[branden]

"Mitnick said that per AT&T policy, his password could only be digits and no more than eight characters long."

[paulsilver]

Thanks branden, I didn't re-read far enough down the article.