft die Straßen und es entstehen kleine Teilstücke mit verschiedenen ID’s. Die zuvor eingefügten Attribute bleiben aber bestehen.

Jetzt ist die Frage, welche Folgen es hat, die Straßen aufzuteilen, um präzise Parkangaben tätigen zu können, oder ob das keine wirkliche Rolle spielt. Viele Straßen sind ja sowieso schon sehr aufgestückelt.

Über eine Antwort würde ich mich sehr freuen.

Gruß Simon (Infra-Simon)

Location: Nordend West, Innenstadt 3, Frankfurt am Main, Hessen, Deutschland

Algumas mudanças feitas para quem vive em Contagem: coloquei a barraca do Tio toninho em frente a prefeitura, algo que está a anos e não se foi notado no mapa. E algumas coisas em torno de Minas Gerais. Vou fazendo mudanças as quais considero necessárias. Bom mapeamento a todos!

Some changes made for those who live in Contagem: I placed Tio Toninho’s tent in front of the city hall, something that has been around for years and was not noticed on the map. And some things around Minas Gerais. I’m making changes that I consider necessary. Good mapping everyone!

The key “name” is one of the 10 most frequently used characteristics of objects - according to Taginfo 100 million times. It is probably also the tag with the most errors. A random sample in my neighbourhood showed an error rate of 8.4% (N=1092). Possible reasons:

  1. lack of knowledge
  2. misunderstanding
  3. tag missing

The proposal relates to point 2, possible misunderstandings regarding the meaning of the “name” tag.

Current Wiki structure

The main article names lists 14 different keys of the proper name, differentiates them from each other and from non-proper names and gives many examples. The article is quite extensive with 29k characters.

Of the 14 keys, 5 keys do not have their own wiki page: int_name, loc_name, nat_name, reg_name and nickname.

The article on the key name is similar to the main article names, only somewhat shorter. It is still quite extensive with 18k characters. All other articles are short.

Issues Main article “names”

Readability.

The text is very extensive and therefore requires perseverance. However, it deals with all aspects of name keys in detail and consistently. Many examples illustrate the basic idea.

Issues key:name

Readability, redundancy, clarity.

The text for the key name is very long at 18k characters, the essentials are lost in the sea of words. Much of it is a repetition of information that is already available elsewhere:

  • The “values” section is almost completely contained in the main article.
  • The “Variants” table is already completely contained in the main article.
  • The table of language subkeys covers more than 3 screen pages and is also fully covered on the “Multilingual names” page.
  • The sections “Road names” and “Additional data” are also already included in the main article. Only the sentence with “strapline” is supplementary.

In addition to the high redundancy, the text is also blurred. The core - the proper name - is not mentioned at all. The explanations lead to problematic statements.

See full entry

Posted by Eka Diweti on 13 March 2024 in English. Last updated on 13 April 2024.

The OpenStreetMap Foundation had quite recently launched a worldwide membership campaign with the objective of growing and diversifying OSMF membership in regions where there are very low or no OSMF members. And I am proud to say that I was/am part of this campaign. I should say that it is also my very first time volunteering for the OpenStreetMap Foundation and the experience has been & continues to be very enriching to say the least. In late January, I had responded to a call for volunteers & campaigners to help grow OSMF membership on Slack & since then, I’ve been part of a very diverse, talented & committed group of campaigners & volunteers.

On the first few virtual meet-ups via Google meet, I had promptly signed up for the visual comms/mapmakers role as I believed I could use whatever little designing skills & experiences I had to aid in creating & designing comms material for the campaign. In doing so, I had been thrown into a mix of incredible volunteers from around the world. Our work as visual comms/mapmakers volunteers had revolved around creating posters, pubmats, infographics, maps, etc. and these materials feature a lot about the OpenStreetMap Foundation, testimonials, how to join, membership types, why join, etc. However, generating these materials wasn’t an easy feat as the process often involved planning, a lot of discussions, facilitating, reviewing, and amending the materials as per suggestions/recommendations from the OSMF Board.

I believe that this volunteering opportunity has helped me grow in ways I wouldn’t have imagined because in the short period of only two months, I have learnt a lot about community, having being part of a group with shared or common interest but also acknowledging the different ideas, strengths & capabilities that each one of us had & brought to the table allowed us to effectively work together to bring about the outputs we were tasked to deliver.

