If the lady was able to enter a 4 letter password, or the guy who said one of his people entered a 3 letter password, thats pretty much the admins fault for not setting the requirement up to at least...