[Caunnysup]

Well there is this guy at work. He claims he can get into anybody's email as long as he knows what the email address is. Well knowing this guy and judging what he might be able to do i decided to let him know what my email addy is so he could "try" to get into it.

Well today he comes into my office and brings up yahoo mail, and shows me an email from an "email cracking group" that says they have cracked my email for him and as proof sent the confirmation email to him from my account.

Well i just had to laugh at this as this guy said he could do it and then it turns out that he had to have some self proclaimed email cracking group do this for him. He still thinks he's "the man" for doing this. Well i told him to bring up the email again and look at the headers. No where in the headers does it list the ip address of the email server nor does it list the actuall domain name from where my email is provided from. I sent myself a email so i could show him the header file from that email to prove that this group is full of it as they said for him to get my email password he has to give them $200.

Well when comparing the header files the first number of the ip isn't even the same, not to mention it's a 3 digit set to start with compared to the actuall one which is only 2 digits. I told him that they had spoofed the part where it says it came from to make him think that it came from me and he wouldn't believe me at all.

Now i'm no IT proffessional here, but i do know alot about computers and networks and how both are run. You can mask where the email originated and everything, but why go through the trouble of doing that with the confirmation email to prove that they got into my account. It would be more legit if the header said it came from the ip and domain where my email is provided correct? Not to mention that i traced the ip that was in the header file and it showed up to belong to a company with the website of the following http://www.apnic.net.

So does anyone have any suggestions as to how to prove to this guy that they faked this email to him w/out having to pay the rip off fee of $200 to get my password from them? (I'm almost 100% certain that this is all fake due to the evidence that i came up with quickly.)

This guy called bs on me in regards to how much i know saying that what i've shown him is just a load of bs and that i'm trying to save face being my email was, acording to him, hacked into. Does anyone have a good way at getting back at this guy in a technological way to prove to him that i'm not full of crap like he believes i am?