I agree... it might not matter to them if their password leads to stolen data, but it sure matters to the company. Six characters is still very weak, however. Even with a capital and number, the password would take no more than ten minutes to crack on a reasonably-powered machine (or less...