See full entry

일단 동문1동의 학동 지점 건물 및 도로 추가 완료했습니다. 차기에는 서산제일감리교회 동편 지역, 그리고 서령로 남측 지역 추가… 점점 점진적으로 추가할 예정입니다.

빨라야 반 년 뒤에는 끝날 거 같네요.

이후에는 성연면 (서산테크노밸리), 인지면, 부석면, 해미면, 대산읍, 음암면, 운산면, 고북면, 지곡면 순으로 편집해나갈 예정입니다. 물론 해당 지역들은 바뀌어질 수도 있습니다. 길어야 5년은 될 거 같네요

Location: 36.781, 126.452
Posted by SK53 on 12 March 2024 in English.

A recent discussion on the osm-gb IRC channel was about how to map chapels within crematorium buildings.

Cheltenham Crematorium - geograph.org.uk - 670230

I thought it was worth summarising some of that discussion. These notes pertain to crematoria in England and Wales. I have attended a funeral at that in Geneva, but that was twenty years ago.

One of the difficulties is that most visits to a crematorium are likely to be to attend a funeral service. This is not conducive to any kind of sophisticated micromanaging, but does allow a decent amount of basic observation. In addition I’m not aware of well-developed tagging standards for various features, as may become apparent by looking at some of my examples

In general

See full entry

Location: Harp Hill, Charlton Kings, Cheltenham, Gloucestershire, England, GL52 6FD, United Kingdom

Hello Community,

Recently, I embarked on a quest to explore second-hand stores and made an intriguing discovery—not only about the variety of hidden treasures but also about the limitations of the existing data in OpenStreetMap.

At the beginning of my search i obviously used OSM to look for second hand shops. I used https://openstreetbrowser.org/ and created a custom category with the code

query: 13: nwr[shop=second_hand]

and discovered that there are just few second-hand stores mapped in my area. I was sure that this is not possible and so i searched the internet to create my own list while cross-referencing various websites, blogs and platforms.

To optimize my exploration, I looked to create an efficient route—the classic Traveling Salesman Problem. There are various tools and APIs that can be utilized for this purpose. After some deliberation, I opted for Routexl, which best suited my needs as its possible to use it for free if you don’t have more than 20 points.

Armed with the list and the route, I got out with my bicycle on two separate days to visit most of the second-hand stores and map them. But my journey didn’t end there. I checked again with the OpenStreetBrowser and and shared it the first time within a local community. The community then showed me another second-hand store specializing in computers—an aspect I had not previously considered, as my focus was on clothing stores.

Now there are two already mapped stores where its not clear if they are still in operation. More research and exploration is required to keep everything recent.

It was interesting to discover how these store did not get mapped previously or did not get any attention even after they got added to OSM. It was a nice experience to find something that might be needed locally.

Lets fill the map with new discoveries!

Open street mapping training was started at. 09:00, it was located at Kacyiru in Gift house where headquarter of OpenStreetMap Rwanda located. it was started by Jeannette as coordinator of Eco mappers, she starts with welcoming all newcomers (the trainee of the day) with good greeting and asked them to feel at home. as continuing she asked Jack to explain for us what OpenStreetMapping mean? what Eco mapper do? he told us where Eco mapper comes from, their vision and missions etc. jeanette continue as the newcomer to present itself and then she shows us her team one by one in his/her name and what he/she responsible for in Eco mappers group. continuing with receiving speakers, our special guest etc. also, we taking tea break together, then we follow another speaker. as we continuing to be celebrating women day, we play game together, and then we start to study how can we contribute to mapping process, Liliane helper us and another ecomappers member then we start to map, where the first mapper of the day mapped 170 buildings, he is a boy, finally, we took photos and sharing food together.

Posted by ENGELBERT MODO on 12 March 2024 in French (Français).

Bienvenue à la campagne d’adhésion 2024 à la Fondation OpenStreetMap ! Aujourd’hui, les membres du conseil d’administration de la Fondation OpenStreetmap (OSMF) et plusieurs groupes de travail de l’OSMF lancent une campagne mondiale d’adhésion à l’OSMF dans le but d’augmenter et de diversifier les adhésions à l’OSMF dans les régions où il n’y a pas ou très peu de membres de l’OSMF.

Comme vous pouvez le voir sur cette carte, ces régions sont nombreuses.

