XKCD all the way!
When I am talking to someone who does not understand that having a single short word with a number at the end is not secure it is great to be able to point them to XKCD. It is succinct, to the point and easily understood. Additionally this can then act as a basis to discuss with them how to create passwords that they can remember and yet be orders of magnitude more secure, however, if all they get out of the process is that they create passwords that improve even slightly, it is still better than where they were.
Biting the hand that feeds IT
