The PDF also states that part of what helped form his opinion about the hard drive being the wrong one was that the son's resume was found on the drive, a resume that indicated the son was living and working in Brooklyn during the alledged period of sharing.

With that in mind, is it possible or even probable that the son sent his resume to his mother to look over, edit, brag about to her friends, or print out and hand to a potential employer?

Furthermore does the lack of emails on a drive prove anything? Many users now do not use POP3 for their email and instead rely on an ISPs webmail features to send and read email, that wouldn't leave emails on the hard drive in question now would it?

Also speaking to the IP question, can a wireless router be configured to be a transparent bridge to the internet? He says this computer he has a drive image for had a public IP assigned to it, in bridging mode the DHCP functions of a wireless router would be disabled...