Not really his fault a couple paragraphs down he reveals this gem:

Mitnick said that per AT&T policy, his password could only be digits and no more than eight characters long.