If you print out the passwords that were counted in the "howbad" method, it appears that there is one password that has all letters The help method determines if the password is bad only when there are no symbols and is composed only of letters.
Following up on Ehren's point -- your job in this case involves refactoring. So you are assuming that the original code produced correct results -- it just did so in a bad way. You want to make sure that your revised code produces exactly the same results as the original would have...
