• September ABI Score: 49.1 (53.7 - August)
• September New Projects Inquiry Index: 59 (62.5 - August)
• September New Design Contracts Index: 52.9 (56.4 - August)

Uncertainty Lingers

Has the economy simply taken a temporary hit from the storms or are there other factors that need to be considered?  According to a recent CNBC article, Mark Zandi, chief economist at Moody's, believes that the job market was simply hurt by the hurricanes, stating "looking through the storms the job market remains sturdy and strong."  Ahu Yildirmaz,  vice president and co-head of the ADP Research Institute, believes the job market was not only impacted by the storms, but also by the lack of competitive compensation for skilled talent. In other words, we cannot use the storm to cover up the impact of true and lasting issues. The need for skilled professionals is going to persist, and must be addressed. How companies respond, only time will tell.

Are you careful about what networks you connect to and what types of information you send? While you may feel safe on your secure home or office network, the wireless world, and everything in it, recently became a lot more exposed.

A serious and wide-ranging wireless security flaw was announced last month, potentially impacting individuals and businesses alike.  It could affect most wireless devices, including cell phones, tablets, laptops, desktop computers, smart home devices, (e.g. wireless thermostats/lights/alarm systems, etc.) internet access points and routers, even gaming consoles!  The flaw, known as KRACK, is linked to WPA2, a security protocol used in most Wi-Fi devices. The protocol enables the encrypted transmission of information between wireless devices. 

A recent TIME article explained the wireless security protocol simply. When a device joins a protected Wi-Fi network, a four-way handshake takes place. The process ensures that the device has the correct login credentials for the network, and once confirmed, generates a new encryption key. The key is installed during the third step of the four-way handshake, but if the access point believes the message has been lost or dropped, it will resend the same key (and can be done multiple times). During this step, a misappropriated key can be reused in ways that undermine the encryption,  allowing attackers to intercept sensitive data transmitted between wireless devices.  Additionally, the flaw could allow the attacker to redirect traffic on a network or interject data, including malware, onto the network. 

All wireless devices can be impacted, however Linux based systems and Android devices using Marshmallow (Android 6.0) or higher are at an increased risk. At this point, businesses and public  Wi-Fi networks (e.g. Starbucks, airports, hotels, etc.) should be avoided as they provide a much richer environment (and cover) for an attack.  It appears  unlikely that individuals (homes) would be the target of attacks at this time, but it is important to take precautions.  

Microsoft has already released a patch and many others are working to do the same.  Some vendors, especially for older devices, may never address the issue. 

Android  Central provided the following tips to stay safe:

• Avoid public Wi-Fi at all costs. This includes Google's protected Wi-Fi hotspots until Google says otherwise. If your carrier forces your phone to Wi-Fi when in range, visit the forum for your phone to see if there's a workaround to stop it from happening.
• Only connect to secured services. Web pages that use HTTPS or another secure connection will include HTTPS in the URL. You should contact any company whose services you use and ask if the connection is secured using TLS 1.2, and if so your connection with that service is safe for now.
• If you have a paid VPN service that you trust you should enable the connection full-time until further notice. Resist the temptation to rush and sign-up for any free VPN service until you can find out if they have been vetted and will keep your data secure. Most don't.
• Use a wired network if your router and computer both have a spot to plug in an Ethernet cable. This exploit only affects 802.11 traffic between a Wi-Fi router and a connected device. Ethernet cables are relatively cheap and an eyesore strung across the carpet is worth it. Look for a Cat6 or Cat5e spec cable and there should be no configuration needed once plugged in. 
• If you use a Chromebook or MacBook, this USB Ethernet adapter is plug-and-play. 

Did you know that Thanksgiving is the peak day for home cooking fires each year? Avoid accidents by following the tips from the  National Fire Protection Association  (NFPA). You can also c heck out this NFPA Infographic for more Thanksgiving Day Cooking Fire Safety Tips and Statistics.

Unsafe handling and/or under-cooking turkeys can cause food-borne illness. Keep you and your Thanksgiving guests safe by following the tips from FoodSafety.gov.  Check out this convenient  FoodSafety Infographic for turkey cooking tips at a glance.