Okay, here's what you do:
- Take out your laptop.
- Fire up Mr. Ripper.
- Feed the output to The Festival Speech Synthesis System.
- Laugh at them for using such a simple password.
- Direct them to the CERT Password Guidelines so they can provide more of a challenge next time.
As for Math problems, check out tilly's homenode, he has some good links including the Spooky math problem.