Task 1. A website requires a user to choose a username and a password. The username must be 6 characters long while the password must be 8 characters long. The characters are either uppercase English letters, lowercase English letters, or digits, i.e. [a-z, A-Z, 0-9]. a) Assuming the administrator of the website is trustworthy, explain two difficulties with storing the username and password, unmodified, in the database used by the website. b) Explain the recommended method for storing and saving the username and password information in the database. c) An attacker is attempting an online attack on the website. The attacker uses its computer to automatically submit different passwords for a single username. Assuming other restrictions for the user and password combination cannot be added, explain one method that can be used to reduce the chance the attacker will be successful. Also explain a disadvantage of the proposed method. d) Similar to part (c), but now the attacker is trying common passwords with a different username each attempt. Assuming other restrictions for the user and password combination cannot be added, explain one method that can be used to reduce the chance the attacker will be successful. Also explain a drawback of the proposed method. e) Explain an advantage and disadvantage of using computer generated passwords for the website. f) If an attacker attempts a brute force attack and can test passwords at a rate of 108 passwords per second, what is the maximum time it takes to find a correct password? g) What protocol(s) should be used so that information transferred between users and the web server are confidential