Visualisation des membres de l’OSMF par pays, dans le monde entier OSM est connu pour avoir été construit par une vaste communauté mondiale de cartographes, de professionnels des SIG, de créateurs de communautés, de développeurs, d’ingénieurs, de formateurs, etc. au cours des vingt dernières années d’existence du projet, qui toutes et tous apportent leurs connaissances locales et maintiennent des données géospatiales ouvertes et gratuites.

La Fondation OSM administre et soutient la création d’OSM en supervisant les infrastructures techniques et les données d’OSM. Elle contribue également à orienter la stratégie à long terme et le bien-être du projet.

Il est donc très important que les membres de la Fondation OSM reflètent la grande diversité de sa communauté.

Pourquoi avons-nous besoin d’une campagne d’adhésion à l’OSMF ? OSMFMembershipCampaign Comme le souligne le site web de l’OSMF, la fondation OpenStreetMap a pour mission d’encourager la croissance, le développement et la distribution de données géospatiales libres et de fournir des données géospatiales que tout le monde peut utiliser et partager..

Il est important de noter qu’il n’est pas nécessaire d’être membre de la Fondation OSM pour créer un profil sur OSM.org et commencer à modifier OpenStreetMap. Il n’est même pas nécessaire d’être membre pour se porter volontaire auprès d’une communauté locale ou d’un groupe de travail, pour assister à une conférence State of the Map ou pour participer à une fête de la cartographie.

See full entry

This is directly translated from Arnalie’s Blog.

২০২৪ সালের OpenStreetMap ফাউন্ডেশন মেম্বারশিপ ক্যাম্পেইনে স্বাগতম!

আজ, ওপেনস্ট্রিটম্যাপ ফাউন্ডেশন (ওএসএমএফ) বোর্ডের সদস্যরা এবং বেশ কয়েকটি ওএসএমএফ ওয়ার্কিং গ্রুপের সদস্যরা একটি বিশ্বব্যাপী ওএসএমএফ সদস্যতা প্রচারাভিযান শুরু করছে। যেখানে ওএসএমএফ সদস্য নেই বা খুব কম এমন অঞ্চলে ওএসএমএফ সদস্যতা বৃদ্ধি এবং বৈচিত্র্যময় করার লক্ষ্যে।

আপনি এই মানচিত্র থেকে দেখতে পাচ্ছেন, এরকম অনেক অঞ্চল রয়েছেঃ A visualization of OSMF membership by country, worldwide ওএসএম একটি বিশাল, বিশ্বব্যাপী ম্যাপার, পেশাদার জিআইএস, কমিউনিটি বিল্ডার, ডেভেলপার, ইঞ্জিনিয়ার, প্রশিক্ষক ইত্যাদি দ্বারা নির্মিত হওয়ার জন্য পরিচিত, যা ম্যাপের অস্তিত্বের বিগত বিশ বছরে তাদের স্থানীয় জ্ঞানে অবদান রাখে এবং উন্মুক্ত এবং বিনামূল্যে ভূ-স্থানিক ডেটা বজায় রাখে।

OSM ফাউন্ডেশন, OSM এর প্রযুক্তিগত সিস্টেম এবং ডেটা তত্ত্বাবধান করে OSM তৈরির পরিচালনা এবং সমর্থন করে। এটি দীর্ঘমেয়াদী কৌশল এবং মানচিত্রের মঙ্গল পরিচালনা করতে সহায়তা করে।

সুতরাং, OSM ফাউন্ডেশনের সদস্যপদ তার সম্প্রদায়ের বিশাল বৈচিত্র্যের প্রতিফলন হওয়া খুবই গুরুত্বপূর্ণ।

See full entry

Posted by Vali-44-49 on 11 March 2024 in French (Français).

Bonjour,

Une petite information : Doué-en-Anjou (sud du Maine-et-Loire) possède maintenant une petite communauté OSM! Elle s’organise en utilisant le réseau social Communecter.

On se retrouve normalement l’après-midi du deuxième samedi du mois. Si vous n’êtes pas trop loin, vous serez les bienvenus!

Au plaisir! Valentin

Location: Hemon Chollet, Le Fief Limousin, Doué-la-Fontaine, Doué-en-Anjou, Saumur, Maine-et-Loire, Pays de la Loire, France métropolitaine, 49700, France