What in the world is Netsuite using to evaluate password strength?

I just input a 25 digit password that the best password evaluator I know of says would take centuries to crack...

https://dl.dropboxusercontent.com/u/209/zxcvbn/test/index.html

and Netsuite says it is weak.

According to the common dictum, "over the past 20 years we have done a good job of teaching ourselves to select passwords that are hard for humans to remember but easy for computers to crack".

I understand that NetSuite (thankfully) has protection against password cracking attempts, but boy I wish NetSuite would get practical.

M>4:J/aJ is not a STRONG password as NetSuite says.  It only 8 digits, and to remember it the employee will have written it down somewhere obvious (probably a post-it note on their computer screen).