1. because you are an incompetent scripting kiddy.
2. the mask has to be at least the length to be bruteforced at maximum, say 10 times ?l for a 10 char password
2. the mask has to be at least the length to be bruteforced at maximum, say 10 times ?l for a 10 char password