Do people still think this was created by the NSA? It seems extraordinarily unlikely that they would use such a weak password, one that you would expect to fall to a rules based engine. The only way I could even imagine that happening is as a bit of misdirection, and there must surely be misdirection you can do that doesn't compromise your security.
Title: Obama Order Sped Up Wave of Cyberattacks Against Iran [1]
_____________
[1] There's no doubt that the US has developed cyberweapons, cyberweapons have been used under Obama, or that flame is one of such a class of weapons. The attribution of flame is sort of a moot point re: "It was reported in the nytimes that this is indeed a cyberweapons". Viz:
"Mr. Obama decided that the cyberattacks should proceed..."
"The United States government...acknowledged developing cyberweapons"...and now
"another cyberweapon called Flame that was recently discovered to have attacked" etc. per NYT.